---
apiVersion: apps/v1
items:
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:38:34Z"
    generation: 3
    labels:
      component: cinder-api
      service: cinder
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"dc9585a7-1c20-4ea0-8794-f1a7be13a17b"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"cinder-api"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/log/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"cinder-e64dd-api-log"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/log/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:38:38Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:38:54Z"
    name: cinder-e64dd-api
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: CinderAPI
      name: cinder-e64dd-api
      uid: dc9585a7-1c20-4ea0-8794-f1a7be13a17b
    resourceVersion: "32060"
    uid: 1fce27c8-7903-4f96-bb4e-f61159248ef9
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: cinder-api
        service: cinder
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          component: cinder-api
          service: cinder
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: component
                    operator: In
                    values:
                    - cinder-api
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - --single-child
          - --
          - /bin/sh
          - -c
          - /usr/bin/tail -n+1 -F /var/log/cinder/cinder-api.log 2>/dev/null
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n548hbfh668h9ch66fh597h65ch5dch667h57dh5f6hcdh56fh66ch5c6hddh85hb9h8ch9h5cfh5b9h676h568hd7h667hbfh5f4h65h566h9ch567q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-cinder-api@sha256:44ed1ca84e17bd0f004cfbdc3c0827d767daba52abb8e83e076bfd0e6c02f838
          imagePullPolicy: IfNotPresent
          name: cinder-e64dd-api-log
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/log/cinder
            name: logs
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n548hbfh668h9ch66fh597h65ch5dch667h57dh5f6hcdh56fh66ch5c6hddh85hb9h8ch9h5cfh5b9h676h568hd7h667hbfh5f4h65h566h9ch567q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-cinder-api@sha256:44ed1ca84e17bd0f004cfbdc3c0827d767daba52abb8e83e076bfd0e6c02f838
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 8776
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: cinder-api
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 8776
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42407
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-api-config.json
          - mountPath: /var/log/cinder
            name: logs
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-e64dd
        serviceAccountName: cinder-cinder-e64dd
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-e64dd-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-e64dd-config-data
        - name: config-data-custom
          secret:
            defaultMode: 420
            secretName: cinder-e64dd-api-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-cinder-internal-svc
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-cinder-public-svc
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: cinder-e64dd-api-c6d484478
    observedGeneration: 3
    readyReplicas: 1
    replicas: 1
    updateRevision: cinder-e64dd-api-c6d484478
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:38:34Z"
    generation: 2
    labels:
      component: cinder-backup
      service: cinder
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"aa1ff748-19a2-4ee7-804c-5cb41eaf09d9"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"cinder-backup"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MALLOC_ARENA_MAX"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MALLOC_MMAP_THRESHOLD_"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MALLOC_TRIM_THRESHOLD_"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:privileged: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/dev"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/iscsi"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/nvme"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/lib/modules"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/run"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/sys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/locks/openstack/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/locks/openstack/os-brick"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"probe"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/dev"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/iscsi"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/nvme"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/lib/modules"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/run"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/sys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/locks/openstack/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/locks/openstack/os-brick"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:hostPID: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"dev"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-iscsi"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-nvme"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"lib-modules"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"run"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"sys"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"var-lib-cinder"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"var-locks-brick"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"var-locks-cinder"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:38:38Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:39:05Z"
    name: cinder-e64dd-backup
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: CinderBackup
      name: cinder-e64dd-backup
      uid: aa1ff748-19a2-4ee7-804c-5cb41eaf09d9
    resourceVersion: "32385"
    uid: 0a429d4d-e141-4ae6-a5ee-dd90fef20170
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: OrderedReady
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: cinder-backup
        service: cinder
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"storage","namespace":"openstack","interface":"storage"}]'
        creationTimestamp: null
        labels:
          component: cinder-backup
          service: cinder
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: component
                    operator: In
                    values:
                    - cinder-backup
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n669h5dch87h69h68ch65ch84h87h658h57dh687h555h59fh64fh55bh58h55hf8h59bh594h5fbh56dh5cch5f6h94hbfh5cdh9chchd6h5ch68q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: MALLOC_ARENA_MAX
            value: "1"
          - name: MALLOC_MMAP_THRESHOLD_
            value: "131072"
          - name: MALLOC_TRIM_THRESHOLD_
            value: "262144"
          image: quay.io/podified-antelope-centos9/openstack-cinder-backup@sha256:b6653696345c9de7573839c805c94401dd032a8d30027218576406bf4654806e
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: cinder-backup
          resources: {}
          securityContext:
            privileged: true
            runAsUser: 42407
          startupProbe:
            failureThreshold: 12
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/cinder
            name: var-lib-cinder
          - mountPath: /etc/nvme
            name: etc-nvme
          - mountPath: /etc/iscsi
            name: etc-iscsi
            readOnly: true
          - mountPath: /dev
            name: dev
          - mountPath: /lib/modules
            name: lib-modules
            readOnly: true
          - mountPath: /run
            name: run
          - mountPath: /sys
            name: sys
          - mountPath: /var/locks/openstack/os-brick
            name: var-locks-brick
          - mountPath: /var/locks/openstack/cinder
            name: var-locks-cinder
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-backup-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/local/bin/container-scripts/healthcheck.py
          - backup
          - /etc/cinder/cinder.conf.d
          image: quay.io/podified-antelope-centos9/openstack-cinder-backup@sha256:b6653696345c9de7573839c805c94401dd032a8d30027218576406bf4654806e
          imagePullPolicy: IfNotPresent
          name: probe
          resources: {}
          securityContext:
            runAsGroup: 42407
            runAsUser: 42407
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/cinder
            name: var-lib-cinder
          - mountPath: /etc/nvme
            name: etc-nvme
          - mountPath: /etc/iscsi
            name: etc-iscsi
            readOnly: true
          - mountPath: /dev
            name: dev
          - mountPath: /lib/modules
            name: lib-modules
