---
apiVersion: batch/v1
items:
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5d4h559hfchf7h665h67ch544h4h5dbh68chch5b4h589hcch644h57bh688h56h646h67bh56ch68bh546h5h656h594h656h57h5b7h8dhcch59fq
    creationTimestamp: "2026-03-12T18:46:54Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: cinder
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6da71e38-a15a-412d-aaed-50be57ff8454"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:54Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:46:59Z"
    name: cinder-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: cinder
      uid: 6da71e38-a15a-412d-aaed-50be57ff8454
    resourceVersion: "30462"
    uid: 6867cbbb-8cf5-450f-94a3-619686379a72
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 6867cbbb-8cf5-450f-94a3-619686379a72
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 6867cbbb-8cf5-450f-94a3-619686379a72
          batch.kubernetes.io/job-name: cinder-db-create
          controller-uid: 6867cbbb-8cf5-450f-94a3-619686379a72
          job-name: cinder-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS cinder; ALTER DATABASE cinder CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE cinder;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:46:59Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:46:59Z"
      lastTransitionTime: "2026-03-12T18:46:59Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:46:59Z"
      lastTransitionTime: "2026-03-12T18:46:59Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:54Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n589h64fh67dh94h574h94h5b5h66dh59h7bhc8h69h65ch574h5bdh78h7ch556h59hch694h597h79h577h5d4hffhdfh597h676h687h66ch594q
    creationTimestamp: "2026-03-12T18:46:54Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: cinder_eac7
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"96dbbdb0-b472-4d4b-a5a6-87bea9f09670"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:54Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:47:00Z"
    name: cinder-eac7-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: cinder
      uid: 96dbbdb0-b472-4d4b-a5a6-87bea9f09670
    resourceVersion: "30495"
    uid: 3e9a02c9-fbd7-4eaf-bd37-49a9d482d524
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 3e9a02c9-fbd7-4eaf-bd37-49a9d482d524
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 3e9a02c9-fbd7-4eaf-bd37-49a9d482d524
          batch.kubernetes.io/job-name: cinder-eac7-account-create-update
          controller-uid: 3e9a02c9-fbd7-4eaf-bd37-49a9d482d524
          job-name: cinder-eac7-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "cinder" ]; then
                GRANT_DATABASE="cinder"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'cinder_eac7'@'localhost';
            CREATE USER IF NOT EXISTS 'cinder_eac7'@'%';

            ALTER USER 'cinder_eac7'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'cinder_eac7'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'cinder_eac7'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'cinder_eac7'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "cinder_eac7" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='cinder_eac7' and host='localhost';" )

            if [[ ${username} != "cinder_eac7" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: cinder-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:47:00Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:47:00Z"
      lastTransitionTime: "2026-03-12T18:47:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:47:00Z"
      lastTransitionTime: "2026-03-12T18:47:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:54Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n695h588h95h54dh7ch9bhd5h54bh65bhd6h9fh55h557hb5h7dh57ch56dh578h586h57ch565h679h586h67bh55hdh66dh87hc4h54ch5cdh57cq
    creationTimestamp: "2026-03-12T18:47:10Z"
    generation: 1
    labels:
      service: cinder
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"bce640e7-c974-402e-97a5-ceffd5281ba6"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"cinder-fa62f-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"db-sync-config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:47:10Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:47:46Z"
    name: cinder-fa62f-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Cinder
      name: cinder-fa62f
      uid: bce640e7-c974-402e-97a5-ceffd5281ba6
    resourceVersion: "31973"
    uid: a8025515-a8b4-4f33-ab3c-e1c46279626b
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: a8025515-a8b4-4f33-ab3c-e1c46279626b
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: a8025515-a8b4-4f33-ab3c-e1c46279626b
          batch.kubernetes.io/job-name: cinder-fa62f-db-sync
          controller-uid: a8025515-a8b4-4f33-ab3c-e1c46279626b
          job-name: cinder-fa62f-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "TRUE"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-cinder-api@sha256:574a17f0877c175128a764f2b37fc02456649c8514689125718ce6ca974bfb6b
          imagePullPolicy: IfNotPresent
          name: cinder-fa62f-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/cinder/cinder.conf.d
            name: db-sync-config-data
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-fa62f
        serviceAccountName: cinder-cinder-fa62f
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-fa62f-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-fa62f-config-data
        - name: db-sync-config-data
          secret:
            defaultMode: 420
            items:
            - key: 00-global-defaults.conf
              path: 00-global-defaults.conf
            - key: 02-global-custom.conf
              path: 02-global-custom.conf
            secretName: cinder-fa62f-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:47:46Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:47:46Z"
      lastTransitionTime: "2026-03-12T18:47:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:47:46Z"
      lastTransitionTime: "2026-03-12T18:47:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:47:10Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n576h586h5fdhfh74h595h68dh57dhd4h587hd5h8bh675h66dh68bhb7h96h59ch9dh57fh549h644hdch5c5h56ch65ch677h578h5ffh5b5h95h568q
    creationTimestamp: "2026-03-12T18:46:28Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: glance_1b8b
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"4847139a-41d3-4ee8-8d68-3fb4bc9bbf4f"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:28Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:46:33Z"
    name: glance-1b8b-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: glance
      uid: 4847139a-41d3-4ee8-8d68-3fb4bc9bbf4f
    resourceVersion: "29859"
    uid: 65ea24ee-0c94-4b48-9a3e-69ca17ba7499
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 65ea24ee-0c94-4b48-9a3e-69ca17ba7499
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 65ea24ee-0c94-4b48-9a3e-69ca17ba7499
          batch.kubernetes.io/job-name: glance-1b8b-account-create-update
          controller-uid: 65ea24ee-0c94-4b48-9a3e-69ca17ba7499
          job-name: glance-1b8b-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "glance" ]; then
                GRANT_DATABASE="glance"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'glance_1b8b'@'localhost';
            CREATE USER IF NOT EXISTS 'glance_1b8b'@'%';

            ALTER USER 'glance_1b8b'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'glance_1b8b'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'glance_1b8b'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'glance_1b8b'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "glance_1b8b" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='glance_1b8b' and host='localhost';" )

