---
apiVersion: batch/v1
items:
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nc9h97h56ch8ch5f8h5cch67dh567hd9hfdh57bhc8h66fh575hdbh5c7h59ch5c4h5fch5cbhbfhcch684h69h665hfbh67bh54h5bbh5d8h577h5d9q
    creationTimestamp: "2026-03-18T13:43:06Z"
    generation: 1
    labels:
      service: cinder
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"b8efc04d-0032-4f22-aa11-807f7d9d77d2"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"cinder-07518-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"db-sync-config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:43:06Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:43:46Z"
    name: cinder-07518-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Cinder
      name: cinder-07518
      uid: b8efc04d-0032-4f22-aa11-807f7d9d77d2
    resourceVersion: "32921"
    uid: d041f46e-b13c-4cce-9d7d-f41293dd7754
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: d041f46e-b13c-4cce-9d7d-f41293dd7754
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: d041f46e-b13c-4cce-9d7d-f41293dd7754
          batch.kubernetes.io/job-name: cinder-07518-db-sync
          controller-uid: d041f46e-b13c-4cce-9d7d-f41293dd7754
          job-name: cinder-07518-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "TRUE"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-cinder-api@sha256:574a17f0877c175128a764f2b37fc02456649c8514689125718ce6ca974bfb6b
          imagePullPolicy: IfNotPresent
          name: cinder-07518-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/cinder/cinder.conf.d
            name: db-sync-config-data
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-07518
        serviceAccountName: cinder-cinder-07518
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-07518-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-07518-config-data
        - name: db-sync-config-data
          secret:
            defaultMode: 420
            items:
            - key: 00-global-defaults.conf
              path: 00-global-defaults.conf
            - key: 02-global-custom.conf
              path: 02-global-custom.conf
            secretName: cinder-07518-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:43:46Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:43:46Z"
      lastTransitionTime: "2026-03-18T13:43:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:43:46Z"
      lastTransitionTime: "2026-03-18T13:43:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:43:06Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5b7h9h666h675hd4hcch77h577h5f5h96h9fhf5h68fh694h575hdch99h5c7h7fh8ch5bbhcch666h556h57dh56h8dhd6h558h5fbh668h59bq
    creationTimestamp: "2026-03-18T13:42:50Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: cinder_cb39
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"f0539cf2-661f-4be1-917e-05a2d8165e9a"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:50Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:42:56Z"
    name: cinder-cb39-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: cinder
      uid: f0539cf2-661f-4be1-917e-05a2d8165e9a
    resourceVersion: "31217"
    uid: b1016f31-ebf3-444d-9608-d89d9243e0ea
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: b1016f31-ebf3-444d-9608-d89d9243e0ea
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: b1016f31-ebf3-444d-9608-d89d9243e0ea
          batch.kubernetes.io/job-name: cinder-cb39-account-create-update
          controller-uid: b1016f31-ebf3-444d-9608-d89d9243e0ea
          job-name: cinder-cb39-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "cinder" ]; then
                GRANT_DATABASE="cinder"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'cinder_cb39'@'localhost';
            CREATE USER IF NOT EXISTS 'cinder_cb39'@'%';

            ALTER USER 'cinder_cb39'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'cinder_cb39'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'cinder_cb39'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'cinder_cb39'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "cinder_cb39" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='cinder_cb39' and host='localhost';" )

            if [[ ${username} != "cinder_cb39" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: cinder-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:42:56Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:42:56Z"
      lastTransitionTime: "2026-03-18T13:42:56Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:42:56Z"
      lastTransitionTime: "2026-03-18T13:42:56Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:50Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5d4h559hfchf7h665h67ch544h4h5dbh68chch5b4h589hcch644h57bh688h56h646h67bh56ch68bh546h5h656h594h656h57h5b7h8dhcch59fq
    creationTimestamp: "2026-03-18T13:42:50Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: cinder
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"f36beb95-1423-414c-8191-cf8a76089dd9"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:50Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:42:55Z"
    name: cinder-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: cinder
      uid: f36beb95-1423-414c-8191-cf8a76089dd9
    resourceVersion: "31205"
    uid: d902fa92-a4d9-471b-8648-deea4ea7e25d
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: d902fa92-a4d9-471b-8648-deea4ea7e25d
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: d902fa92-a4d9-471b-8648-deea4ea7e25d
          batch.kubernetes.io/job-name: cinder-db-create
          controller-uid: d902fa92-a4d9-471b-8648-deea4ea7e25d
          job-name: cinder-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS cinder; ALTER DATABASE cinder CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE cinder;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:42:55Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:42:55Z"
      lastTransitionTime: "2026-03-18T13:42:55Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:42:55Z"
      lastTransitionTime: "2026-03-18T13:42:55Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:50Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n59bh54h65hd7h5f8h644h596h554h65fh69h66bhdh84hb7hd5h58dh68fh8dhb7h549h647h545h5fh645h56hf7h74h564hd6h677h5d8h5c7q
    creationTimestamp: "2026-03-18T13:42:18Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: glance_0dea
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"9e3d6717-79a3-4e51-a9bf-21ab1e19639e"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:18Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:42:24Z"
    name: glance-0dea-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: glance
      uid: 9e3d6717-79a3-4e51-a9bf-21ab1e19639e
    resourceVersion: "30550"
    uid: b296e607-8020-46a9-8c94-15072d7cf61f
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: b296e607-8020-46a9-8c94-15072d7cf61f
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: b296e607-8020-46a9-8c94-15072d7cf61f
          batch.kubernetes.io/job-name: glance-0dea-account-create-update
          controller-uid: b296e607-8020-46a9-8c94-15072d7cf61f
          job-name: glance-0dea-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "glance" ]; then
                GRANT_DATABASE="glance"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'glance_0dea'@'localhost';
            CREATE USER IF NOT EXISTS 'glance_0dea'@'%';

            ALTER USER 'glance_0dea'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'glance_0dea'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'glance_0dea'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'glance_0dea'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "glance_0dea" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='glance_0dea' and host='localhost';" )