            readOnly: true
          - mountPath: /run
            name: run
          - mountPath: /sys
            name: sys
          - mountPath: /var/locks/openstack/os-brick
            name: var-locks-brick
          - mountPath: /var/locks/openstack/cinder
            name: var-locks-cinder
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-backup-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        hostPID: true
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-e64dd
        serviceAccountName: cinder-cinder-e64dd
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-e64dd-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-e64dd-config-data
        - hostPath:
            path: /var/lib/cinder
            type: DirectoryOrCreate
          name: var-lib-cinder
        - hostPath:
            path: /etc/nvme
            type: DirectoryOrCreate
          name: etc-nvme
        - hostPath:
            path: /etc/iscsi
            type: ""
          name: etc-iscsi
        - hostPath:
            path: /dev
            type: ""
          name: dev
        - hostPath:
            path: /lib/modules
            type: ""
          name: lib-modules
        - hostPath:
            path: /run
            type: ""
          name: run
        - hostPath:
            path: /sys
            type: ""
          name: sys
        - hostPath:
            path: /var/locks/openstack/os-brick
            type: DirectoryOrCreate
          name: var-locks-brick
        - hostPath:
            path: /var/locks/openstack/cinder
            type: DirectoryOrCreate
          name: var-locks-cinder
        - name: config-data-custom
          secret:
            defaultMode: 420
            secretName: cinder-e64dd-backup-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: cinder-e64dd-backup-d54fd549b
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updateRevision: cinder-e64dd-backup-d54fd549b
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:38:34Z"
    generation: 2
    labels:
      component: cinder-scheduler
      service: cinder
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a3e2ab8c-bc50-486a-aea3-73a4f21b9ef6"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"cinder-scheduler"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"probe"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:38:38Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:38:59Z"
    name: cinder-e64dd-scheduler
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: CinderScheduler
      name: cinder-e64dd-scheduler
      uid: a3e2ab8c-bc50-486a-aea3-73a4f21b9ef6
    resourceVersion: "32214"
    uid: eed213b1-18ca-4d8f-a1d9-077df71e2047
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: OrderedReady
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: cinder-scheduler
        service: cinder
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          component: cinder-scheduler
          service: cinder
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: component
                    operator: In
                    values:
                    - cinder-scheduler
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: nc6h588h5fh56ch5chc6h685h647h67ch5dbh657hc7h6ch5bh55bh5d7h695h58dh546h5bbh696hc5hcdh5d6h5dfh67ch697h66h8bh5cfh54h5b6q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-cinder-scheduler@sha256:9b872cb203a96eecc6a17a2d4bb8ff46d1466c7be3000cddd68be89f74016777
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: cinder-scheduler
          resources: {}
          securityContext:
            runAsUser: 42407
          startupProbe:
            failureThreshold: 12
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-scheduler-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/local/bin/container-scripts/healthcheck.py
          - scheduler
          - /etc/cinder/cinder.conf.d
          image: quay.io/podified-antelope-centos9/openstack-cinder-scheduler@sha256:9b872cb203a96eecc6a17a2d4bb8ff46d1466c7be3000cddd68be89f74016777
          imagePullPolicy: IfNotPresent
          name: probe
          resources: {}
          securityContext:
            runAsGroup: 42407
            runAsUser: 42407
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-scheduler-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-e64dd
        serviceAccountName: cinder-cinder-e64dd
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-e64dd-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-e64dd-config-data
        - name: config-data-custom
          secret:
            defaultMode: 420
            secretName: cinder-e64dd-scheduler-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: cinder-e64dd-scheduler-5b7487555b
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updateRevision: cinder-e64dd-scheduler-5b7487555b
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:38:34Z"
    generation: 2
    labels:
      backend: lvm-iscsi
      component: cinder-volume
      service: cinder
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:backend: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6da448bf-ad27-4350-8a15-2787e6f08283"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:backend: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"cinder-volume"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MALLOC_ARENA_MAX"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MALLOC_MMAP_THRESHOLD_"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MALLOC_TRIM_THRESHOLD_"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:privileged: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/dev"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/iscsi"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/nvme"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/lib/modules"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/run"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/sys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/locks/openstack/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/locks/openstack/os-brick"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"probe"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/dev"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/iscsi"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/nvme"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/lib/modules"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/run"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/sys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/locks/openstack/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/locks/openstack/os-brick"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:hostPID: {}
              f:nodeSelector: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"dev"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-iscsi"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-nvme"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"lib-modules"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"run"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"sys"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"var-lib-cinder"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"var-locks-brick"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"var-locks-cinder"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:38:38Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:38:59Z"
    name: cinder-e64dd-volume-lvm-iscsi
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: CinderVolume
      name: cinder-e64dd-volume-lvm-iscsi
      uid: 6da448bf-ad27-4350-8a15-2787e6f08283
    resourceVersion: "32220"
    uid: 9ac01193-7a8c-402b-b6c7-502c427ec80e
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: OrderedReady
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        backend: lvm-iscsi
        component: cinder-volume
        service: cinder
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          backend: lvm-iscsi
          component: cinder-volume
          service: cinder
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: component
                    operator: In
                    values:
                    - cinder-volume
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n686hbch597h5d6h568h8h99h64dh56bh687h55ch56h555h669h58ch55hfch5d5h687hcbh5bh558h646h68bhc7h64ch5d5h5c5h5bh8h65dh74q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: MALLOC_ARENA_MAX
            value: "1"
          - name: MALLOC_MMAP_THRESHOLD_
            value: "131072"
          - name: MALLOC_TRIM_THRESHOLD_
            value: "262144"
          image: quay.io/podified-antelope-centos9/openstack-cinder-volume@sha256:46e8a618b5c7be7e112d51c61b7a55c4ece540d5a7adc2b1718364a79d3fe60c
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: cinder-volume
          resources: {}
          securityContext:
            privileged: true
            runAsUser: 42407
          startupProbe:
            failureThreshold: 12
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/cinder
            name: var-lib-cinder
          - mountPath: /etc/nvme
            name: etc-nvme
          - mountPath: /etc/iscsi
            name: etc-iscsi
            readOnly: true
          - mountPath: /dev
            name: dev
          - mountPath: /lib/modules
            name: lib-modules
            readOnly: true
          - mountPath: /run
            name: run
          - mountPath: /sys
            name: sys
          - mountPath: /var/locks/openstack/os-brick
            name: var-locks-brick
          - mountPath: /var/locks/openstack/cinder
            name: var-locks-cinder
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-volume-lvm-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/local/bin/container-scripts/healthcheck.py
          - volume
          - /etc/cinder/cinder.conf.d
          image: quay.io/podified-antelope-centos9/openstack-cinder-volume@sha256:46e8a618b5c7be7e112d51c61b7a55c4ece540d5a7adc2b1718364a79d3fe60c
          imagePullPolicy: IfNotPresent
          name: probe
          resources: {}
          securityContext:
            runAsGroup: 42407
            runAsUser: 42407
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/cinder
            name: var-lib-cinder
          - mountPath: /etc/nvme
            name: etc-nvme
          - mountPath: /etc/iscsi
            name: etc-iscsi
            readOnly: true
          - mountPath: /dev
            name: dev
          - mountPath: /lib/modules
            name: lib-modules
            readOnly: true
          - mountPath: /run
            name: run
          - mountPath: /sys
            name: sys
          - mountPath: /var/locks/openstack/os-brick
            name: var-locks-brick
          - mountPath: /var/locks/openstack/cinder
            name: var-locks-cinder
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-volume-lvm-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        hostPID: true
        nodeSelector:
          openstack.org/cinder-lvm: ""
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-e64dd
        serviceAccountName: cinder-cinder-e64dd
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-e64dd-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-e64dd-config-data
        - hostPath:
            path: /var/lib/cinder
            type: DirectoryOrCreate
          name: var-lib-cinder
        - hostPath:
            path: /etc/nvme
            type: DirectoryOrCreate
          name: etc-nvme
        - hostPath:
            path: /etc/iscsi
            type: ""
          name: etc-iscsi
        - hostPath:
            path: /dev
            type: ""
          name: dev
        - hostPath:
            path: /lib/modules
            type: ""
          name: lib-modules
        - hostPath:
            path: /run
            type: ""
          name: run
        - hostPath:
            path: /sys
            type: ""
          name: sys
        - hostPath:
            path: /var/locks/openstack/os-brick
            type: DirectoryOrCreate
          name: var-locks-brick
        - hostPath:
            path: /var/locks/openstack/cinder
            type: DirectoryOrCreate
          name: var-locks-cinder
        - name: config-data-custom
          secret:
            defaultMode: 420
            secretName: cinder-e64dd-volume-lvm-iscsi-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: cinder-e64dd-volume-lvm-iscsi-694cfff449
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updateRevision: cinder-e64dd-volume-lvm-iscsi-694cfff449
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:37:54Z"
    generation: 4
    labels:
      component: glance-api
      glanceAPI: glance-default-external
      owner: glance-bf784-default-external
      service: glance
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:glanceAPI: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a772f1bc-2162-4a62-b949-58a612bf178c"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:glanceAPI: {}
                f:owner: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"glance-httpd"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"GLANCE_DOMAIN"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"URISCHEME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:privileged: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/run/httpd"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/glance"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/log/glance"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"glance-log"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"GLANCE_DOMAIN"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"URISCHEME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/log/glance"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"httpd-run"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:39:11Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:39:42Z"
    name: glance-bf784-default-external-api
    namespace: openstack
    ownerReferences:
    - apiVersion: glance.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: GlanceAPI
      name: glance-bf784-default-external
      uid: a772f1bc-2162-4a62-b949-58a612bf178c
    resourceVersion: "33525"
    uid: a483dbe4-5f48-46de-b3e4-1301a2faa687
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: glance-api
        glanceAPI: glance-default-external
        owner: glance-bf784-default-external
        service: glance
    serviceName: glance-bf784-default-external-api
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"storage","namespace":"openstack","interface":"storage"}]'
        creationTimestamp: null
        labels:
          component: glance-api
          glanceAPI: glance-default-external
          owner: glance-bf784-default-external
          service: glance
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - glance
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - --single-child
          - --
          - /bin/sh
          - -c
          - /usr/bin/tail -n+1 -F /var/log/glance/glance-bf784-default-external.log
            2>/dev/null
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: ndh9dh66bh649h87h5bfh694h697h67dh5f8h697h646h5cfh54dhcfh7fh55bh6bh57dh7bhd5h9h664hd9h698h664h584h5b6h55h77h7bh76q
          - name: GLANCE_DOMAIN
            value: glance-bf784-default-external-api.openstack.svc
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: URISCHEME
            value: HTTPS
          image: quay.io/podified-antelope-centos9/openstack-glance-api@sha256:ed912eee9adeda5c44804688cc7661695a42ab1a40fa46b28bdc819cefa98f07
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: glance-log
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsGroup: 42415
            runAsNonRoot: true
            runAsUser: 42415
            seccompProfile:
              type: RuntimeDefault
          startupProbe:
            exec:
              command:
              - /bin/true
            failureThreshold: 6
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/log/glance
            name: logs
        - args:
          - --single-child
          - --
          - /bin/bash
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: ndh9dh66bh649h87h5bfh694h697h67dh5f8h697h646h5cfh54dhcfh7fh55bh6bh57dh7bhd5h9h664hd9h698h664h584h5b6h55h77h7bh76q
          - name: GLANCE_DOMAIN
            value: glance-bf784-default-external-api.openstack.svc
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: URISCHEME
            value: HTTPS
          image: quay.io/podified-antelope-centos9/openstack-glance-api@sha256:ed912eee9adeda5c44804688cc7661695a42ab1a40fa46b28bdc819cefa98f07
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: glance-httpd
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            allowPrivilegeEscalation: true
            capabilities:
              drop:
              - MKNOD
            privileged: false
            runAsGroup: 42415
            runAsUser: 42415
            seccompProfile:
              type: RuntimeDefault
          startupProbe:
            exec:
              command:
              - /bin/true
            failureThreshold: 6
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: glance-httpd-config.json
          - mountPath: /var/lib/glance
            name: glance
          - mountPath: /var/log/glance
            name: logs
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /run/httpd
            name: httpd-run
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /etc/pki/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 42415
        serviceAccount: glance-glance-bf784
        serviceAccountName: glance-glance-bf784
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 420