            if [[ ${username} != "glance_1b8b" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: glance-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:46:33Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:46:33Z"
      lastTransitionTime: "2026-03-12T18:46:33Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:46:33Z"
      lastTransitionTime: "2026-03-12T18:46:33Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:28Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5d7h67ch676h7dh5bfhcchb5hbfh689h76h8bh8bh7ch66ch59chfbh4h545h647h9h5d9h58ch8dhfbh65h558hc8h66dh648h549h9hfbq
    creationTimestamp: "2026-03-12T18:46:28Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: glance
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"7e9d5778-1c80-48f1-b9be-f92d96da9796"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:28Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:46:33Z"
    name: glance-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: glance
      uid: 7e9d5778-1c80-48f1-b9be-f92d96da9796
    resourceVersion: "29855"
    uid: 8df09af3-867c-4fbf-aa69-fdcb6c4eddda
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 8df09af3-867c-4fbf-aa69-fdcb6c4eddda
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 8df09af3-867c-4fbf-aa69-fdcb6c4eddda
          batch.kubernetes.io/job-name: glance-db-create
          controller-uid: 8df09af3-867c-4fbf-aa69-fdcb6c4eddda
          job-name: glance-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS glance; ALTER DATABASE glance CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE glance;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:46:33Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:46:33Z"
      lastTransitionTime: "2026-03-12T18:46:33Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:46:33Z"
      lastTransitionTime: "2026-03-12T18:46:33Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:28Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n64ch644h65fh5bdh9fh5cch6fh78h76hb9h86h547h67bh5d5h6dhf6h65bh556h9ch5fh5f4h58bhd8h5b9h66bh579h5bdh55fhdh566h9h78q
    creationTimestamp: "2026-03-12T18:46:34Z"
    generation: 1
    labels:
      service: glance
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"f268258d-48a8-4525-8f10-a5e98bb2e78a"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"glance-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/glance/glance.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"db-sync-config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:34Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:47:04Z"
    name: glance-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: glance.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Glance
      name: glance-16afb
      uid: f268258d-48a8-4525-8f10-a5e98bb2e78a
    resourceVersion: "30575"
    uid: 3ec06d96-3cfe-412d-8863-6398a6d383ce
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 3ec06d96-3cfe-412d-8863-6398a6d383ce
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"storage","namespace":"openstack","interface":"storage"}]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 3ec06d96-3cfe-412d-8863-6398a6d383ce
          batch.kubernetes.io/job-name: glance-db-sync
          controller-uid: 3ec06d96-3cfe-412d-8863-6398a6d383ce
          job-name: glance-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-glance-api@sha256:dae5e39780d5a15eed030c7009f8e5317139d447558ac83f038497be594be120
          imagePullPolicy: IfNotPresent
          name: glance-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42415
            runAsUser: 42415
            seccompProfile:
              type: RuntimeDefault
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/glance/glance.conf.d
            name: db-sync-config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: glance-glance-16afb
        serviceAccountName: glance-glance-16afb
        terminationGracePeriodSeconds: 30
        volumes:
        - name: db-sync-config-data
          secret:
            defaultMode: 420
            items:
            - key: 00-config.conf
              path: 00-config.conf
            - key: 01-config.conf
              path: 01-config.conf
            secretName: glance-16afb-config-data
        - name: config-data
          secret:
            defaultMode: 420
            secretName: glance-16afb-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:47:04Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:47:04Z"
      lastTransitionTime: "2026-03-12T18:47:04Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:47:04Z"
      lastTransitionTime: "2026-03-12T18:47:04Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:34Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n79hf9h664hcbhb4h96hffh59fhdch5c4h5cfhbfh656h8bhc9h698h5d7h649h7h7h59ch98h654h686h599hf4h7dhfdh4h6h7fh79q
    creationTimestamp: "2026-03-12T18:47:10Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_0e3d
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"02583621-6c2b-49b8-be1f-8efc606c654c"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:47:10Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:47:20Z"
    name: ironic-0e3d-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: ironic
      uid: 02583621-6c2b-49b8-be1f-8efc606c654c
    resourceVersion: "31334"
    uid: 3131c01d-05f4-4fda-8a1d-e8c410ae1143
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 3131c01d-05f4-4fda-8a1d-e8c410ae1143
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 3131c01d-05f4-4fda-8a1d-e8c410ae1143
          batch.kubernetes.io/job-name: ironic-0e3d-account-create-update
          controller-uid: 3131c01d-05f4-4fda-8a1d-e8c410ae1143
          job-name: ironic-0e3d-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "ironic" ]; then
                GRANT_DATABASE="ironic"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'ironic_0e3d'@'localhost';
            CREATE USER IF NOT EXISTS 'ironic_0e3d'@'%';

            ALTER USER 'ironic_0e3d'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'ironic_0e3d'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_0e3d'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_0e3d'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "ironic_0e3d" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='ironic_0e3d' and host='localhost';" )

            if [[ ${username} != "ironic_0e3d" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: ironic-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:47:19Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:47:19Z"
      lastTransitionTime: "2026-03-12T18:47:19Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:47:20Z"
      lastTransitionTime: "2026-03-12T18:47:20Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:47:10Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n67ch597hfh669h5c8h79h688h599hc8hd7h5cch597h5ch584h678hbch5b8h5c4hdfh67ch5b6hfh66hbdhdbh64dh5bh667h656hcdh65h585q
    creationTimestamp: "2026-03-12T18:47:10Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"3a74d0ae-05ba-4a3a-9a21-637a8e7ace06"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:47:10Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:47:19Z"
    name: ironic-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: ironic
      uid: 3a74d0ae-05ba-4a3a-9a21-637a8e7ace06
    resourceVersion: "31313"
    uid: 4bb22207-d59b-4e66-8811-b5cd6790b002
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 4bb22207-d59b-4e66-8811-b5cd6790b002
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 4bb22207-d59b-4e66-8811-b5cd6790b002
          batch.kubernetes.io/job-name: ironic-db-create
          controller-uid: 4bb22207-d59b-4e66-8811-b5cd6790b002
          job-name: ironic-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS ironic; ALTER DATABASE ironic CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON ironic.* TO 'ironic'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON ironic.* TO 'ironic'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE ironic;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:47:19Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:47:19Z"
      lastTransitionTime: "2026-03-12T18:47:19Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:47:19Z"
      lastTransitionTime: "2026-03-12T18:47:19Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:47:10Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n7h674h55hf7h7bhfh65bh5b6h59h557h56dh5fbhf9hdh99h8fh696h9dh56dh64fh7hfdh647h68bhddhcchd6h596h685h5bfh686h658q
    creationTimestamp: "2026-03-12T18:47:33Z"
    generation: 1
    labels:
      service: ironic
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"f8bfb129-305f-4be5-af3b-e2109e91677d"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"ironic-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabaseHost"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DatabaseName"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DeployHTTPURL"}:
                      .: {}
                      f:name: {}
                    k:{"name":"IngressDomain"}:
                      .: {}
                      f:name: {}
                    k:{"name":"IronicPassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"PodName"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PodNamespace"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"ProvisionNetwork"}:
                      .: {}
                      f:name: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-merged"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:47:33Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:48:16Z"
    name: ironic-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Ironic
      name: ironic
      uid: f8bfb129-305f-4be5-af3b-e2109e91677d
    resourceVersion: "32989"
    uid: 6b1336d3-6779-4bc3-88e1-6ff082030855
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 6b1336d3-6779-4bc3-88e1-6ff082030855
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 6b1336d3-6779-4bc3-88e1-6ff082030855
          batch.kubernetes.io/job-name: ironic-db-sync
          controller-uid: 6b1336d3-6779-4bc3-88e1-6ff082030855
          job-name: ironic-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/dbsync.sh
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor@sha256:0312c8ff4b98bfc1e0c9bb717adb3247305749e34533eff91099c88ed9a1ed7f
          imagePullPolicy: IfNotPresent
          name: ironic-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/init.sh
          command:
          - /bin/bash
          env:
          - name: IronicPassword
            valueFrom:
              secretKeyRef:
                key: IronicPassword
                name: osp-secret
          - name: PodName
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: PodNamespace
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: ProvisionNetwork
          - name: DatabaseHost
            value: openstack.openstack.svc
          - name: DatabaseName
            value: ironic
          - name: DeployHTTPURL
          - name: IngressDomain
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor@sha256:0312c8ff4b98bfc1e0c9bb717adb3247305749e34533eff91099c88ed9a1ed7f
          imagePullPolicy: IfNotPresent
          name: init
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: ironic-config-data
        - emptyDir: {}
          name: config-data-merged
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:48:16Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:48:16Z"
      lastTransitionTime: "2026-03-12T18:48:16Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:48:16Z"
      lastTransitionTime: "2026-03-12T18:48:16Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:47:33Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n575h6dhd7h5bdh7dh97h694h77h99h577h544h58fh675h66h5b6h5f9h645h659h66hc7h8ch665hf9h576h6fhfdhb4h694h5b6h58bh57bhdfq
    creationTimestamp: "2026-03-12T18:48:17Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_inspector_cea2
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"bf40bc48-b9e1-4c1e-b12a-180722b51589"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:48:17Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:48:23Z"
    name: ironic-inspector-cea2-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: ironic-inspector
      uid: bf40bc48-b9e1-4c1e-b12a-180722b51589
    resourceVersion: "33437"
    uid: 58097516-741b-47cd-bc78-58f93bd3b788
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 58097516-741b-47cd-bc78-58f93bd3b788
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 58097516-741b-47cd-bc78-58f93bd3b788
          batch.kubernetes.io/job-name: ironic-inspector-cea2-account-create-update
          controller-uid: 58097516-741b-47cd-bc78-58f93bd3b788
          job-name: ironic-inspector-cea2-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "ironic_inspector" ]; then
                GRANT_DATABASE="ironic_inspector"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'ironic_inspector_cea2'@'localhost';
            CREATE USER IF NOT EXISTS 'ironic_inspector_cea2'@'%';