            if [[ ${username} != "glance_0dea" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: glance-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:42:24Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:42:24Z"
      lastTransitionTime: "2026-03-18T13:42:24Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:42:24Z"
      lastTransitionTime: "2026-03-18T13:42:24Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:18Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5d7h67ch676h7dh5bfhcchb5hbfh689h76h8bh8bh7ch66ch59chfbh4h545h647h9h5d9h58ch8dhfbh65h558hc8h66dh648h549h9hfbq
    creationTimestamp: "2026-03-18T13:42:18Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: glance
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6b4e51bd-1df5-47e0-9014-2bc581cdf1d1"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:18Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:42:23Z"
    name: glance-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: glance
      uid: 6b4e51bd-1df5-47e0-9014-2bc581cdf1d1
    resourceVersion: "30535"
    uid: e7b93ca3-1c3b-47e3-961d-cb8fa84d5e19
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: e7b93ca3-1c3b-47e3-961d-cb8fa84d5e19
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: e7b93ca3-1c3b-47e3-961d-cb8fa84d5e19
          batch.kubernetes.io/job-name: glance-db-create
          controller-uid: e7b93ca3-1c3b-47e3-961d-cb8fa84d5e19
          job-name: glance-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS glance; ALTER DATABASE glance CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE glance;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:42:23Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:42:23Z"
      lastTransitionTime: "2026-03-18T13:42:23Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:42:23Z"
      lastTransitionTime: "2026-03-18T13:42:23Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:18Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5b9h56h4h675h64hddh596h685h5f6h668h579h5ch5bbh5b5h599h687h57ch684hfch59h54bh59h645h576h95h5fhf6h696h77hdbh565hb8q
    creationTimestamp: "2026-03-18T13:42:29Z"
    generation: 1
    labels:
      service: glance
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"01e7222e-d31e-438f-9f9a-524d84f0c3e0"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"glance-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/glance/glance.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"db-sync-config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:29Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:43:00Z"
    name: glance-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: glance.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Glance
      name: glance-4f519
      uid: 01e7222e-d31e-438f-9f9a-524d84f0c3e0
    resourceVersion: "31319"
    uid: ebad0c37-b2d0-4f69-94ad-8ae9fff1e38d
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: ebad0c37-b2d0-4f69-94ad-8ae9fff1e38d
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"storage","namespace":"openstack","interface":"storage"}]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: ebad0c37-b2d0-4f69-94ad-8ae9fff1e38d
          batch.kubernetes.io/job-name: glance-db-sync
          controller-uid: ebad0c37-b2d0-4f69-94ad-8ae9fff1e38d
          job-name: glance-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-glance-api@sha256:dae5e39780d5a15eed030c7009f8e5317139d447558ac83f038497be594be120
          imagePullPolicy: IfNotPresent
          name: glance-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42415
            runAsUser: 42415
            seccompProfile:
              type: RuntimeDefault
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/glance/glance.conf.d
            name: db-sync-config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: glance-glance-4f519
        serviceAccountName: glance-glance-4f519
        terminationGracePeriodSeconds: 30
        volumes:
        - name: db-sync-config-data
          secret:
            defaultMode: 420
            items:
            - key: 00-config.conf
              path: 00-config.conf
            - key: 01-config.conf
              path: 01-config.conf
            secretName: glance-4f519-config-data
        - name: config-data
          secret:
            defaultMode: 420
            secretName: glance-4f519-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:43:00Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:43:00Z"
      lastTransitionTime: "2026-03-18T13:43:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:43:00Z"
      lastTransitionTime: "2026-03-18T13:43:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:29Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n67ch597hfh669h5c8h79h688h599hc8hd7h5cch597h5ch584h678hbch5b8h5c4hdfh67ch5b6hfh66hbdhdbh64dh5bh667h656hcdh65h585q
    creationTimestamp: "2026-03-18T13:43:06Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"7a090ae4-1df7-44e6-b5a4-a285cdea7edb"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:43:06Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:43:12Z"
    name: ironic-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: ironic
      uid: 7a090ae4-1df7-44e6-b5a4-a285cdea7edb
    resourceVersion: "32091"
    uid: 9a993b1f-70ae-4590-9036-f6dafb44a4e3
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 9a993b1f-70ae-4590-9036-f6dafb44a4e3
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 9a993b1f-70ae-4590-9036-f6dafb44a4e3
          batch.kubernetes.io/job-name: ironic-db-create
          controller-uid: 9a993b1f-70ae-4590-9036-f6dafb44a4e3
          job-name: ironic-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS ironic; ALTER DATABASE ironic CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON ironic.* TO 'ironic'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON ironic.* TO 'ironic'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE ironic;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:43:12Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:43:12Z"
      lastTransitionTime: "2026-03-18T13:43:12Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:43:12Z"
      lastTransitionTime: "2026-03-18T13:43:12Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:43:06Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n7h674h55hf7h7bhfh65bh5b6h59h557h56dh5fbhf9hdh99h8fh696h9dh56dh64fh7hfdh647h68bhddhcchd6h596h685h5bfh686h658q
    creationTimestamp: "2026-03-18T13:43:17Z"
    generation: 1
    labels:
      service: ironic
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c08f0dd8-11f1-46c5-a6fd-d2801a718ebe"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"ironic-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabaseHost"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DatabaseName"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DeployHTTPURL"}:
                      .: {}
                      f:name: {}
                    k:{"name":"IngressDomain"}:
                      .: {}
                      f:name: {}
                    k:{"name":"IronicPassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"PodName"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PodNamespace"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"ProvisionNetwork"}:
                      .: {}
                      f:name: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-merged"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:43:17Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:43:54Z"
    name: ironic-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Ironic
      name: ironic
      uid: c08f0dd8-11f1-46c5-a6fd-d2801a718ebe
    resourceVersion: "33366"
    uid: c321759e-702c-4ebc-83d7-995b9aa6cd7f
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: c321759e-702c-4ebc-83d7-995b9aa6cd7f
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: c321759e-702c-4ebc-83d7-995b9aa6cd7f
          batch.kubernetes.io/job-name: ironic-db-sync
          controller-uid: c321759e-702c-4ebc-83d7-995b9aa6cd7f
          job-name: ironic-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/dbsync.sh
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor@sha256:0312c8ff4b98bfc1e0c9bb717adb3247305749e34533eff91099c88ed9a1ed7f
          imagePullPolicy: IfNotPresent
          name: ironic-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/init.sh
          command:
          - /bin/bash
          env:
          - name: IronicPassword
            valueFrom:
              secretKeyRef:
                key: IronicPassword
                name: osp-secret
          - name: PodName
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: PodNamespace
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: ProvisionNetwork
          - name: DatabaseHost
            value: openstack.openstack.svc
          - name: DatabaseName
            value: ironic
          - name: DeployHTTPURL
          - name: IngressDomain
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor@sha256:0312c8ff4b98bfc1e0c9bb717adb3247305749e34533eff91099c88ed9a1ed7f
          imagePullPolicy: IfNotPresent
          name: init
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: ironic-config-data
        - emptyDir: {}
          name: config-data-merged
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:43:54Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:43:54Z"
      lastTransitionTime: "2026-03-18T13:43:54Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:43:54Z"
      lastTransitionTime: "2026-03-18T13:43:54Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:43:17Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nfh58chdfh589h666h5d9h65dhb6h599hdch575h544hb8h8bh5ch684h59dhfdh5fdh8fh544h5dh598hd8h54dh64h67dh5f5h596hcfh8fhddq
    creationTimestamp: "2026-03-18T13:43:06Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_f5fe
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"864a9467-f376-4253-9b24-645eb0858a03"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:43:06Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:43:16Z"
    name: ironic-f5fe-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: ironic
      uid: 864a9467-f376-4253-9b24-645eb0858a03
    resourceVersion: "32218"
    uid: 1841fe69-1c5f-42a2-8528-c8ac201f68de
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 1841fe69-1c5f-42a2-8528-c8ac201f68de
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 1841fe69-1c5f-42a2-8528-c8ac201f68de
          batch.kubernetes.io/job-name: ironic-f5fe-account-create-update
          controller-uid: 1841fe69-1c5f-42a2-8528-c8ac201f68de
          job-name: ironic-f5fe-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "ironic" ]; then
                GRANT_DATABASE="ironic"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'ironic_f5fe'@'localhost';
            CREATE USER IF NOT EXISTS 'ironic_f5fe'@'%';