            secretName: glance-bf784-default-external-config-data
        - name: config-data-custom
          secret:
            defaultMode: 420
            secretName: glance-bf784-default-external-config-data
        - emptyDir: {}
          name: logs
        - name: scripts
          secret:
            defaultMode: 493
            secretName: glance-scripts
        - emptyDir: {}
          name: httpd-run
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-glance-default-public-svc
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          component: glance-api
          glanceAPI: glance-default-external
          owner: glance-bf784-default-external
          service: glance
        name: glance
        namespace: openstack
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: glance-bf784-default-external-api-6f5494f485
    observedGeneration: 4
    readyReplicas: 1
    replicas: 1
    updateRevision: glance-bf784-default-external-api-6f5494f485
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:37:54Z"
    generation: 4
    labels:
      component: glance-api
      glanceAPI: glance-default-internal
      owner: glance-bf784-default-internal
      service: glance
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:glanceAPI: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"7b4c4a5e-d60c-44f5-ada4-babe5d941075"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:glanceAPI: {}
                f:owner: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"glance-httpd"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"GLANCE_DOMAIN"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"URISCHEME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:privileged: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/run/httpd"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/glance"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/log/glance"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"glance-log"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"GLANCE_DOMAIN"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"URISCHEME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/log/glance"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"httpd-run"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:39:14Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:39:42Z"
    name: glance-bf784-default-internal-api
    namespace: openstack
    ownerReferences:
    - apiVersion: glance.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: GlanceAPI
      name: glance-bf784-default-internal
      uid: 7b4c4a5e-d60c-44f5-ada4-babe5d941075
    resourceVersion: "33513"
    uid: 272e7793-cc90-4537-9bc6-b80332492849
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: glance-api
        glanceAPI: glance-default-internal
        owner: glance-bf784-default-internal
        service: glance
    serviceName: glance-bf784-default-internal-api
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"storage","namespace":"openstack","interface":"storage"}]'
        creationTimestamp: null
        labels:
          component: glance-api
          glanceAPI: glance-default-internal
          owner: glance-bf784-default-internal
          service: glance
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - glance
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - --single-child
          - --
          - /bin/sh
          - -c
          - /usr/bin/tail -n+1 -F /var/log/glance/glance-bf784-default-internal.log
            2>/dev/null
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n544h5cbh98h9ch9dh597h5d5h547h5fch596h88h5c5h566h59h654h577h645h6hdchffhffh648h5d8h66h654h598hddh5fhb5h595h647h668q
          - name: GLANCE_DOMAIN
            value: glance-bf784-default-internal-api.openstack.svc
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: URISCHEME
            value: HTTPS
          image: quay.io/podified-antelope-centos9/openstack-glance-api@sha256:ed912eee9adeda5c44804688cc7661695a42ab1a40fa46b28bdc819cefa98f07
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: glance-log
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsGroup: 42415
            runAsNonRoot: true
            runAsUser: 42415
            seccompProfile:
              type: RuntimeDefault
          startupProbe:
            exec:
              command:
              - /bin/true
            failureThreshold: 6
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/log/glance
            name: logs
        - args:
          - --single-child
          - --
          - /bin/bash
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n544h5cbh98h9ch9dh597h5d5h547h5fch596h88h5c5h566h59h654h577h645h6hdchffhffh648h5d8h66h654h598hddh5fhb5h595h647h668q
          - name: GLANCE_DOMAIN
            value: glance-bf784-default-internal-api.openstack.svc
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: URISCHEME
            value: HTTPS
          image: quay.io/podified-antelope-centos9/openstack-glance-api@sha256:ed912eee9adeda5c44804688cc7661695a42ab1a40fa46b28bdc819cefa98f07
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: glance-httpd
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            allowPrivilegeEscalation: true
            capabilities:
              drop:
              - MKNOD
            privileged: false
            runAsGroup: 42415
            runAsUser: 42415
            seccompProfile:
              type: RuntimeDefault
          startupProbe:
            exec:
              command:
              - /bin/true
            failureThreshold: 6
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: glance-httpd-config.json
          - mountPath: /var/lib/glance
            name: glance
          - mountPath: /var/log/glance
            name: logs
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /run/httpd
            name: httpd-run
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /etc/pki/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 42415
        serviceAccount: glance-glance-bf784
        serviceAccountName: glance-glance-bf784
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 420
            secretName: glance-bf784-default-internal-config-data
        - name: config-data-custom
          secret:
            defaultMode: 420
            secretName: glance-bf784-default-internal-config-data
        - emptyDir: {}
          name: logs
        - name: scripts
          secret:
            defaultMode: 493
            secretName: glance-scripts
        - emptyDir: {}
          name: httpd-run
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-glance-default-internal-svc
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          component: glance-api
          glanceAPI: glance-default-internal
          owner: glance-bf784-default-internal
          service: glance
        name: glance
        namespace: openstack
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: glance-bf784-default-internal-api-9b485c56c
    observedGeneration: 4
    readyReplicas: 1
    replicas: 1
    updateRevision: glance-bf784-default-internal-api-9b485c56c
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:38:45Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"a8d665dc-6b05-40ec-aa8a-dace8d57ff6a"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:conductorGroup: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"dnsmasq"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:add: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"httpboot"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"ironic-conductor"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabaseHost"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DatabaseName"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DeployHTTPURL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"IngressDomain"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"IronicPassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"PodName"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PodNamespace"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"ProvisionNetwork"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"QuorumQueues"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"TransportURL"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"ironic-python-agent-init"}:
                  .: {}
                  f:env:
                    .: {}