            ALTER USER 'ironic_inspector_cea2'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'ironic_inspector_cea2'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_inspector_cea2'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_inspector_cea2'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "ironic_inspector_cea2" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='ironic_inspector_cea2' and host='localhost';" )

            if [[ ${username} != "ironic_inspector_cea2" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: ironic-inspector-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:48:23Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:48:23Z"
      lastTransitionTime: "2026-03-12T18:48:23Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:48:23Z"
      lastTransitionTime: "2026-03-12T18:48:23Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:48:17Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n65h5f8h56fh58fh59fh5bh599h65dh5dchcbh658h5cdh554h598h5b8h54h699h5dhb5h5dfh595h55h645h68dh54fh5cdh5ddhcfh54chd4h97h75q
    creationTimestamp: "2026-03-12T18:48:16Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_inspector
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"37c27db2-43bc-4604-a4c4-71b2be340763"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:48:16Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:48:23Z"
    name: ironic-inspector-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: ironic-inspector
      uid: 37c27db2-43bc-4604-a4c4-71b2be340763
    resourceVersion: "33433"
    uid: 4d827538-e05f-498a-a3a8-b2cf1e858eea
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 4d827538-e05f-498a-a3a8-b2cf1e858eea
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 4d827538-e05f-498a-a3a8-b2cf1e858eea
          batch.kubernetes.io/job-name: ironic-inspector-db-create
          controller-uid: 4d827538-e05f-498a-a3a8-b2cf1e858eea
          job-name: ironic-inspector-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS ironic_inspector; ALTER DATABASE ironic_inspector CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON ironic_inspector.* TO 'ironic_inspector'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON ironic_inspector.* TO 'ironic_inspector'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE ironic_inspector;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:48:23Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:48:23Z"
      lastTransitionTime: "2026-03-12T18:48:23Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:48:23Z"
      lastTransitionTime: "2026-03-12T18:48:23Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:48:16Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nc4h65fh66ch68ch99h649h67ch5fch584h5b5h665h9bh66ch86h674hf5h88h5bfhdbh559h64bh674hdfh645hc6hf5h599h8fh587h58bh596h678q
    creationTimestamp: "2026-03-12T18:48:32Z"
    generation: 1
    labels:
      component: inspector
      service: ironic
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"896e33e4-8f69-464d-ac5d-be9d1200a9d4"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"ironic-inspector-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"var-lib-ironic"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"var-lib-ironic-inspector-dhcp-hostsdir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:48:32Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:48:55Z"
    name: ironic-inspector-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: IronicInspector
      name: ironic-inspector
      uid: 896e33e4-8f69-464d-ac5d-be9d1200a9d4
    resourceVersion: "34296"
    uid: a43d2f79-3918-484b-b695-76e0307082d1
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: a43d2f79-3918-484b-b695-76e0307082d1
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: a43d2f79-3918-484b-b695-76e0307082d1
          batch.kubernetes.io/job-name: ironic-inspector-db-sync
          controller-uid: a43d2f79-3918-484b-b695-76e0307082d1
          job-name: ironic-inspector-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /bin/bash -c 'ironic-inspector-dbsync
            --config-file /etc/ironic-inspector/inspector.conf --config-dir /etc/ironic-inspector/inspector.conf.d
            upgrade'
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector@sha256:ccdc96c8db6368182c0f0d0bc4f482ca2f757ecee75656e2715f2eaeb2662030
          imagePullPolicy: IfNotPresent
          name: ironic-inspector-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-inspector-scripts
        - name: config
          secret:
            defaultMode: 416
            secretName: ironic-inspector-config-data
        - emptyDir: {}
          name: var-lib-ironic
        - emptyDir: {}
          name: var-lib-ironic-inspector-dhcp-hostsdir
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:48:55Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:48:55Z"
      lastTransitionTime: "2026-03-12T18:48:55Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:48:55Z"
      lastTransitionTime: "2026-03-12T18:48:55Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:48:32Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n68ch5b6h549h66h68fh5d9hb6hbbh5b7h94h657h59h5bdh587h5f4h5f7h54chc4h5b9hc9h8dh665h7dh9ch666h665h645h568h5h58dh578h575q
    creationTimestamp: "2026-03-12T18:46:24Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: keystone_409f
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"19b5b6f5-7f75-4947-9a65-6697d35ac971"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:24Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:46:29Z"
    name: keystone-409f-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: keystone
      uid: 19b5b6f5-7f75-4947-9a65-6697d35ac971
    resourceVersion: "29776"
    uid: 25411de6-0295-4efd-8dd1-19000598bfdc
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 25411de6-0295-4efd-8dd1-19000598bfdc
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 25411de6-0295-4efd-8dd1-19000598bfdc
          batch.kubernetes.io/job-name: keystone-409f-account-create-update
          controller-uid: 25411de6-0295-4efd-8dd1-19000598bfdc
          job-name: keystone-409f-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "keystone" ]; then
                GRANT_DATABASE="keystone"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'keystone_409f'@'localhost';
            CREATE USER IF NOT EXISTS 'keystone_409f'@'%';