            ALTER USER 'ironic_f5fe'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'ironic_f5fe'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_f5fe'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_f5fe'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "ironic_f5fe" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='ironic_f5fe' and host='localhost';" )

            if [[ ${username} != "ironic_f5fe" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: ironic-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:43:16Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:43:16Z"
      lastTransitionTime: "2026-03-18T13:43:16Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:43:16Z"
      lastTransitionTime: "2026-03-18T13:43:16Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:43:06Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n664h676h65dh6h7dh58h65fh68bhc9h549hc5hdh5f5h576h566h54chb4h545h678h74h94h66dh4h97h657h56dh9ch7dh5b8hb6h669h65dq
    creationTimestamp: "2026-03-18T13:43:54Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_inspector_1f88
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"5f430c28-81f3-4e9c-bac2-d968ff7b1180"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:43:54Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:44:02Z"
    name: ironic-inspector-1f88-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: ironic-inspector
      uid: 5f430c28-81f3-4e9c-bac2-d968ff7b1180
    resourceVersion: "33845"
    uid: e5bff4bc-5598-440d-aa08-b2152e03ca61
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: e5bff4bc-5598-440d-aa08-b2152e03ca61
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: e5bff4bc-5598-440d-aa08-b2152e03ca61
          batch.kubernetes.io/job-name: ironic-inspector-1f88-account-create-update
          controller-uid: e5bff4bc-5598-440d-aa08-b2152e03ca61
          job-name: ironic-inspector-1f88-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "ironic_inspector" ]; then
                GRANT_DATABASE="ironic_inspector"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'ironic_inspector_1f88'@'localhost';
            CREATE USER IF NOT EXISTS 'ironic_inspector_1f88'@'%';

            ALTER USER 'ironic_inspector_1f88'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'ironic_inspector_1f88'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_inspector_1f88'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_inspector_1f88'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "ironic_inspector_1f88" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='ironic_inspector_1f88' and host='localhost';" )

            if [[ ${username} != "ironic_inspector_1f88" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: ironic-inspector-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:44:02Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:44:02Z"
      lastTransitionTime: "2026-03-18T13:44:02Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:44:02Z"
      lastTransitionTime: "2026-03-18T13:44:02Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:43:54Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n65h5f8h56fh58fh59fh5bh599h65dh5dchcbh658h5cdh554h598h5b8h54h699h5dhb5h5dfh595h55h645h68dh54fh5cdh5ddhcfh54chd4h97h75q
    creationTimestamp: "2026-03-18T13:43:54Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_inspector
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"15073ca8-73e6-4ecc-8c53-b3593348028d"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:43:54Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:44:02Z"
    name: ironic-inspector-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: ironic-inspector
      uid: 15073ca8-73e6-4ecc-8c53-b3593348028d
    resourceVersion: "33854"
    uid: 312779e2-c707-4da4-a89b-6242203e7e3f
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 312779e2-c707-4da4-a89b-6242203e7e3f
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 312779e2-c707-4da4-a89b-6242203e7e3f
          batch.kubernetes.io/job-name: ironic-inspector-db-create
          controller-uid: 312779e2-c707-4da4-a89b-6242203e7e3f
          job-name: ironic-inspector-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS ironic_inspector; ALTER DATABASE ironic_inspector CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON ironic_inspector.* TO 'ironic_inspector'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON ironic_inspector.* TO 'ironic_inspector'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE ironic_inspector;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:44:02Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:44:02Z"
      lastTransitionTime: "2026-03-18T13:44:02Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:44:02Z"
      lastTransitionTime: "2026-03-18T13:44:02Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:43:54Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nc4h65fh66ch68ch99h649h67ch5fch584h5b5h665h9bh66ch86h674hf5h88h5bfhdbh559h64bh674hdfh645hc6hf5h599h8fh587h58bh596h678q
    creationTimestamp: "2026-03-18T13:44:09Z"
    generation: 1
    labels:
      component: inspector
      service: ironic
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"fe24e64a-05cf-47e1-ad78-293873fef7d3"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"ironic-inspector-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"var-lib-ironic"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"var-lib-ironic-inspector-dhcp-hostsdir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:44:09Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:44:35Z"
    name: ironic-inspector-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: IronicInspector
      name: ironic-inspector
      uid: fe24e64a-05cf-47e1-ad78-293873fef7d3
    resourceVersion: "34814"
    uid: 8c87a3ea-3330-4433-97bc-d39afbc17bd2
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 8c87a3ea-3330-4433-97bc-d39afbc17bd2
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 8c87a3ea-3330-4433-97bc-d39afbc17bd2
          batch.kubernetes.io/job-name: ironic-inspector-db-sync
          controller-uid: 8c87a3ea-3330-4433-97bc-d39afbc17bd2
          job-name: ironic-inspector-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /bin/bash -c 'ironic-inspector-dbsync
            --config-file /etc/ironic-inspector/inspector.conf --config-dir /etc/ironic-inspector/inspector.conf.d
            upgrade'
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector@sha256:ccdc96c8db6368182c0f0d0bc4f482ca2f757ecee75656e2715f2eaeb2662030
          imagePullPolicy: IfNotPresent
          name: ironic-inspector-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-inspector-scripts
        - name: config
          secret:
            defaultMode: 416
            secretName: ironic-inspector-config-data
        - emptyDir: {}
          name: var-lib-ironic
        - emptyDir: {}
          name: var-lib-ironic-inspector-dhcp-hostsdir
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:44:35Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:44:35Z"
      lastTransitionTime: "2026-03-18T13:44:35Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:44:35Z"
      lastTransitionTime: "2026-03-18T13:44:35Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:44:09Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5d6h588h8ch5fbh684hb7hd8h554h5b8h65dh576h67fh59dh5dfh565h5bbh549h549h5ddh9fh569hd4h564h665hfdh7chd6h64fh559h675h688h688q
    creationTimestamp: "2026-03-18T13:42:20Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: keystone_8ae1
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"7e343c6f-ce6f-492e-b2f0-40e4d9e39ca8"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:20Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:42:25Z"
    name: keystone-8ae1-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: keystone
      uid: 7e343c6f-ce6f-492e-b2f0-40e4d9e39ca8
    resourceVersion: "30555"
    uid: dd4c5a4c-5ca5-44de-8ce7-3b504722681e
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: dd4c5a4c-5ca5-44de-8ce7-3b504722681e
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: dd4c5a4c-5ca5-44de-8ce7-3b504722681e
          batch.kubernetes.io/job-name: keystone-8ae1-account-create-update
          controller-uid: dd4c5a4c-5ca5-44de-8ce7-3b504722681e
          job-name: keystone-8ae1-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "keystone" ]; then
                GRANT_DATABASE="keystone"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'keystone_8ae1'@'localhost';
            CREATE USER IF NOT EXISTS 'keystone_8ae1'@'%';