                    k:{"name":"DEST_DIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:privileged: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"pxe-init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabaseHost"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DatabaseName"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DeployHTTPURL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"IngressDomain"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"IronicPassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"PodName"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PodNamespace"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"ProvisionNetwork"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"QuorumQueues"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"TransportURL"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:privileged: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-merged"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:38:45Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:40:49Z"
    name: ironic-conductor
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: IronicConductor
      name: ironic-conductor
      uid: a8d665dc-6b05-40ec-aa8a-dace8d57ff6a
    resourceVersion: "34745"
    uid: b1a30c99-b732-4a28-83cb-718ab41ef016
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: OrderedReady
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: conductor
        conductorGroup: null_conductor_group_null
        service: ironic
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"ironic","namespace":"openstack","interface":"ironic"}]'
        creationTimestamp: null
        labels:
          component: conductor
          conductorGroup: null_conductor_group_null
          service: ironic
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - ironic
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n75hfbh87h5cdhc4h68dh84h586h7fh686h5fch68ch5b5hb8h5ch7fh57fhdbh59hfch597h8ch5fchd6h55ch556h78h55h59dh645h88h59fq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor@sha256:7dc1464a072b28d5bc1e10127f898f61e85cffb63a67a51a15fd01322da295fa
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /usr/local/bin/container-scripts/live_check_conductor
            failureThreshold: 3
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 5
          name: ironic-conductor
          resources: {}
          securityContext:
            runAsUser: 0
          startupProbe:
            exec:
              command:
              - /usr/local/bin/container-scripts/live_check_conductor
            failureThreshold: 30
            periodSeconds: 2
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: ironic-conductor-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n75hfbh87h5cdhc4h68dh84h586h7fh686h5fch68ch5b5hb8h5ch7fh57fhdbh59hfch597h8ch5fchd6h55ch556h78h55h59dh645h88h59fq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-pxe@sha256:5ebcf9bc3c064a788777232f143300a64def982588dbcff6a82e779cfacc28c4
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            tcpSocket:
              port: 8088
            timeoutSeconds: 10
          name: httpboot
          readinessProbe:
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            tcpSocket:
              port: 8088
            timeoutSeconds: 10
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: httpboot-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n75hfbh87h5cdhc4h68dh84h586h7fh686h5fch68ch5b5hb8h5ch7fh57fhdbh59hfch597h8ch5fchd6h55ch556h78h55h59dh645h88h59fq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-pxe@sha256:5ebcf9bc3c064a788777232f143300a64def982588dbcff6a82e779cfacc28c4
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - sh
              - -c
              - ss -lun | grep :69
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 10
          name: dnsmasq
          readinessProbe:
            exec:
              command:
              - sh
              - -c
              - ss -lun | grep :69
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 10
          resources: {}
          securityContext:
            capabilities:
              add:
              - NET_ADMIN
              - NET_RAW
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: dnsmasq-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/init.sh
          command:
          - /bin/bash
          env:
          - name: IronicPassword
            valueFrom:
              secretKeyRef:
                key: IronicPassword
                name: osp-secret
          - name: PodName
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: PodNamespace
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: ProvisionNetwork
            value: ironic
          - name: TransportURL
            valueFrom:
              secretKeyRef:
                key: transport_url
                name: rabbitmq-transport-url-ironic-transport
          - name: QuorumQueues
            valueFrom:
              secretKeyRef:
                key: quorumqueues
                name: rabbitmq-transport-url-ironic-transport
                optional: true
          - name: DatabaseHost
            value: openstack.openstack.svc
          - name: DatabaseName
            value: ironic
          - name: DeployHTTPURL
            value: http://%(ProvisionNetworkIP)s:8088/
          - name: IngressDomain
            value: apps.sno.openstack.lab
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor@sha256:7dc1464a072b28d5bc1e10127f898f61e85cffb63a67a51a15fd01322da295fa
          imagePullPolicy: IfNotPresent
          name: init
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - env:
          - name: DEST_DIR
            value: /var/lib/ironic/httpboot
          image: quay.io/podified-antelope-centos9/ironic-python-agent@sha256:0dea7fa3ede253c003e819495c9c017380d89d6827460d7d98ec4d6447440797
          imagePullPolicy: IfNotPresent
          name: ironic-python-agent-init
          resources: {}
          securityContext:
            privileged: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/container-scripts/pxe-init.sh
          command:
          - /bin/bash
          env:
          - name: IronicPassword
            valueFrom:
              secretKeyRef:
                key: IronicPassword
                name: osp-secret
          - name: PodName
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: PodNamespace
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: ProvisionNetwork
            value: ironic
          - name: TransportURL
            valueFrom:
              secretKeyRef:
                key: transport_url
                name: rabbitmq-transport-url-ironic-transport
          - name: QuorumQueues
            valueFrom:
              secretKeyRef:
                key: quorumqueues
                name: rabbitmq-transport-url-ironic-transport
                optional: true
          - name: DatabaseHost
            value: openstack.openstack.svc
          - name: DatabaseName
            value: ironic
          - name: DeployHTTPURL
            value: http://%(ProvisionNetworkIP)s:8088/
          - name: IngressDomain
            value: apps.sno.openstack.lab
          image: quay.io/podified-antelope-centos9/openstack-ironic-pxe@sha256:5ebcf9bc3c064a788777232f143300a64def982588dbcff6a82e779cfacc28c4
          imagePullPolicy: IfNotPresent
          name: pxe-init
          resources: {}
          securityContext:
            privileged: true
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 120
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-conductor-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: ironic-conductor-config-data
        - emptyDir: {}
          name: config-data-merged
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: config-data-custom
          secret:
            defaultMode: 416
            secretName: ironic-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          component: conductor
          conductorGroup: null_conductor_group_null
          service: ironic
        name: var-lib-ironic
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: ironic-conductor-868fbbf584
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: ironic-conductor-868fbbf584
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:39:23Z"
    generation: 2
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"28eb105e-380b-4b71-b55d-17ace10b2528"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"inspector-dnsmasq"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:add: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"inspector-httpboot"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"ironic-inspector"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"ironic-inspector-httpd"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"ramdisk-logs"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"inspector-pxe-init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabaseHost"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DatabaseName"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"IngressDomain"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"InspectionNetwork"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"InspectorHTTPURL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"IronicInspectorPassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"PodName"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PodNamespace"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"QuorumQueues"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"TransportURL"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:add: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"ironic-python-agent-init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DEST_DIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:privileged: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"var-lib-ironic"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"var-lib-ironic-inspector-dhcp-hostsdir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:39:29Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:39:56Z"