            ALTER USER 'keystone_409f'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'keystone_409f'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'keystone_409f'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'keystone_409f'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "keystone_409f" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='keystone_409f' and host='localhost';" )

            if [[ ${username} != "keystone_409f" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: keystone-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:46:29Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:46:29Z"
      lastTransitionTime: "2026-03-12T18:46:29Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:46:29Z"
      lastTransitionTime: "2026-03-12T18:46:29Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:24Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n566h649h65h5b5h59fhffh67fh5f9h56fhf9h559h5ch57ch5c6h5f6h58fh556h549h5b8h547h5c9hbdh65h54fh54h5f5h566h688h5hd9h548h697q
    creationTimestamp: "2026-03-12T18:47:33Z"
    generation: 1
    labels:
      owner: keystone
      service: keystone
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"18cd85ae-86a1-45af-a376-344b39e7107a"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"keystone-bootstrap"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_INTERNAL_URL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_PASSWORD"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"OS_BOOTSTRAP_PROJECT_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_PUBLIC_URL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_REGION_ID"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_SERVICE_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_USERNAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/keystone/credential-keys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/keystone/fernet-keys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"credential-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"fernet-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:47:33Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:47:43Z"
    name: keystone-bootstrap
    namespace: openstack
    ownerReferences:
    - apiVersion: keystone.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: KeystoneAPI
      name: keystone
      uid: 18cd85ae-86a1-45af-a376-344b39e7107a
    resourceVersion: "31824"
    uid: 82fa4b9c-fa61-4af8-bee0-af8055491ecb
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 82fa4b9c-fa61-4af8-bee0-af8055491ecb
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 82fa4b9c-fa61-4af8-bee0-af8055491ecb
          batch.kubernetes.io/job-name: keystone-bootstrap
          controller-uid: 82fa4b9c-fa61-4af8-bee0-af8055491ecb
          job-name: keystone-bootstrap
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && keystone-manage bootstrap
          command:
          - /bin/bash
          env:
          - name: OS_BOOTSTRAP_PASSWORD
            valueFrom:
              secretKeyRef:
                key: AdminPassword
                name: osp-secret
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: OS_BOOTSTRAP_INTERNAL_URL
            value: https://keystone-internal.openstack.svc:5000
          - name: OS_BOOTSTRAP_PROJECT_NAME
            value: admin
          - name: OS_BOOTSTRAP_PUBLIC_URL
            value: https://keystone-public-openstack.apps.sno.openstack.lab
          - name: OS_BOOTSTRAP_REGION_ID
            value: regionOne
          - name: OS_BOOTSTRAP_SERVICE_NAME
            value: keystone
          - name: OS_BOOTSTRAP_USERNAME
            value: admin
          image: quay.io/podified-antelope-centos9/openstack-keystone@sha256:3a148c87899d4cbbb6bbe1203ad6c237fb295b5f42abda425dc0329305723414
          imagePullPolicy: IfNotPresent
          name: keystone-bootstrap
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: keystone-api-config.json
          - mountPath: /etc/keystone/fernet-keys
            name: fernet-keys
            readOnly: true
          - mountPath: /etc/keystone/credential-keys
            name: credential-keys
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: keystone-keystone
        serviceAccountName: keystone-keystone
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: keystone-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: keystone-config-data
        - name: fernet-keys
          secret:
            defaultMode: 420
            items:
            - key: FernetKeys0
              path: "0"
            - key: FernetKeys1
              path: "1"
            - key: FernetKeys2
              path: "2"
            - key: FernetKeys3
              path: "3"
            - key: FernetKeys4
              path: "4"
            secretName: keystone
        - name: credential-keys
          secret:
            defaultMode: 420
            items:
            - key: CredentialKeys0
              path: "0"
            - key: CredentialKeys1
              path: "1"
            secretName: keystone
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:47:43Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:47:43Z"
      lastTransitionTime: "2026-03-12T18:47:43Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:47:43Z"
      lastTransitionTime: "2026-03-12T18:47:43Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:47:33Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5ffh66h5b8h64ch666hcdh546hf5h545h654h5ffh587h5ddh7ch57chd5h67fhbdh5b7hb9h67dh699hd9h5c8h5c7h5dbhdfh5dch96h5bh5c5h8dq
    creationTimestamp: "2026-03-12T18:46:24Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: keystone
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a86a682c-1ef7-4b98-93c6-1a80d47afbba"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:24Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:46:29Z"
    name: keystone-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: keystone
      uid: a86a682c-1ef7-4b98-93c6-1a80d47afbba
    resourceVersion: "29764"
    uid: 363f6d65-3de1-4347-b923-aae58544081c
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 363f6d65-3de1-4347-b923-aae58544081c
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 363f6d65-3de1-4347-b923-aae58544081c
          batch.kubernetes.io/job-name: keystone-db-create
          controller-uid: 363f6d65-3de1-4347-b923-aae58544081c
          job-name: keystone-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS keystone; ALTER DATABASE keystone CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE keystone;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:46:29Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:46:29Z"
      lastTransitionTime: "2026-03-12T18:46:29Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:46:29Z"
      lastTransitionTime: "2026-03-12T18:46:29Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:24Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n6fh5chcbh668h79h58h56ch9bh56bh58bh554h57ch7fh67bh5f6h5b4h5dh567h569h579hfhf8h5f5h5b6h5fch69h85h695hd9h59chfbh6bq
    creationTimestamp: "2026-03-12T18:46:55Z"
    generation: 1
    labels:
      owner: keystone
      service: keystone
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"18cd85ae-86a1-45af-a376-344b39e7107a"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"keystone-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/keystone/keystone.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"credential-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"fernet-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:55Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:47:09Z"
    name: keystone-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: keystone.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: KeystoneAPI
      name: keystone
      uid: 18cd85ae-86a1-45af-a376-344b39e7107a
    resourceVersion: "30804"
    uid: 14803815-d1c0-4945-9fc5-808069fde5f3
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 14803815-d1c0-4945-9fc5-808069fde5f3
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 14803815-d1c0-4945-9fc5-808069fde5f3
          batch.kubernetes.io/job-name: keystone-db-sync
          controller-uid: 14803815-d1c0-4945-9fc5-808069fde5f3
          job-name: keystone-db-sync
      spec:
        containers:
        - args:
          - -c
          - keystone-manage db_sync
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-keystone@sha256:3a148c87899d4cbbb6bbe1203ad6c237fb295b5f42abda425dc0329305723414
          imagePullPolicy: IfNotPresent
          name: keystone-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42425
            runAsUser: 42425
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/keystone/keystone.conf
            name: config-data
            readOnly: true
            subPath: keystone.conf
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: keystone-keystone
        serviceAccountName: keystone-keystone
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: keystone-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: keystone-config-data
        - name: fernet-keys
          secret:
            defaultMode: 420
            items:
            - key: FernetKeys0
              path: "0"
            - key: FernetKeys1
              path: "1"
            - key: FernetKeys2
              path: "2"
            - key: FernetKeys3
              path: "3"
            - key: FernetKeys4
              path: "4"
            secretName: keystone
        - name: credential-keys
          secret:
            defaultMode: 420
            items:
            - key: CredentialKeys0
              path: "0"
            - key: CredentialKeys1
              path: "1"
            secretName: keystone
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:47:09Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:47:09Z"
      lastTransitionTime: "2026-03-12T18:47:09Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:47:09Z"
      lastTransitionTime: "2026-03-12T18:47:09Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:55Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n658h659h5ffhd9h667h576h698h89h54ch56bhdbhd8hdch686h594h57bh656h558h645h8ch5d4h684h579h57dh57h546h75hdh58fh585h58dh57dq
    creationTimestamp: "2026-03-12T18:46:55Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: neutron_54fb
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c8c82c2f-c89f-4fcb-a2a3-d6bae923df63"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:55Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:47:00Z"
    name: neutron-54fb-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: neutron
      uid: c8c82c2f-c89f-4fcb-a2a3-d6bae923df63
    resourceVersion: "30498"
    uid: aa7cf3fa-79a4-4086-8b3c-fec64da73aba
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: aa7cf3fa-79a4-4086-8b3c-fec64da73aba
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: aa7cf3fa-79a4-4086-8b3c-fec64da73aba
          batch.kubernetes.io/job-name: neutron-54fb-account-create-update
          controller-uid: aa7cf3fa-79a4-4086-8b3c-fec64da73aba
          job-name: neutron-54fb-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "neutron" ]; then
                GRANT_DATABASE="neutron"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'neutron_54fb'@'localhost';
            CREATE USER IF NOT EXISTS 'neutron_54fb'@'%';