            ALTER USER 'keystone_8ae1'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'keystone_8ae1'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'keystone_8ae1'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'keystone_8ae1'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "keystone_8ae1" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='keystone_8ae1' and host='localhost';" )

            if [[ ${username} != "keystone_8ae1" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: keystone-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:42:24Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:42:24Z"
      lastTransitionTime: "2026-03-18T13:42:24Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:42:25Z"
      lastTransitionTime: "2026-03-18T13:42:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:20Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n566h649h65h5b5h59fhffh67fh5f9h56fhf9h559h5ch57ch5c6h5f6h58fh556h549h5b8h547h5c9hbdh65h54fh54h5f5h566h688h5hd9h548h697q
    creationTimestamp: "2026-03-18T13:43:16Z"
    generation: 1
    labels:
      owner: keystone
      service: keystone
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"85f96425-0da7-4bf2-8dba-8a223394f061"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"keystone-bootstrap"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_INTERNAL_URL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_PASSWORD"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"OS_BOOTSTRAP_PROJECT_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_PUBLIC_URL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_REGION_ID"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_SERVICE_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_USERNAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/keystone/credential-keys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/keystone/fernet-keys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"credential-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"fernet-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:43:16Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:43:34Z"
    name: keystone-bootstrap
    namespace: openstack
    ownerReferences:
    - apiVersion: keystone.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: KeystoneAPI
      name: keystone
      uid: 85f96425-0da7-4bf2-8dba-8a223394f061
    resourceVersion: "32520"
    uid: 2be1522e-3426-4bea-b6c3-22de6a676fcb
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 2be1522e-3426-4bea-b6c3-22de6a676fcb
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 2be1522e-3426-4bea-b6c3-22de6a676fcb
          batch.kubernetes.io/job-name: keystone-bootstrap
          controller-uid: 2be1522e-3426-4bea-b6c3-22de6a676fcb
          job-name: keystone-bootstrap
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && keystone-manage bootstrap
          command:
          - /bin/bash
          env:
          - name: OS_BOOTSTRAP_PASSWORD
            valueFrom:
              secretKeyRef:
                key: AdminPassword
                name: osp-secret
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: OS_BOOTSTRAP_INTERNAL_URL
            value: https://keystone-internal.openstack.svc:5000
          - name: OS_BOOTSTRAP_PROJECT_NAME
            value: admin
          - name: OS_BOOTSTRAP_PUBLIC_URL
            value: https://keystone-public-openstack.apps.sno.openstack.lab
          - name: OS_BOOTSTRAP_REGION_ID
            value: regionOne
          - name: OS_BOOTSTRAP_SERVICE_NAME
            value: keystone
          - name: OS_BOOTSTRAP_USERNAME
            value: admin
          image: quay.io/podified-antelope-centos9/openstack-keystone@sha256:3a148c87899d4cbbb6bbe1203ad6c237fb295b5f42abda425dc0329305723414
          imagePullPolicy: IfNotPresent
          name: keystone-bootstrap
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: keystone-api-config.json
          - mountPath: /etc/keystone/fernet-keys
            name: fernet-keys
            readOnly: true
          - mountPath: /etc/keystone/credential-keys
            name: credential-keys
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: keystone-keystone
        serviceAccountName: keystone-keystone
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: keystone-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: keystone-config-data
        - name: fernet-keys
          secret:
            defaultMode: 420
            items:
            - key: FernetKeys0
              path: "0"
            - key: FernetKeys1
              path: "1"
            - key: FernetKeys2
              path: "2"
            - key: FernetKeys3
              path: "3"
            - key: FernetKeys4
              path: "4"
            secretName: keystone
        - name: credential-keys
          secret:
            defaultMode: 420
            items:
            - key: CredentialKeys0
              path: "0"
            - key: CredentialKeys1
              path: "1"
            secretName: keystone
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:43:33Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:43:33Z"
      lastTransitionTime: "2026-03-18T13:43:33Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:43:34Z"
      lastTransitionTime: "2026-03-18T13:43:34Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:43:16Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5ffh66h5b8h64ch666hcdh546hf5h545h654h5ffh587h5ddh7ch57chd5h67fhbdh5b7hb9h67dh699hd9h5c8h5c7h5dbhdfh5dch96h5bh5c5h8dq
    creationTimestamp: "2026-03-18T13:42:19Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: keystone
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6ff0a8f2-abf4-4e38-9fc8-044e4b42bac6"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:19Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:42:24Z"
    name: keystone-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: keystone
      uid: 6ff0a8f2-abf4-4e38-9fc8-044e4b42bac6
    resourceVersion: "30545"
    uid: ead61a1a-d1be-4548-98f3-b6ee6994a9ac
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: ead61a1a-d1be-4548-98f3-b6ee6994a9ac
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: ead61a1a-d1be-4548-98f3-b6ee6994a9ac
          batch.kubernetes.io/job-name: keystone-db-create
          controller-uid: ead61a1a-d1be-4548-98f3-b6ee6994a9ac
          job-name: keystone-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS keystone; ALTER DATABASE keystone CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE keystone;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:42:24Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:42:24Z"
      lastTransitionTime: "2026-03-18T13:42:24Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:42:24Z"
      lastTransitionTime: "2026-03-18T13:42:24Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:19Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n6fh5chcbh668h79h58h56ch9bh56bh58bh554h57ch7fh67bh5f6h5b4h5dh567h569h579hfhf8h5f5h5b6h5fch69h85h695hd9h59chfbh6bq
    creationTimestamp: "2026-03-18T13:42:51Z"
    generation: 1
    labels:
      owner: keystone
      service: keystone
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"85f96425-0da7-4bf2-8dba-8a223394f061"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"keystone-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/keystone/keystone.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"credential-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"fernet-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:51Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:43:05Z"
    name: keystone-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: keystone.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: KeystoneAPI
      name: keystone
      uid: 85f96425-0da7-4bf2-8dba-8a223394f061
    resourceVersion: "31547"
    uid: 6002a735-289e-4abf-ab67-97afa2eac5a3
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 6002a735-289e-4abf-ab67-97afa2eac5a3
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 6002a735-289e-4abf-ab67-97afa2eac5a3
          batch.kubernetes.io/job-name: keystone-db-sync
          controller-uid: 6002a735-289e-4abf-ab67-97afa2eac5a3
          job-name: keystone-db-sync
      spec:
        containers:
        - args:
          - -c
          - keystone-manage db_sync
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-keystone@sha256:3a148c87899d4cbbb6bbe1203ad6c237fb295b5f42abda425dc0329305723414
          imagePullPolicy: IfNotPresent
          name: keystone-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42425
            runAsUser: 42425
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/keystone/keystone.conf
            name: config-data
            readOnly: true
            subPath: keystone.conf
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: keystone-keystone
        serviceAccountName: keystone-keystone
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: keystone-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: keystone-config-data
        - name: fernet-keys
          secret:
            defaultMode: 420
            items:
            - key: FernetKeys0
              path: "0"
            - key: FernetKeys1
              path: "1"
            - key: FernetKeys2
              path: "2"
            - key: FernetKeys3
              path: "3"
            - key: FernetKeys4
              path: "4"
            secretName: keystone
        - name: credential-keys
          secret:
            defaultMode: 420
            items:
            - key: CredentialKeys0
              path: "0"
            - key: CredentialKeys1
              path: "1"
            secretName: keystone
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:43:05Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:43:05Z"
      lastTransitionTime: "2026-03-18T13:43:05Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:43:05Z"
      lastTransitionTime: "2026-03-18T13:43:05Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:51Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n699h548h594h599h694h569h567h68bhffh9bh65dh67h56dh95h547hc4h59h694h6chdch648h5cfhc4hcdh8bh8hfh69h57ch67bh5dh689q
    creationTimestamp: "2026-03-18T13:42:51Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: neutron_ac18
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"ae8e0848-58b1-4836-9de4-fd9f4c4a30be"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:51Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:42:59Z"
    name: neutron-ac18-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: neutron
      uid: ae8e0848-58b1-4836-9de4-fd9f4c4a30be
    resourceVersion: "31293"
    uid: bc5f3d10-8389-4a69-bbd2-581b461105d8
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: bc5f3d10-8389-4a69-bbd2-581b461105d8
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: bc5f3d10-8389-4a69-bbd2-581b461105d8
          batch.kubernetes.io/job-name: neutron-ac18-account-create-update
          controller-uid: bc5f3d10-8389-4a69-bbd2-581b461105d8
          job-name: neutron-ac18-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "neutron" ]; then
                GRANT_DATABASE="neutron"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'neutron_ac18'@'localhost';
            CREATE USER IF NOT EXISTS 'neutron_ac18'@'%';