    name: ironic-inspector
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: IronicInspector
      name: ironic-inspector
      uid: 28eb105e-380b-4b71-b55d-17ace10b2528
    resourceVersion: "33676"
    uid: 04ff9894-4e2e-4119-aedd-9dad8fc6b92c
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: inspector
        service: ironic
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"ironic","namespace":"openstack","interface":"ironic"}]'
        creationTimestamp: null
        labels:
          component: inspector
          service: ironic
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - ironic
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: nb5hfch6dh66bh5f8h579hcfhdch598h5b8h547h67chbfh675h586h5c6h5b7h648h664h5ffhd5hc4hf6h549hc7h648h556hcbhfh554h587h5f9q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector@sha256:ca987f85e8c33f1a9dd33dd0e8422facaf1f38aa1fa48ce8357ff541645e74db
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /v1
              port: 5050
              scheme: HTTPS
            initialDelaySeconds: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          name: ironic-inspector-httpd
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /v1
              port: 5050
              scheme: HTTPS
            initialDelaySeconds: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 0
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /v1
              port: 5050
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: httpd-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: nb5hfch6dh66bh5f8h579hcfhdch598h5b8h547h67chbfh675h586h5c6h5b7h648h664h5ffhd5hc4hf6h549hc7h648h556hcbhfh554h587h5f9q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector@sha256:ca987f85e8c33f1a9dd33dd0e8422facaf1f38aa1fa48ce8357ff541645e74db
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /v1
              port: 5050
              scheme: HTTPS
            initialDelaySeconds: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          name: ironic-inspector
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /v1
              port: 5050
              scheme: HTTPS
            initialDelaySeconds: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 0
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /v1
              port: 5050
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: ironic-inspector-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: nb5hfch6dh66bh5f8h579hcfhdch598h5b8h547h67chbfh675h586h5c6h5b7h648h664h5ffhd5hc4hf6h549hc7h648h556hcbhfh554h587h5f9q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-pxe@sha256:5ebcf9bc3c064a788777232f143300a64def982588dbcff6a82e779cfacc28c4
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            tcpSocket:
              port: 8088
            timeoutSeconds: 10
          name: inspector-httpboot
          readinessProbe:
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            tcpSocket:
              port: 8088
            timeoutSeconds: 10
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: httpboot-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: nb5hfch6dh66bh5f8h579hcfhdch598h5b8h547h67chbfh675h586h5c6h5b7h648h664h5ffhd5hc4hf6h549hc7h648h556hcbhfh554h587h5f9q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector@sha256:ca987f85e8c33f1a9dd33dd0e8422facaf1f38aa1fa48ce8357ff541645e74db
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /usr/bin/pkill
                - inotifywait
          name: ramdisk-logs
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: ramdisk-logs-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: nb5hfch6dh66bh5f8h579hcfhdch598h5b8h547h67chbfh675h586h5c6h5b7h648h664h5ffhd5hc4hf6h549hc7h648h556hcbhfh554h587h5f9q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector@sha256:ca987f85e8c33f1a9dd33dd0e8422facaf1f38aa1fa48ce8357ff541645e74db
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - sh
              - -c
              - ss -lun | grep :69
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 10
          name: inspector-dnsmasq
          readinessProbe:
            exec:
              command:
              - sh
              - -c
              - ss -lun | grep :69
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 10
          resources: {}
          securityContext:
            capabilities:
              add:
              - NET_ADMIN
              - NET_RAW
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: dnsmasq-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - args:
          - -c
          - mkdir -p /var/lib/ironic/httpboot /var/lib/ironic/ramdisk-logs
          command:
          - /bin/bash
          env:
          - name: DEST_DIR
            value: /var/lib/ironic/httpboot
          image: quay.io/podified-antelope-centos9/ironic-python-agent@sha256:0dea7fa3ede253c003e819495c9c017380d89d6827460d7d98ec4d6447440797
          imagePullPolicy: IfNotPresent
          name: ironic-python-agent-init
          resources: {}
          securityContext:
            privileged: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/container-scripts/inspector-pxe-init.sh
          command:
          - /bin/bash
          env:
          - name: IronicInspectorPassword
            valueFrom:
              secretKeyRef:
                key: IronicInspectorPassword
                name: osp-secret
          - name: PodName
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: PodNamespace
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: TransportURL
            valueFrom:
              secretKeyRef:
                key: transport_url
                name: rabbitmq-transport-url-ironic-inspector-transport
          - name: QuorumQueues
            valueFrom:
              secretKeyRef:
                key: quorumqueues
                name: rabbitmq-transport-url-ironic-inspector-transport
                optional: true
          - name: DatabaseHost
            value: openstack.openstack.svc
          - name: DatabaseName
            value: ironic_inspector
          - name: IngressDomain
            value: apps.sno.openstack.lab
          - name: InspectionNetwork
            value: ironic
          - name: InspectorHTTPURL
            value: http://%(InspectorNetworkIP)s:8088/
          image: quay.io/podified-antelope-centos9/openstack-ironic-pxe@sha256:5ebcf9bc3c064a788777232f143300a64def982588dbcff6a82e779cfacc28c4
          imagePullPolicy: IfNotPresent
          name: inspector-pxe-init
          resources: {}
          securityContext:
            capabilities:
              add:
              - SYS_CHROOT
              - SETFCAP
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 60
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-inspector-scripts
        - name: config
          secret:
            defaultMode: 416
            secretName: ironic-inspector-config-data
        - emptyDir: {}
          name: var-lib-ironic
        - emptyDir: {}
          name: var-lib-ironic-inspector-dhcp-hostsdir
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ironic-inspector-internal-svc
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ironic-inspector-public-svc
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: ironic-inspector-6d9cfbf4c8
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updateRevision: ironic-inspector-6d9cfbf4c8
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:36:30Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"76024ca0-f215-4033-b645-dfe644ffc9bf"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app: {}
                f:cr: {}
                f:memcached/name: {}
                f:memcached/namespace: {}
                f:memcached/uid: {}