            ALTER USER 'neutron_54fb'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'neutron_54fb'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'neutron_54fb'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'neutron_54fb'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "neutron_54fb" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='neutron_54fb' and host='localhost';" )

            if [[ ${username} != "neutron_54fb" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: neutron-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:47:00Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:47:00Z"
      lastTransitionTime: "2026-03-12T18:47:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:47:00Z"
      lastTransitionTime: "2026-03-12T18:47:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:55Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n55h55dhcdh549h575h5fbh688h65bh5c5h6fh98h587h55fh676h5d5h588h5b8h5dfh74h56bhc9h5ffhb5h5d9h88h648h66h597h5dh54fhbfh8bq
    creationTimestamp: "2026-03-12T18:46:55Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: neutron
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"d47d5683-6b9d-41cb-8854-998ab798c412"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:55Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:47:00Z"
    name: neutron-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: neutron
      uid: d47d5683-6b9d-41cb-8854-998ab798c412
    resourceVersion: "30483"
    uid: 3529a578-6630-4082-b221-1e1da3ade874
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 3529a578-6630-4082-b221-1e1da3ade874
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 3529a578-6630-4082-b221-1e1da3ade874
          batch.kubernetes.io/job-name: neutron-db-create
          controller-uid: 3529a578-6630-4082-b221-1e1da3ade874
          job-name: neutron-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS neutron; ALTER DATABASE neutron CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE neutron;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:47:00Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:47:00Z"
      lastTransitionTime: "2026-03-12T18:47:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:47:00Z"
      lastTransitionTime: "2026-03-12T18:47:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:55Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n557h548h685h68bh5d9h79h9h74h555h67fh664h68dhf7h66dh5d9h5c9h668h59fh5b6h7fh5b4h5bch66ch67bh586hb8h656hd9h65dh7fhb5h64bq
      k8s.v1.cni.cncf.io/networks: '[{"name":"internalapi","namespace":"openstack","interface":"internalapi"}]'
    creationTimestamp: "2026-03-12T18:47:10Z"
    generation: 1
    labels:
      service: neutron
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"9fa343b0-d204-4e04-b3aa-234f08a6db63"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"neutron-db-sync"}:
                  .: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"httpd-config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:47:10Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:47:45Z"
    name: neutron-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: neutron.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NeutronAPI
      name: neutron
      uid: 9fa343b0-d204-4e04-b3aa-234f08a6db63
    resourceVersion: "31876"
    uid: 07eae34d-1ef1-410a-9d3b-ba4a76e5acf1
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 07eae34d-1ef1-410a-9d3b-ba4a76e5acf1
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 07eae34d-1ef1-410a-9d3b-ba4a76e5acf1
          batch.kubernetes.io/job-name: neutron-db-sync
          controller-uid: 07eae34d-1ef1-410a-9d3b-ba4a76e5acf1
          job-name: neutron-db-sync
      spec:
        containers:
        - env:
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-neutron-server@sha256:fbb5be29e9e4fa11f0743e7f74f2e80dcc7445d24770709ea0e038147f752c51
          imagePullPolicy: IfNotPresent
          name: neutron-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42435
            runAsNonRoot: true
            runAsUser: 42435
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: neutron-neutron
        serviceAccountName: neutron-neutron
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config
          secret:
            defaultMode: 420
            secretName: neutron-config
        - name: httpd-config
          secret:
            defaultMode: 420
            secretName: neutron-httpd-config
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:47:45Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:47:45Z"
      lastTransitionTime: "2026-03-12T18:47:45Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:47:45Z"
      lastTransitionTime: "2026-03-12T18:47:45Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:47:10Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n6bh655h676h5cfh556h549h55dhc6h587h67bh75h9ch75h5d4h554h5bdh5b9h584hfdh664h5fch4h65dh549h67fh7bhb4h548h64fh55fhd7h64cq
    creationTimestamp: "2026-03-12T18:48:35Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_api_9671
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"5200640f-e014-4180-a2a4-b633813e18cb"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:48:35Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:48:48Z"
    name: nova-api-9671-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-api
      uid: 5200640f-e014-4180-a2a4-b633813e18cb
    resourceVersion: "34125"
    uid: 113bcb0e-be80-4adb-8581-d55b407281f6
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 113bcb0e-be80-4adb-8581-d55b407281f6
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 113bcb0e-be80-4adb-8581-d55b407281f6
          batch.kubernetes.io/job-name: nova-api-9671-account-create-update
          controller-uid: 113bcb0e-be80-4adb-8581-d55b407281f6
          job-name: nova-api-9671-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "nova_api" ]; then
                GRANT_DATABASE="nova_api"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_api_9671'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_api_9671'@'%';

            ALTER USER 'nova_api_9671'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_api_9671'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_api_9671'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_api_9671'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_api_9671" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_api_9671' and host='localhost';" )

            if [[ ${username} != "nova_api_9671" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-api-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:48:48Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:48:48Z"
      lastTransitionTime: "2026-03-12T18:48:48Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:48:48Z"
      lastTransitionTime: "2026-03-12T18:48:48Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:48:35Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5c7hf7hf4h565h55bh95h59dhf9h696hd9h5d6h7h57bh684h5h584h648h546h5cch56fh5c5h55fhddhbbh587h5d5h559h689h5fdh5f9h544hf8q
    creationTimestamp: "2026-03-12T18:48:35Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_api
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"4f530401-310b-4997-ab78-b4f1ba20a609"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:48:35Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:48:47Z"
    name: nova-api-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-api
      uid: 4f530401-310b-4997-ab78-b4f1ba20a609
    resourceVersion: "34097"
    uid: db055d71-1dd9-4240-a697-848cb86d96bd
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: db055d71-1dd9-4240-a697-848cb86d96bd
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: db055d71-1dd9-4240-a697-848cb86d96bd
          batch.kubernetes.io/job-name: nova-api-db-create
          controller-uid: db055d71-1dd9-4240-a697-848cb86d96bd
          job-name: nova-api-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_api; ALTER DATABASE nova_api CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova_api'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_api.* TO 'nova_api'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_api;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:48:47Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:48:47Z"
      lastTransitionTime: "2026-03-12T18:48:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:48:47Z"
      lastTransitionTime: "2026-03-12T18:48:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:48:35Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nffhf5h579h5c9h674hfbh99h54h58bh7hdbh68chcdh655h547h5bch696h567h678h584h5c7h59chd7h68ch54dh549h569h546hd8h687h5f7h9bq
    creationTimestamp: "2026-03-12T18:48:35Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell0_703e
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"680531ee-7d06-4c76-9344-19b730a4bbe0"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:48:35Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:48:48Z"
    name: nova-cell0-703e-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-cell0
      uid: 680531ee-7d06-4c76-9344-19b730a4bbe0
    resourceVersion: "34129"
    uid: f37afbe3-eb7e-480c-8057-1b28831cdbac
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: f37afbe3-eb7e-480c-8057-1b28831cdbac
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: f37afbe3-eb7e-480c-8057-1b28831cdbac
          batch.kubernetes.io/job-name: nova-cell0-703e-account-create-update
          controller-uid: f37afbe3-eb7e-480c-8057-1b28831cdbac
          job-name: nova-cell0-703e-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "nova_cell0" ]; then
                GRANT_DATABASE="nova_cell0"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_cell0_703e'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_cell0_703e'@'%';