            ALTER USER 'neutron_ac18'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'neutron_ac18'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'neutron_ac18'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'neutron_ac18'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "neutron_ac18" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='neutron_ac18' and host='localhost';" )

            if [[ ${username} != "neutron_ac18" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: neutron-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:42:59Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:42:59Z"
      lastTransitionTime: "2026-03-18T13:42:59Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:42:59Z"
      lastTransitionTime: "2026-03-18T13:42:59Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:51Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n55h55dhcdh549h575h5fbh688h65bh5c5h6fh98h587h55fh676h5d5h588h5b8h5dfh74h56bhc9h5ffhb5h5d9h88h648h66h597h5dh54fhbfh8bq
    creationTimestamp: "2026-03-18T13:42:51Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: neutron
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"7b7f188b-88d5-49cc-add2-030506183cba"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:51Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:42:59Z"
    name: neutron-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: neutron
      uid: 7b7f188b-88d5-49cc-add2-030506183cba
    resourceVersion: "31297"
    uid: 7e80af91-96b9-4dac-894e-481f9273a51c
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 7e80af91-96b9-4dac-894e-481f9273a51c
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 7e80af91-96b9-4dac-894e-481f9273a51c
          batch.kubernetes.io/job-name: neutron-db-create
          controller-uid: 7e80af91-96b9-4dac-894e-481f9273a51c
          job-name: neutron-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS neutron; ALTER DATABASE neutron CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE neutron;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:42:59Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:42:59Z"
      lastTransitionTime: "2026-03-18T13:42:59Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:42:59Z"
      lastTransitionTime: "2026-03-18T13:42:59Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:51Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n557h548h685h68bh5d9h79h9h74h555h67fh664h68dhf7h66dh5d9h5c9h668h59fh5b6h7fh5b4h5bch66ch67bh586hb8h656hd9h65dh7fhb5h64bq
      k8s.v1.cni.cncf.io/networks: '[{"name":"internalapi","namespace":"openstack","interface":"internalapi"}]'
    creationTimestamp: "2026-03-18T13:43:06Z"
    generation: 1
    labels:
      service: neutron
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"3825e5c8-3078-427d-ac69-0d68d3d223dd"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"neutron-db-sync"}:
                  .: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"httpd-config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:43:06Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:43:39Z"
    name: neutron-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: neutron.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NeutronAPI
      name: neutron
      uid: 3825e5c8-3078-427d-ac69-0d68d3d223dd
    resourceVersion: "32661"
    uid: dfa283a5-4840-4202-8f87-ae56443f47d1
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: dfa283a5-4840-4202-8f87-ae56443f47d1
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: dfa283a5-4840-4202-8f87-ae56443f47d1
          batch.kubernetes.io/job-name: neutron-db-sync
          controller-uid: dfa283a5-4840-4202-8f87-ae56443f47d1
          job-name: neutron-db-sync
      spec:
        containers:
        - env:
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-neutron-server@sha256:fbb5be29e9e4fa11f0743e7f74f2e80dcc7445d24770709ea0e038147f752c51
          imagePullPolicy: IfNotPresent
          name: neutron-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42435
            runAsNonRoot: true
            runAsUser: 42435
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: neutron-neutron
        serviceAccountName: neutron-neutron
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config
          secret:
            defaultMode: 420
            secretName: neutron-config
        - name: httpd-config
          secret:
            defaultMode: 420
            secretName: neutron-httpd-config
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:43:39Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:43:39Z"
      lastTransitionTime: "2026-03-18T13:43:39Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:43:39Z"
      lastTransitionTime: "2026-03-18T13:43:39Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:43:06Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5c7hf7hf4h565h55bh95h59dhf9h696hd9h5d6h7h57bh684h5h584h648h546h5cch56fh5c5h55fhddhbbh587h5d5h559h689h5fdh5f9h544hf8q
    creationTimestamp: "2026-03-18T13:44:17Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_api
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"b7701546-18df-4b18-aaed-d94e541299d9"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:44:17Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:44:35Z"
    name: nova-api-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-api
      uid: b7701546-18df-4b18-aaed-d94e541299d9
    resourceVersion: "34805"
    uid: 09318784-c63e-4af5-ae6a-70b91489a27c
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 09318784-c63e-4af5-ae6a-70b91489a27c
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 09318784-c63e-4af5-ae6a-70b91489a27c
          batch.kubernetes.io/job-name: nova-api-db-create
          controller-uid: 09318784-c63e-4af5-ae6a-70b91489a27c
          job-name: nova-api-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_api; ALTER DATABASE nova_api CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova_api'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_api.* TO 'nova_api'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_api;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:44:35Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:44:35Z"
      lastTransitionTime: "2026-03-18T13:44:35Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:44:35Z"
      lastTransitionTime: "2026-03-18T13:44:35Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:44:17Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5dfh65ch59dh65fhbfh5dbh67h665h8dh5ch698h599h64bh66dh574h84hfbh5fdh667hb4h57h544hcch5fbh698h696h65h694hbbh54h5c4h5f7q
    creationTimestamp: "2026-03-18T13:44:18Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_api_ff10
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"95a42f9b-a533-46fb-9000-1cd071827e87"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:44:18Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:44:37Z"
    name: nova-api-ff10-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-api
      uid: 95a42f9b-a533-46fb-9000-1cd071827e87
    resourceVersion: "34941"
    uid: 3f1bdad5-43b0-4765-bc4e-b4717af7392c
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 3f1bdad5-43b0-4765-bc4e-b4717af7392c
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 3f1bdad5-43b0-4765-bc4e-b4717af7392c
          batch.kubernetes.io/job-name: nova-api-ff10-account-create-update
          controller-uid: 3f1bdad5-43b0-4765-bc4e-b4717af7392c
          job-name: nova-api-ff10-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "nova_api" ]; then
                GRANT_DATABASE="nova_api"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_api_ff10'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_api_ff10'@'%';

            ALTER USER 'nova_api_ff10'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_api_ff10'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_api_ff10'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_api_ff10'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_api_ff10" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_api_ff10' and host='localhost';" )

            if [[ ${username} != "nova_api_ff10" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-api-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:44:37Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:44:37Z"
      lastTransitionTime: "2026-03-18T13:44:37Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:44:37Z"
      lastTransitionTime: "2026-03-18T13:44:37Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:44:18Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: ncbh9hc6hd6h67chfhf6h646hdch55dh66fh97h64dh559h674h59h5d8h68dh57hf6h9fh674h9fh64fh5b5h699h5c4hc9h88hc8h5f9hd6q
    creationTimestamp: "2026-03-18T13:44:19Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell0_63a9
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6eac4dae-7c9f-485a-8653-ba659d2192ef"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:44:19Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:44:38Z"
    name: nova-cell0-63a9-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-cell0
      uid: 6eac4dae-7c9f-485a-8653-ba659d2192ef
    resourceVersion: "35013"
    uid: 532525e3-9300-4587-8e90-669b5d1bcd18
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 532525e3-9300-4587-8e90-669b5d1bcd18
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 532525e3-9300-4587-8e90-669b5d1bcd18
          batch.kubernetes.io/job-name: nova-cell0-63a9-account-create-update
          controller-uid: 532525e3-9300-4587-8e90-669b5d1bcd18
          job-name: nova-cell0-63a9-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "nova_cell0" ]; then
                GRANT_DATABASE="nova_cell0"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_cell0_63a9'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_cell0_63a9'@'%';