                f:owner: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"memcached"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"POD_IPS"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":11211,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":11212,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/memcached.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/memcached.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/src"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"kolla-config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"memcached-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:36:30Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:37:01Z"
    name: memcached
    namespace: openstack
    ownerReferences:
    - apiVersion: memcached.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Memcached
      name: memcached
      uid: 76024ca0-f215-4033-b645-dfe644ffc9bf
    resourceVersion: "27758"
    uid: 5642e009-a233-42aa-ad49-88cd02e74704
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: OrderedReady
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: memcached
        cr: memcached
        owner: infra-operator
        service: memcached
    serviceName: memcached
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: memcached
          cr: memcached
          memcached/name: memcached
          memcached/namespace: openstack
          memcached/uid: 76024ca0-f215-4033-b645-dfe644ffc9bf
          owner: infra-operator
          service: memcached
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - memcached
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - command:
          - /usr/bin/dumb-init
          - --
          - /usr/local/bin/kolla_start
          env:
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: POD_IPS
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: status.podIPs
          - name: CONFIG_HASH
            value: n55bh689h678hd9h576h695h5d9h56bh647h76h4hd9h65h57fh66fhf5h685h699h94hdbh668h647h55ch5d7h7hb7h66fhcdh98h649hch77q
          image: quay.io/podified-antelope-centos9/openstack-memcached@sha256:f434d78bf81ef3a2087c435011ff995697fc8e53555ba27c2b8d2425e38bda44
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            tcpSocket:
              port: 11211
            timeoutSeconds: 5
          name: memcached
          ports:
          - containerPort: 11211
            name: memcached
            protocol: TCP
          - containerPort: 11212
            name: memcached-tls
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            tcpSocket:
              port: 11211
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsGroup: 42457
            runAsUser: 42457
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/kolla/config_files/src
            name: config-data
            readOnly: true
          - mountPath: /var/lib/kolla/config_files
            name: kolla-config
            readOnly: true
          - mountPath: /var/lib/config-data/tls/certs/memcached.crt
            name: memcached-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/memcached.key
            name: memcached-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: memcached-memcached
        serviceAccountName: memcached-memcached
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: config.json
              path: config.json
            name: memcached-config-data
          name: kolla-config
        - configMap:
            defaultMode: 420
            items:
            - key: memcached
              path: etc/sysconfig/memcached
            name: memcached-config-data
          name: config-data
        - name: memcached-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-memcached-svc
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: memcached-5c7546bd7
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: memcached-5c7546bd7
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:40:14Z"
    generation: 4
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"0bb480d9-581a-4e59-8553-13ec57abf687"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-api-api"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/log/nova"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"nova-api-log"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/log/nova"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:41:12Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:41:34Z"
    name: nova-api
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaAPI
      name: nova-api
      uid: 0bb480d9-581a-4e59-8553-13ec57abf687
    resourceVersion: "35592"
    uid: 9055ef47-6f76-41a3-89e6-81440b649fb2
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: nova-api
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          service: nova-api
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-api
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - --single-child
          - --
          - /bin/sh
          - -c
          - /usr/bin/tail -n+1 -F /var/log/nova/nova-api.log 2>/dev/null
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: nb7h6dh675hd6hfh64bhc8h675h5bfh554h565hbbh665h5f9h96h69hb7h584h56dh67fh5h5f5h598h587h555hc8h57dh685h674h75h54dh67bq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-api@sha256:c7906ad2cf5a1467684690a7612c36700d2c98ac2398ac588cb297b33a7f609c
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8774
              scheme: HTTPS
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: nova-api-log
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8774
              scheme: HTTPS
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            runAsUser: 42436
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /
              port: 8774
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/log/nova
            name: logs
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: nb7h6dh675hd6hfh64bhc8h675h5bfh554h565hbbh665h5f9h96h69hb7h584h56dh67fh5h5f5h598h587h555hc8h57dh685h674h75h54dh67bq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-api@sha256:c7906ad2cf5a1467684690a7612c36700d2c98ac2398ac588cb297b33a7f609c
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8774
              scheme: HTTPS
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: nova-api-api
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8774
              scheme: HTTPS
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            runAsUser: 42436
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /
              port: 8774
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/log/nova
            name: logs
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-api-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-api-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-nova-internal-svc
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-nova-public-svc
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-api-c7777fb9b
    observedGeneration: 4
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-api-c7777fb9b
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:40:03Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"57425482-4b65-4e6e-8ba3-fa413003b788"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:cell: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-cell0-conductor-conductor"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:40:03Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:40:13Z"
    name: nova-cell0-conductor
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell0-conductor
      uid: 57425482-4b65-4e6e-8ba3-fa413003b788
    resourceVersion: "33865"
    uid: 97370a77-280f-4232-abee-7f0707603b09
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        cell: cell0
        service: nova-conductor
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          cell: cell0
          service: nova-conductor
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-cell0-conductor
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n649h58dh57bh575h569hc9h59fh586h88h5d9hc9h56h66bh567h5c6hfhb5h5d8h5b4hd5h546h58dh68fh7dh56ch5dch55h557h5dh57ch559h58fq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:3eef424a6a774edf70efa63eb6b5c669b23d9cc047c1dd9d18636b549206459e
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-conductor
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: nova-cell0-conductor-conductor
          readinessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-conductor
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell0-conductor-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-cell0-conductor-ccc9dd567
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-cell0-conductor-ccc9dd567
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:40:14Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"6102bc71-715e-470a-8c3f-3d633b80ce02"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:cell: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-cell1-compute-ironic-compute-compute"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:40:14Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:40:31Z"