            ALTER USER 'nova_cell0_703e'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_cell0_703e'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell0_703e'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell0_703e'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_cell0_703e" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_cell0_703e' and host='localhost';" )

            if [[ ${username} != "nova_cell0_703e" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-cell0-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:48:48Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:48:48Z"
      lastTransitionTime: "2026-03-12T18:48:48Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:48:48Z"
      lastTransitionTime: "2026-03-12T18:48:48Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:48:35Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n98h7dh687h55bh59bh5bdhbch5d6h5cbh98h8bh5fh67ch586h646h59dh566h6dh7h57hc9hd4h64fh64hdfh58h687h578h5d5h658h5c5h6fq
    creationTimestamp: "2026-03-12T18:49:41Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6458d227-ada4-4e8c-88f0-e29d640949c8"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:49:41Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:50:01Z"
    name: nova-cell0-cell-mapping
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: 6458d227-ada4-4e8c-88f0-e29d640949c8
    resourceVersion: "35750"
    uid: 8d4828fe-8472-4c59-aad3-b7f0f4e1b150
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 8d4828fe-8472-4c59-aad3-b7f0f4e1b150
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 8d4828fe-8472-4c59-aad3-b7f0f4e1b150
          batch.kubernetes.io/job-name: nova-cell0-cell-mapping
          controller-uid: 8d4828fe-8472-4c59-aad3-b7f0f4e1b150
          job-name: nova-cell0-cell-mapping
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell0
          - name: INPUT_HASH
            value: n667h5c5h55dh597h5f9h657h694h98h558h59h66h5d8h567h6dh59h5bh558h5cbh5d8h67fh58bh586h696hbh57dhf6h65ch5c6h5fdh5c8h68fhddq
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: cell-mapping-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell0-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell0-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:50:01Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:50:01Z"
      lastTransitionTime: "2026-03-12T18:50:01Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:50:01Z"
      lastTransitionTime: "2026-03-12T18:50:01Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:49:41Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n688h68fhdh59dh79h5c5h65h697h645h75h5b7h558hd7h658h595h94h54ch78h59fh697h59fhc7h594hf7hdbh54ch547h656h566h5f9h54chfdq
      k8s.v1.cni.cncf.io/networks: '[]'
    creationTimestamp: "2026-03-12T18:48:54Z"
    generation: 1
    labels:
      service: nova-conductor
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"7d7b055d-5cd6-43a1-a5dc-765f4080b26c"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-cell0-conductor-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:48:54Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:49:30Z"
    name: nova-cell0-conductor-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell0-conductor
      uid: 7d7b055d-5cd6-43a1-a5dc-765f4080b26c
    resourceVersion: "35041"
    uid: e982b34a-3f0d-4aff-ad91-9ffd735421c3
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: e982b34a-3f0d-4aff-ad91-9ffd735421c3
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: e982b34a-3f0d-4aff-ad91-9ffd735421c3
          batch.kubernetes.io/job-name: nova-cell0-conductor-db-sync
          controller-uid: e982b34a-3f0d-4aff-ad91-9ffd735421c3
          job-name: nova-cell0-conductor-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell0
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-cell0-conductor-db-sync
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell0-conductor-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell0-conductor-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:49:30Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:49:30Z"
      lastTransitionTime: "2026-03-12T18:49:30Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:49:30Z"
      lastTransitionTime: "2026-03-12T18:49:30Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:48:54Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n64fh684h7h566h578h56bh5bh5d5h568h565h644h7dhb5h5d4hbbh99h68ch98h5c4h64h69hb8h7fh98h699h647hbh85h685h6bh5bdh695q
    creationTimestamp: "2026-03-12T18:48:35Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell0
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"76141c52-f138-4c9f-8261-182603a5afdb"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:48:35Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:48:48Z"
    name: nova-cell0-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-cell0
      uid: 76141c52-f138-4c9f-8261-182603a5afdb
    resourceVersion: "34137"
    uid: c6d6a0fe-7129-44f7-a68a-68dc3c0fb524
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: c6d6a0fe-7129-44f7-a68a-68dc3c0fb524
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: c6d6a0fe-7129-44f7-a68a-68dc3c0fb524
          batch.kubernetes.io/job-name: nova-cell0-db-create
          controller-uid: c6d6a0fe-7129-44f7-a68a-68dc3c0fb524
          job-name: nova-cell0-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_cell0; ALTER DATABASE nova_cell0 CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova_cell0'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova_cell0'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_cell0;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:48:48Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:48:48Z"
      lastTransitionTime: "2026-03-12T18:48:48Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:48:48Z"
      lastTransitionTime: "2026-03-12T18:48:48Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:48:35Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nf7h568h5f5h5d7h588h685h88h9h58fhddh549h99h567h687hd5h5dh5cdh5h6ch585h54ch9ch64h59fh5c4h547hd5h667h68bh687h5dfh8cq
    creationTimestamp: "2026-03-12T18:48:35Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell1_67d1
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"721c7908-0d8a-4c2f-857c-e42847d52df6"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:48:35Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:48:47Z"
    name: nova-cell1-67d1-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-cell1
      uid: 721c7908-0d8a-4c2f-857c-e42847d52df6
    resourceVersion: "34085"
    uid: bbd8e55a-fdb7-48b8-81b1-39aeb8a78143
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: bbd8e55a-fdb7-48b8-81b1-39aeb8a78143
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: bbd8e55a-fdb7-48b8-81b1-39aeb8a78143
          batch.kubernetes.io/job-name: nova-cell1-67d1-account-create-update
          controller-uid: bbd8e55a-fdb7-48b8-81b1-39aeb8a78143
          job-name: nova-cell1-67d1-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -P 3306"

            if [ -n "nova_cell1" ]; then
                GRANT_DATABASE="nova_cell1"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_cell1_67d1'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_cell1_67d1'@'%';

            ALTER USER 'nova_cell1_67d1'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_cell1_67d1'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell1_67d1'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell1_67d1'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_cell1_67d1" = "root" ]; then
                MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_cell1_67d1' and host='localhost';" )