            ALTER USER 'nova_cell0_63a9'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_cell0_63a9'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell0_63a9'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell0_63a9'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_cell0_63a9" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_cell0_63a9' and host='localhost';" )

            if [[ ${username} != "nova_cell0_63a9" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-cell0-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:44:38Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:44:38Z"
      lastTransitionTime: "2026-03-18T13:44:38Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:44:38Z"
      lastTransitionTime: "2026-03-18T13:44:38Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:44:19Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5c4h68bhb7h578hdfh588h574hffh646h545hd4h6bh5f5h67fh99h5fdh684hfbh657h5ch5f5h556h645h578h54dh59chfbh5f6h645hdbh659hf8q
    creationTimestamp: "2026-03-18T13:45:19Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e3acd656-3317-408d-a808-5793f7798204"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:45:19Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:45:38Z"
    name: nova-cell0-cell-mapping
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: e3acd656-3317-408d-a808-5793f7798204
    resourceVersion: "36342"
    uid: 9eee2691-cd45-44e2-a706-fa6df131529a
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 9eee2691-cd45-44e2-a706-fa6df131529a
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 9eee2691-cd45-44e2-a706-fa6df131529a
          batch.kubernetes.io/job-name: nova-cell0-cell-mapping
          controller-uid: 9eee2691-cd45-44e2-a706-fa6df131529a
          job-name: nova-cell0-cell-mapping
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell0
          - name: INPUT_HASH
            value: n88h698h564h546hcbh575h8h584h58dh59fh5h68dh594h99hdch665h56h558h6fh547h5cch59dh657h9h55dh55fhd4h5c5h54bh5dch689h6bq
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: cell-mapping-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell0-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell0-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:45:38Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:45:38Z"
      lastTransitionTime: "2026-03-18T13:45:38Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:45:38Z"
      lastTransitionTime: "2026-03-18T13:45:38Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:45:19Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n688h68fhdh59dh79h5c5h65h697h645h75h5b7h558hd7h658h595h94h54ch78h59fh697h59fhc7h594hf7hdbh54ch547h656h566h5f9h54chfdq
      k8s.v1.cni.cncf.io/networks: '[]'
    creationTimestamp: "2026-03-18T13:44:39Z"
    generation: 1
    labels:
      service: nova-conductor
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"ba61f117-8384-4e7f-9713-1d062804393f"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-cell0-conductor-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:44:39Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:45:13Z"
    name: nova-cell0-conductor-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell0-conductor
      uid: ba61f117-8384-4e7f-9713-1d062804393f
    resourceVersion: "35732"
    uid: 09a54e0a-c850-42b3-8839-45a5830d5cf3
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 09a54e0a-c850-42b3-8839-45a5830d5cf3
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 09a54e0a-c850-42b3-8839-45a5830d5cf3
          batch.kubernetes.io/job-name: nova-cell0-conductor-db-sync
          controller-uid: 09a54e0a-c850-42b3-8839-45a5830d5cf3
          job-name: nova-cell0-conductor-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell0
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-cell0-conductor-db-sync
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell0-conductor-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell0-conductor-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:45:13Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:45:13Z"
      lastTransitionTime: "2026-03-18T13:45:13Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:45:13Z"
      lastTransitionTime: "2026-03-18T13:45:13Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:44:39Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n64fh684h7h566h578h56bh5bh5d5h568h565h644h7dhb5h5d4hbbh99h68ch98h5c4h64h69hb8h7fh98h699h647hbh85h685h6bh5bdh695q
    creationTimestamp: "2026-03-18T13:44:17Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell0
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6e0643a2-1a30-4342-91bc-d94d9f3f0406"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:44:17Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:44:36Z"
    name: nova-cell0-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-cell0
      uid: 6e0643a2-1a30-4342-91bc-d94d9f3f0406
    resourceVersion: "34853"
    uid: ed4459af-2894-4678-b932-ffa5ffbb0233
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: ed4459af-2894-4678-b932-ffa5ffbb0233
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: ed4459af-2894-4678-b932-ffa5ffbb0233
          batch.kubernetes.io/job-name: nova-cell0-db-create
          controller-uid: ed4459af-2894-4678-b932-ffa5ffbb0233
          job-name: nova-cell0-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_cell0; ALTER DATABASE nova_cell0 CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova_cell0'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova_cell0'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_cell0;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:44:36Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:44:36Z"
      lastTransitionTime: "2026-03-18T13:44:36Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:44:36Z"
      lastTransitionTime: "2026-03-18T13:44:36Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:44:18Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5bh588h674h567h67dh655h5d6h5bch99h5fhcdh8dh5d4h589h648hc9h666hd4h5d6hf6hbfhb8h56bh56fh5c8h685h64fh65hf5h5c9h54bhb6q
    creationTimestamp: "2026-03-18T13:46:18Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e3acd656-3317-408d-a808-5793f7798204"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:46:18Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:46:28Z"
    name: nova-cell1-cell-mapping
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: e3acd656-3317-408d-a808-5793f7798204
    resourceVersion: "37235"
    uid: a0d8cf9b-f54b-4d05-9b72-76ee0a6689bc
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: a0d8cf9b-f54b-4d05-9b72-76ee0a6689bc
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: a0d8cf9b-f54b-4d05-9b72-76ee0a6689bc
          batch.kubernetes.io/job-name: nova-cell1-cell-mapping
          controller-uid: a0d8cf9b-f54b-4d05-9b72-76ee0a6689bc
          job-name: nova-cell1-cell-mapping
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell1
          - name: INPUT_HASH
            value: nd6h68h5dbh5b4hd4h684h57h57bhfbhb9h59fh86h554h649h5ffh59fh559hfch648h555h5f5hd8hf5h5fh65ch57dh59bhc5h675h649hbh68q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: cell-mapping-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:46:28Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:46:28Z"
      lastTransitionTime: "2026-03-18T13:46:28Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:46:28Z"
      lastTransitionTime: "2026-03-18T13:46:28Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:46:18Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: ndbh568h69h5d7h564hc5h589h586hfdh7ch544hb5h557hc4hb5h684h699h684h7h84h58fh598h586h584hb6hf9h697h667h54bh576h56h659q
      k8s.v1.cni.cncf.io/networks: '[]'
    creationTimestamp: "2026-03-18T13:45:21Z"
    generation: 1
    labels:
      service: nova-conductor
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a73f48da-789b-456b-a9ff-824730501290"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-cell1-conductor-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:45:21Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:45:39Z"
    name: nova-cell1-conductor-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell1-conductor
      uid: a73f48da-789b-456b-a9ff-824730501290
    resourceVersion: "36400"
    uid: ae33bdc8-343f-44ec-ba6a-08e79bbd7a4a
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: ae33bdc8-343f-44ec-ba6a-08e79bbd7a4a
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: ae33bdc8-343f-44ec-ba6a-08e79bbd7a4a
          batch.kubernetes.io/job-name: nova-cell1-conductor-db-sync
          controller-uid: ae33bdc8-343f-44ec-ba6a-08e79bbd7a4a
          job-name: nova-cell1-conductor-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell1
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-cell1-conductor-db-sync
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-conductor-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-conductor-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:45:39Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:45:39Z"
      lastTransitionTime: "2026-03-18T13:45:39Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:45:39Z"
      lastTransitionTime: "2026-03-18T13:45:39Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:45:21Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nd5h585h685h688h7ch6dh56fh664h5bch5h564h5b7h564h568h54dh54h648h645hcdh5b5h555hf9h8dh59ch558h64h574h94hb8hbhb9h677q
    creationTimestamp: "2026-03-18T13:44:19Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell1
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"d2e5ca58-1d20-4034-958d-0be9098afef0"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:44:19Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:44:38Z"
    name: nova-cell1-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-cell1
      uid: d2e5ca58-1d20-4034-958d-0be9098afef0
    resourceVersion: "34973"
    uid: f6161745-b4ee-4227-a156-22aec6285454
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: f6161745-b4ee-4227-a156-22aec6285454
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: f6161745-b4ee-4227-a156-22aec6285454
          batch.kubernetes.io/job-name: nova-cell1-db-create
          controller-uid: f6161745-b4ee-4227-a156-22aec6285454
          job-name: nova-cell1-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack-cell1.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_cell1; ALTER DATABASE nova_cell1 CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack-cell1.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_cell1.* TO 'nova_cell1'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_cell1.* TO 'nova_cell1'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack-cell1.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_cell1;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:44:38Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:44:38Z"
      lastTransitionTime: "2026-03-18T13:44:38Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:44:38Z"
      lastTransitionTime: "2026-03-18T13:44:38Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:44:19Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nch597h7dh564h6fh64dhcfh668h5fbh58dh8h545hcch546h686h5c9h5dh5c4h9fhf9h664h57dh67bh575hddh58ch5cfh57fh595hdfhf5h645q
    creationTimestamp: "2026-03-18T13:44:19Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell1_ea54
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"21dc15c8-1d2c-42af-93af-8e6338eeaab1"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:44:19Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:44:37Z"
    name: nova-cell1-ea54-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-cell1
      uid: 21dc15c8-1d2c-42af-93af-8e6338eeaab1
    resourceVersion: "34946"
    uid: e58d41c3-eec5-4c6a-9e62-f00910fa0e38
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: e58d41c3-eec5-4c6a-9e62-f00910fa0e38
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: e58d41c3-eec5-4c6a-9e62-f00910fa0e38
          batch.kubernetes.io/job-name: nova-cell1-ea54-account-create-update
          controller-uid: e58d41c3-eec5-4c6a-9e62-f00910fa0e38
          job-name: nova-cell1-ea54-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -P 3306"

            if [ -n "nova_cell1" ]; then
                GRANT_DATABASE="nova_cell1"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_cell1_ea54'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_cell1_ea54'@'%';

            ALTER USER 'nova_cell1_ea54'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_cell1_ea54'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell1_ea54'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell1_ea54'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_cell1_ea54" = "root" ]; then
                MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_cell1_ea54' and host='localhost';" )

            if [[ ${username} != "nova_cell1_ea54" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-cell1-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:44:37Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:44:37Z"
      lastTransitionTime: "2026-03-18T13:44:37Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:44:37Z"
      lastTransitionTime: "2026-03-18T13:44:37Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:44:19Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nfh98hdch656h5fdh5b5hbfh554h689h599h556h5d7h684hc4h6bhdbhc7hc9h64h64dhb9h595h598h7dh5bch5b7hf8h545h699h545h5f9h64q
    creationTimestamp: "2026-03-18T13:46:18Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e3acd656-3317-408d-a808-5793f7798204"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:46:18Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:46:26Z"
    name: nova-cell1-host-discover
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: e3acd656-3317-408d-a808-5793f7798204
    resourceVersion: "37218"
    uid: af8d7eab-0b2d-464d-ba38-70a73d406fc6
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: af8d7eab-0b2d-464d-ba38-70a73d406fc6
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: af8d7eab-0b2d-464d-ba38-70a73d406fc6
          batch.kubernetes.io/job-name: nova-cell1-host-discover
          controller-uid: af8d7eab-0b2d-464d-ba38-70a73d406fc6
          job-name: nova-cell1-host-discover
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: INPUT_HASH
            value: nch64bh5fbh68h5c4h598h9h66bh7ch5f9h64bhfhcch567h568h677h5bfh5c7hb5h664h69h58dh655h79hbbh544h57bh6dhd4h95h599h84q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: host-discover-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:46:26Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:46:26Z"
      lastTransitionTime: "2026-03-18T13:46:26Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:46:26Z"
      lastTransitionTime: "2026-03-18T13:46:26Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:46:18Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n7dhbh66fhcchb6h5ch68bh65fh598hf7h55bh65bh546h5fh9dh9fhd7h57fh555h655h549h665h67fh5c4h8ch65bh68h66ch65fhd6h84h697q
    creationTimestamp: "2026-03-18T13:42:20Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: placement_571e
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"4edccd22-f2ce-412f-9024-fcee3e46d2b8"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:20Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:42:25Z"
    name: placement-571e-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: placement
      uid: 4edccd22-f2ce-412f-9024-fcee3e46d2b8
    resourceVersion: "30572"
    uid: b40b65dc-9f8d-4db4-91f8-7e07e969bf01
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: b40b65dc-9f8d-4db4-91f8-7e07e969bf01
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: b40b65dc-9f8d-4db4-91f8-7e07e969bf01
          batch.kubernetes.io/job-name: placement-571e-account-create-update
          controller-uid: b40b65dc-9f8d-4db4-91f8-7e07e969bf01
          job-name: placement-571e-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "placement" ]; then
                GRANT_DATABASE="placement"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'placement_571e'@'localhost';
            CREATE USER IF NOT EXISTS 'placement_571e'@'%';

            ALTER USER 'placement_571e'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'placement_571e'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'placement_571e'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'placement_571e'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "placement_571e" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='placement_571e' and host='localhost';" )