            if [[ ${username} != "nova_cell1_67d1" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-cell1-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:48:47Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:48:47Z"
      lastTransitionTime: "2026-03-12T18:48:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:48:47Z"
      lastTransitionTime: "2026-03-12T18:48:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:48:35Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n59bh9fh55ch5dbhcbh54bhddh5fdhfbhc9h5bbh5f9h5b5h9bh569h67fh5d7h549hdh5bfh5fdh58hb4h5f4hcfh66bh8ch555h57fh6fh86h65fq
    creationTimestamp: "2026-03-12T18:50:34Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6458d227-ada4-4e8c-88f0-e29d640949c8"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:50:34Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:50:44Z"
    name: nova-cell1-cell-mapping
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: 6458d227-ada4-4e8c-88f0-e29d640949c8
    resourceVersion: "36566"
    uid: af4e5c26-2a84-4927-aa6c-b26de2027d25
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: af4e5c26-2a84-4927-aa6c-b26de2027d25
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: af4e5c26-2a84-4927-aa6c-b26de2027d25
          batch.kubernetes.io/job-name: nova-cell1-cell-mapping
          controller-uid: af4e5c26-2a84-4927-aa6c-b26de2027d25
          job-name: nova-cell1-cell-mapping
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell1
          - name: INPUT_HASH
            value: n5cch676h5c7h57dh5f8h647h5d5h599h68bh76hd8hbhf4h54ch6dh66ch65dh5b8hc5h5fch5bfh66bh588h668h66dh5c9h646h5cfh596h5fdh56h589q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: cell-mapping-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:50:44Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:50:44Z"
      lastTransitionTime: "2026-03-12T18:50:44Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:50:44Z"
      lastTransitionTime: "2026-03-12T18:50:44Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:50:34Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: ndbh568h69h5d7h564hc5h589h586hfdh7ch544hb5h557hc4hb5h684h699h684h7h84h58fh598h586h584hb6hf9h697h667h54bh576h56h659q
      k8s.v1.cni.cncf.io/networks: '[]'
    creationTimestamp: "2026-03-12T18:49:42Z"
    generation: 1
    labels:
      service: nova-conductor
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"2ca91156-2952-4acc-8c4c-0ac3da880356"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-cell1-conductor-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:49:42Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:50:01Z"
    name: nova-cell1-conductor-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell1-conductor
      uid: 2ca91156-2952-4acc-8c4c-0ac3da880356
    resourceVersion: "35754"
    uid: ec53ddb6-ab4e-411f-bdbf-77ac95686bf4
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: ec53ddb6-ab4e-411f-bdbf-77ac95686bf4
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: ec53ddb6-ab4e-411f-bdbf-77ac95686bf4
          batch.kubernetes.io/job-name: nova-cell1-conductor-db-sync
          controller-uid: ec53ddb6-ab4e-411f-bdbf-77ac95686bf4
          job-name: nova-cell1-conductor-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell1
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-cell1-conductor-db-sync
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-conductor-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-conductor-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:50:01Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:50:01Z"
      lastTransitionTime: "2026-03-12T18:50:01Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:50:01Z"
      lastTransitionTime: "2026-03-12T18:50:01Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:49:42Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nd5h585h685h688h7ch6dh56fh664h5bch5h564h5b7h564h568h54dh54h648h645hcdh5b5h555hf9h8dh59ch558h64h574h94hb8hbhb9h677q
    creationTimestamp: "2026-03-12T18:48:35Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell1
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"9fa585b8-9f3a-47d9-9e80-742f0515dfae"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:48:35Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:48:47Z"
    name: nova-cell1-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-cell1
      uid: 9fa585b8-9f3a-47d9-9e80-742f0515dfae
    resourceVersion: "34092"
    uid: a79c5a79-e675-497c-81ef-d6777514ea98
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: a79c5a79-e675-497c-81ef-d6777514ea98
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: a79c5a79-e675-497c-81ef-d6777514ea98
          batch.kubernetes.io/job-name: nova-cell1-db-create
          controller-uid: a79c5a79-e675-497c-81ef-d6777514ea98
          job-name: nova-cell1-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack-cell1.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_cell1; ALTER DATABASE nova_cell1 CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack-cell1.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_cell1.* TO 'nova_cell1'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_cell1.* TO 'nova_cell1'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack-cell1.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_cell1;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:48:47Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:48:47Z"
      lastTransitionTime: "2026-03-12T18:48:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:48:47Z"
      lastTransitionTime: "2026-03-12T18:48:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:48:35Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nfh98hdch656h5fdh5b5hbfh554h689h599h556h5d7h684hc4h6bhdbhc7hc9h64h64dhb9h595h598h7dh5bch5b7hf8h545h699h545h5f9h64q
    creationTimestamp: "2026-03-12T18:50:34Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6458d227-ada4-4e8c-88f0-e29d640949c8"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:50:34Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:50:41Z"
    name: nova-cell1-host-discover
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: 6458d227-ada4-4e8c-88f0-e29d640949c8
    resourceVersion: "36538"
    uid: 07ef8f7d-5202-4c75-adda-a23078169157
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 07ef8f7d-5202-4c75-adda-a23078169157
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 07ef8f7d-5202-4c75-adda-a23078169157
          batch.kubernetes.io/job-name: nova-cell1-host-discover
          controller-uid: 07ef8f7d-5202-4c75-adda-a23078169157
          job-name: nova-cell1-host-discover
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: INPUT_HASH
            value: nch64bh5fbh68h5c4h598h9h66bh7ch5f9h64bhfhcch567h568h677h5bfh5c7hb5h664h69h58dh655h79hbbh544h57bh6dhd4h95h599h84q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: host-discover-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:50:41Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:50:41Z"
      lastTransitionTime: "2026-03-12T18:50:41Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:50:41Z"
      lastTransitionTime: "2026-03-12T18:50:41Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:50:34Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n55fh686h6ch57dh6ch79h94hfch698h57dh7fh5b9h59fh58chd8h54dh9dh96h9h687h9ch5dfhcfh5fh5f7h5b4h68h5dbh698h5f7h685h5c6q
    creationTimestamp: "2026-03-12T18:46:24Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: placement_1444
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e0db0c0c-91ac-4261-9b8e-cdc1c921b60a"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:24Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:46:30Z"
    name: placement-1444-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: placement
      uid: e0db0c0c-91ac-4261-9b8e-cdc1c921b60a
    resourceVersion: "29818"
    uid: 40c3a6b0-4eac-49b6-9bef-1ef297119b55
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 40c3a6b0-4eac-49b6-9bef-1ef297119b55
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 40c3a6b0-4eac-49b6-9bef-1ef297119b55
          batch.kubernetes.io/job-name: placement-1444-account-create-update
          controller-uid: 40c3a6b0-4eac-49b6-9bef-1ef297119b55
          job-name: placement-1444-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "placement" ]; then
                GRANT_DATABASE="placement"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'placement_1444'@'localhost';
            CREATE USER IF NOT EXISTS 'placement_1444'@'%';

            ALTER USER 'placement_1444'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'placement_1444'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'placement_1444'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'placement_1444'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "placement_1444" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='placement_1444' and host='localhost';" )