            if [[ ${username} != "placement_571e" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: placement-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:42:25Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:42:25Z"
      lastTransitionTime: "2026-03-18T13:42:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:42:25Z"
      lastTransitionTime: "2026-03-18T13:42:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:20Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n659hfbh645h68bh679h54bh689h54fh68dh84h84h594hcdhdch586h5c6h596h564h79h5b5h59bhd4h57fh7h546h5cch67chb8h684h56ch54bhccq
    creationTimestamp: "2026-03-18T13:42:20Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: placement
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e03e7d17-c17b-48cd-b24f-c1cb3b1c9f25"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:20Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:42:25Z"
    name: placement-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: placement
      uid: e03e7d17-c17b-48cd-b24f-c1cb3b1c9f25
    resourceVersion: "30559"
    uid: 8fa955f9-391b-4a4f-a1e9-cfc152111648
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 8fa955f9-391b-4a4f-a1e9-cfc152111648
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 8fa955f9-391b-4a4f-a1e9-cfc152111648
          batch.kubernetes.io/job-name: placement-db-create
          controller-uid: 8fa955f9-391b-4a4f-a1e9-cfc152111648
          job-name: placement-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS placement; ALTER DATABASE placement CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE placement;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:42:25Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:42:25Z"
      lastTransitionTime: "2026-03-18T13:42:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:42:25Z"
      lastTransitionTime: "2026-03-18T13:42:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:20Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n646h5c7h564h575h56fh64bh8bhc5h6dh5b7h67bh688hd4h54dh6h5bh66ch64bh647h686h5c6h75h5c4h575h598h79h579h655h5h77hb5h66cq
    creationTimestamp: "2026-03-18T13:43:06Z"
    generation: 1
    labels:
      owner: placement
      service: placement
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e1c76091-ba9b-4926-aaeb-33326455f8a8"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"placement-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/log/placement"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:43:06Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:43:31Z"
    name: placement-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: placement.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: PlacementAPI
      name: placement
      uid: e1c76091-ba9b-4926-aaeb-33326455f8a8
    resourceVersion: "32471"
    uid: 5033e0e7-2431-44c9-b616-e443ea756109
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 5033e0e7-2431-44c9-b616-e443ea756109
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 5033e0e7-2431-44c9-b616-e443ea756109
          batch.kubernetes.io/job-name: placement-db-sync
          controller-uid: 5033e0e7-2431-44c9-b616-e443ea756109
          job-name: placement-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-placement-api@sha256:b8a5d052890fb9cefa333baf10b607add227ed5d79aa108b576a97b21e89327a
          imagePullPolicy: IfNotPresent
          name: placement-db-sync
          resources: {}
          securityContext:
            runAsUser: 42482
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/log/placement
            name: logs
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: placement-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: placement-placement
        serviceAccountName: placement-placement
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: placement-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: placement-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:43:31Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:43:31Z"
      lastTransitionTime: "2026-03-18T13:43:31Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:43:31Z"
      lastTransitionTime: "2026-03-18T13:43:31Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:43:06Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n654h568h66chcbh678h5f8h54ch55h9hbfh98hf6h556h574h554h67fh5f9hcbh564h75h67ch59h96h656hb6h5fdh659hcfh9ch5cbh56dh566q
    creationTimestamp: "2026-03-18T13:42:30Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: root
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"0c1d7534-586e-4380-9f77-bc6882864a47"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:30Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:42:35Z"
    name: root-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: openstack-cell1-mariadb-root
      uid: 0c1d7534-586e-4380-9f77-bc6882864a47
    resourceVersion: "30777"
    uid: 339e9c86-e14d-4bdf-bb47-f53138dafc3d
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 339e9c86-e14d-4bdf-bb47-f53138dafc3d
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 339e9c86-e14d-4bdf-bb47-f53138dafc3d
          batch.kubernetes.io/job-name: root-account-create-update
          controller-uid: 339e9c86-e14d-4bdf-bb47-f53138dafc3d
          job-name: root-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -P 3306"

            if [ -n "" ]; then
                GRANT_DATABASE=""
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'root'@'localhost';
            CREATE USER IF NOT EXISTS 'root'@'%';

            ALTER USER 'root'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'root'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'root'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'root'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "root" = "root" ]; then
                MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='root' and host='localhost';" )

            if [[ ${username} != "root" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: openstack-cell1-mariadb-root-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T13:42:35Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:42:35Z"
      lastTransitionTime: "2026-03-18T13:42:35Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:42:35Z"
      lastTransitionTime: "2026-03-18T13:42:35Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:31Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n59ch5bdh5fch545h5fchdh547h5f8h65bhfhbfh5c7h56h54dh7fhf6h64dh89h674h5d7hbh584h5bdh5c9h58dh567h68h59ch6ch5c4h95h556q
    creationTimestamp: "2026-03-18T13:42:14Z"
    generation: 1
    labels:
      job-name: swift-ring-rebalance
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:job-name: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"074aa62c-91cb-4f41-a2ef-49828ce2463f"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"swift-ring-rebalance"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CM_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_APIVERSION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_KIND"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_UID"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_MIN_PART_HOURS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_PART_POWER"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_REPLICAS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/swift/dispersion.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift/swift.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/swift-ring-tool"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/ring-devices"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                  f:workingDir: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"dispersionconf"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"etc-swift"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"ring-data-devices"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"swiftconf"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
      manager: manager
      operation: Update
      time: "2026-03-18T13:42:14Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T13:42:30Z"
    name: swift-ring-rebalance
    namespace: openstack
    ownerReferences:
    - apiVersion: swift.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: SwiftRing
      name: swift-ring
      uid: 074aa62c-91cb-4f41-a2ef-49828ce2463f
    resourceVersion: "30645"
    uid: 6f09d8d5-4fe7-4fce-a8d7-9b87851dbdd1
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 6f09d8d5-4fe7-4fce-a8d7-9b87851dbdd1
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 6f09d8d5-4fe7-4fce-a8d7-9b87851dbdd1
          batch.kubernetes.io/job-name: swift-ring-rebalance
          controller-uid: 6f09d8d5-4fe7-4fce-a8d7-9b87851dbdd1
          job-name: swift-ring-rebalance
      spec:
        containers:
        - command:
          - /usr/local/bin/swift-ring-tool
          - all
          env:
          - name: CM_NAME
            value: swift-ring-files
          - name: NAMESPACE
            value: openstack
          - name: OWNER_APIVERSION
            value: swift.openstack.org/v1beta1
          - name: OWNER_KIND
            value: SwiftRing
          - name: OWNER_NAME
            value: swift-ring
          - name: OWNER_UID
            value: 074aa62c-91cb-4f41-a2ef-49828ce2463f
          - name: SWIFT_MIN_PART_HOURS
            value: "1"
          - name: SWIFT_PART_POWER
            value: "10"
          - name: SWIFT_REPLICAS
            value: "1"
          image: quay.io/podified-antelope-centos9/openstack-swift-proxy-server@sha256:6c3eb966650a7a98feb4ddb31e1bdba1095b0c62e349196aca6a423681d7e5fb
          imagePullPolicy: IfNotPresent
          name: swift-ring-rebalance
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/swift-ring-tool
            name: scripts
            readOnly: true
            subPath: swift-ring-tool
          - mountPath: /etc/swift/swift.conf
            name: swiftconf
            readOnly: true
            subPath: swift.conf
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/lib/config-data/ring-devices
            name: ring-data-devices
            readOnly: true
          - mountPath: /etc/swift/dispersion.conf
            name: dispersionconf
            readOnly: true
            subPath: dispersion.conf
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          workingDir: /etc/swift
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext:
          seccompProfile:
            type: RuntimeDefault
        serviceAccount: swift-swift
        serviceAccountName: swift-swift
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 493
            items:
            - key: swift-ring-tool
              path: swift-ring-tool
            name: swift-ring-scripts
          name: scripts
        - name: swiftconf
          secret:
            defaultMode: 420
            items:
            - key: swift.conf
              path: swift.conf
            secretName: swift-conf
        - emptyDir: {}
          name: etc-swift
        - configMap:
            defaultMode: 420
            name: swift-ring-config-data
          name: ring-data-devices
        - name: dispersionconf
          secret:
            defaultMode: 420
            items:
            - key: dispersion.conf
              path: dispersion.conf
            optional: true
            secretName: swift-proxy-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
  status:
    completionTime: "2026-03-18T13:42:30Z"
    conditions:
    - lastProbeTime: "2026-03-18T13:42:30Z"
      lastTransitionTime: "2026-03-18T13:42:30Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T13:42:30Z"
      lastTransitionTime: "2026-03-18T13:42:30Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T13:42:14Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
kind: JobList
metadata:
  resourceVersion: "40352"