            if [[ ${username} != "placement_1444" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: placement-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:46:30Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:46:30Z"
      lastTransitionTime: "2026-03-12T18:46:30Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:46:30Z"
      lastTransitionTime: "2026-03-12T18:46:30Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:24Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n659hfbh645h68bh679h54bh689h54fh68dh84h84h594hcdhdch586h5c6h596h564h79h5b5h59bhd4h57fh7h546h5cch67chb8h684h56ch54bhccq
    creationTimestamp: "2026-03-12T18:46:24Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: placement
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e88cacc6-6b5b-45b5-882e-71f4bbd0bf65"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:24Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:46:29Z"
    name: placement-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: placement
      uid: e88cacc6-6b5b-45b5-882e-71f4bbd0bf65
    resourceVersion: "29772"
    uid: ace7c340-cd6b-4a77-b72d-b82261c1e54e
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: ace7c340-cd6b-4a77-b72d-b82261c1e54e
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: ace7c340-cd6b-4a77-b72d-b82261c1e54e
          batch.kubernetes.io/job-name: placement-db-create
          controller-uid: ace7c340-cd6b-4a77-b72d-b82261c1e54e
          job-name: placement-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS placement; ALTER DATABASE placement CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE placement;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:46:29Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:46:29Z"
      lastTransitionTime: "2026-03-12T18:46:29Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:46:29Z"
      lastTransitionTime: "2026-03-12T18:46:29Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:24Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n646h5c7h564h575h56fh64bh8bhc5h6dh5b7h67bh688hd4h54dh6h5bh66ch64bh647h686h5c6h75h5c4h575h598h79h579h655h5h77hb5h66cq
    creationTimestamp: "2026-03-12T18:47:10Z"
    generation: 1
    labels:
      owner: placement
      service: placement
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8df7588b-3112-4b1f-bd5c-e654d0675101"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"placement-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/log/placement"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:47:10Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:47:36Z"
    name: placement-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: placement.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: PlacementAPI
      name: placement
      uid: 8df7588b-3112-4b1f-bd5c-e654d0675101
    resourceVersion: "31657"
    uid: 869f2369-fc37-4663-a40a-6007b231699b
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 869f2369-fc37-4663-a40a-6007b231699b
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 869f2369-fc37-4663-a40a-6007b231699b
          batch.kubernetes.io/job-name: placement-db-sync
          controller-uid: 869f2369-fc37-4663-a40a-6007b231699b
          job-name: placement-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-placement-api@sha256:b8a5d052890fb9cefa333baf10b607add227ed5d79aa108b576a97b21e89327a
          imagePullPolicy: IfNotPresent
          name: placement-db-sync
          resources: {}
          securityContext:
            runAsUser: 42482
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/log/placement
            name: logs
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: placement-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: placement-placement
        serviceAccountName: placement-placement
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: placement-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: placement-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:47:36Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:47:36Z"
      lastTransitionTime: "2026-03-12T18:47:36Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:47:36Z"
      lastTransitionTime: "2026-03-12T18:47:36Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:47:10Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n654h568h66chcbh678h5f8h54ch55h9hbfh98hf6h556h574h554h67fh5f9hcbh564h75h67ch59h96h656hb6h5fdh659hcfh9ch5cbh56dh566q
    creationTimestamp: "2026-03-12T18:46:42Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: root
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"bcb7ac16-f6e1-4f6a-af83-79bb7a3f30f3"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:42Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:46:53Z"
    name: root-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: openstack-cell1-mariadb-root
      uid: bcb7ac16-f6e1-4f6a-af83-79bb7a3f30f3
    resourceVersion: "30227"
    uid: d6e0907b-e121-4e69-9476-9686b1fe04d0
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: d6e0907b-e121-4e69-9476-9686b1fe04d0
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: d6e0907b-e121-4e69-9476-9686b1fe04d0
          batch.kubernetes.io/job-name: root-account-create-update
          controller-uid: d6e0907b-e121-4e69-9476-9686b1fe04d0
          job-name: root-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -P 3306"

            if [ -n "" ]; then
                GRANT_DATABASE=""
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'root'@'localhost';
            CREATE USER IF NOT EXISTS 'root'@'%';

            ALTER USER 'root'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'root'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'root'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'root'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "root" = "root" ]; then
                MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='root' and host='localhost';" )

            if [[ ${username} != "root" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: openstack-cell1-mariadb-root-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-12T18:46:53Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:46:53Z"
      lastTransitionTime: "2026-03-12T18:46:53Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:46:53Z"
      lastTransitionTime: "2026-03-12T18:46:53Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:42Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n694h665h6dh696h644h548h595h658h66fh594h54ch65bh679h5fbh697hc8h54ch5b8h5cfh567hb7hbch564h657h58bh8dh54chdh5f8h5b5h597h54dq
    creationTimestamp: "2026-03-12T18:46:18Z"
    generation: 1
    labels:
      job-name: swift-ring-rebalance
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:job-name: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"5d696545-573c-42cc-becd-895e89215384"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"swift-ring-rebalance"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CM_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_APIVERSION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_KIND"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_UID"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_MIN_PART_HOURS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_PART_POWER"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_REPLICAS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/swift/dispersion.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift/swift.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/swift-ring-tool"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/ring-devices"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                  f:workingDir: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"dispersionconf"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"etc-swift"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"ring-data-devices"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"swiftconf"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
      manager: manager
      operation: Update
      time: "2026-03-12T18:46:18Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-12T18:46:34Z"
    name: swift-ring-rebalance
    namespace: openstack
    ownerReferences:
    - apiVersion: swift.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: SwiftRing
      name: swift-ring
      uid: 5d696545-573c-42cc-becd-895e89215384
    resourceVersion: "29907"
    uid: 683886af-f6af-4a8a-87cd-794664ed0cb2
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 683886af-f6af-4a8a-87cd-794664ed0cb2
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 683886af-f6af-4a8a-87cd-794664ed0cb2
          batch.kubernetes.io/job-name: swift-ring-rebalance
          controller-uid: 683886af-f6af-4a8a-87cd-794664ed0cb2
          job-name: swift-ring-rebalance
      spec:
        containers:
        - command:
          - /usr/local/bin/swift-ring-tool
          - all
          env:
          - name: CM_NAME
            value: swift-ring-files
          - name: NAMESPACE
            value: openstack
          - name: OWNER_APIVERSION
            value: swift.openstack.org/v1beta1
          - name: OWNER_KIND
            value: SwiftRing
          - name: OWNER_NAME
            value: swift-ring
          - name: OWNER_UID
            value: 5d696545-573c-42cc-becd-895e89215384
          - name: SWIFT_MIN_PART_HOURS
            value: "1"
          - name: SWIFT_PART_POWER
            value: "10"
          - name: SWIFT_REPLICAS
            value: "1"
          image: quay.io/podified-antelope-centos9/openstack-swift-proxy-server@sha256:6c3eb966650a7a98feb4ddb31e1bdba1095b0c62e349196aca6a423681d7e5fb
          imagePullPolicy: IfNotPresent
          name: swift-ring-rebalance
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/swift-ring-tool
            name: scripts
            readOnly: true
            subPath: swift-ring-tool
          - mountPath: /etc/swift/swift.conf
            name: swiftconf
            readOnly: true
            subPath: swift.conf
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/lib/config-data/ring-devices
            name: ring-data-devices
            readOnly: true
          - mountPath: /etc/swift/dispersion.conf
            name: dispersionconf
            readOnly: true
            subPath: dispersion.conf
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          workingDir: /etc/swift
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext:
          seccompProfile:
            type: RuntimeDefault
        serviceAccount: swift-swift
        serviceAccountName: swift-swift
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 493
            items:
            - key: swift-ring-tool
              path: swift-ring-tool
            name: swift-ring-scripts
          name: scripts
        - name: swiftconf
          secret:
            defaultMode: 420
            items:
            - key: swift.conf
              path: swift.conf
            secretName: swift-conf
        - emptyDir: {}
          name: etc-swift
        - configMap:
            defaultMode: 420
            name: swift-ring-config-data
          name: ring-data-devices
        - name: dispersionconf
          secret:
            defaultMode: 420
            items:
            - key: dispersion.conf
              path: dispersion.conf
            optional: true
            secretName: swift-proxy-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
  status:
    completionTime: "2026-03-12T18:46:34Z"
    conditions:
    - lastProbeTime: "2026-03-12T18:46:34Z"
      lastTransitionTime: "2026-03-12T18:46:34Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-12T18:46:34Z"
      lastTransitionTime: "2026-03-12T18:46:34Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-12T18:46:18Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
kind: JobList
metadata:
  resourceVersion: "39246"