    name: nova-cell1-compute-ironic-compute
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaCompute
      name: nova-cell1-compute-ironic-compute
      uid: 6102bc71-715e-470a-8c3f-3d633b80ce02
    resourceVersion: "34474"
    uid: 8c620ec6-8618-4a90-85ac-7f611499dfb0
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        cell: cell1
        service: nova-compute
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          cell: cell1
          service: nova-compute
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-cell1-compute-ironic-compute
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n56bh54dh5c7hb7hffh5c7hbchb6h65bh54fh57ch556h5ddh687h5f5h69h5bdh77h649hf5h565h5f5h546h598h5b9h6fh5d8h9dh548h5bdh5bfh99q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-compute@sha256:c37f1275cfc51fc2227bf56a2be6262158f62fb30ca651f154bed25112d6d355
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-compute
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: nova-cell1-compute-ironic-compute-compute
          readinessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-compute
            failureThreshold: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-compute-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-compute-ironic-compute-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-cell1-compute-ironic-compute-7b86647bd8
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-cell1-compute-ironic-compute-7b86647bd8
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:40:32Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"d3465768-0246-4933-aaa8-a79c3ad71ad9"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:cell: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-cell1-conductor-conductor"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:40:32Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:40:43Z"
    name: nova-cell1-conductor
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell1-conductor
      uid: d3465768-0246-4933-aaa8-a79c3ad71ad9
    resourceVersion: "34689"
    uid: 551bfba6-67af-48de-aeea-35d6194d6234
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        cell: cell1
        service: nova-conductor
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          cell: cell1
          service: nova-conductor
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-cell1-conductor
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: nf9h59bh5bdh556h58bh544h6fhd4h558hf5hd5h5dbh58h687h55ch697hd6h98h64fhc6h674hb7hd9h585h5d6h5dch56ch56h87h55fh58h665q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:3eef424a6a774edf70efa63eb6b5c669b23d9cc047c1dd9d18636b549206459e
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-conductor
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: nova-cell1-conductor-conductor
          readinessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-conductor
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-conductor-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-cell1-conductor-6fc5fbf6b6
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-cell1-conductor-6fc5fbf6b6
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:40:14Z"
    generation: 2
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"119cfc5b-1630-48ac-a881-b6645670ead5"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:cell: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-cell1-novncproxy-novncproxy"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/nova-novncproxy.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/vencrypt.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/nova-novncproxy.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/vencrypt.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"nova-novncproxy-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"vencrypt-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:40:18Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:41:03Z"
    name: nova-cell1-novncproxy
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaNoVNCProxy
      name: nova-cell1-novncproxy
      uid: 119cfc5b-1630-48ac-a881-b6645670ead5
    resourceVersion: "35077"
    uid: f9f00ebc-9d22-43ef-93ff-53bc850e7d5d
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        cell: cell1
        service: nova-novncproxy
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          cell: cell1
          service: nova-novncproxy
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-cell1-novncproxy
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n669hf5hbch697h8h8bh5d9h5cfh645h59fh678h6fh547hb4h565hfdh595h94h574h68bh595h6h5b4h6h656h7bh66ch59ch674h67ch5cch566q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-novncproxy@sha256:8962932efdb727ae0430f64b608878a1b93179b46dc26fd4f5d38c8eccc00f5d
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /vnc_lite.html
              port: 6080
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: nova-cell1-novncproxy-novncproxy
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /vnc_lite.html
              port: 6080
              scheme: HTTPS
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /vnc_lite.html
              port: 6080
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-novncproxy-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/nova-novncproxy.crt
            name: nova-novncproxy-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/nova-novncproxy.key
            name: nova-novncproxy-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/vencrypt.crt
            name: vencrypt-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/vencrypt.key
            name: vencrypt-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-novncproxy-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: nova-novncproxy-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-nova-novncproxy-cell1-public-svc
        - name: vencrypt-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-nova-novncproxy-cell1-vencrypt
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-cell1-novncproxy-b969559b4
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-cell1-novncproxy-b969559b4
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:40:14Z"
    generation: 4
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"179f4103-9083-490a-8f23-0bd2033f18a0"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-metadata-log"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/log/nova"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"nova-metadata-metadata"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/nova-metadata.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/nova-metadata.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/log/nova"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"nova-metadata-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:41:12Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:41:38Z"
    name: nova-metadata
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaMetadata
      name: nova-metadata
      uid: 179f4103-9083-490a-8f23-0bd2033f18a0
    resourceVersion: "35633"
    uid: 8d4950f4-e655-4e67-bffd-9aa52cd55b5a
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: nova-metadata
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          service: nova-metadata
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-metadata
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - --single-child
          - --
          - /bin/sh
          - -c
          - /usr/bin/tail -n+1 -F /var/log/nova/nova-metadata.log 2>/dev/null
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: nb5h694h7hb7h588h65dh65dh556h55dhf8hf9hbbh696h548hdch9bh548h5bh5cbh78h8ch5f8h555h686h5f7h5dbh667hf6h579h58h674hcbq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-api@sha256:c7906ad2cf5a1467684690a7612c36700d2c98ac2398ac588cb297b33a7f609c
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8775
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: nova-metadata-log
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8775
              scheme: HTTPS
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /
              port: 8775
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/log/nova
            name: logs
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: nb5h694h7hb7h588h65dh65dh556h55dhf8hf9hbbh696h548hdch9bh548h5bh5cbh78h8ch5f8h555h686h5f7h5dbh667hf6h579h58h674hcbq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-api@sha256:c7906ad2cf5a1467684690a7612c36700d2c98ac2398ac588cb297b33a7f609c
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8775
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: nova-metadata-metadata
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8775
              scheme: HTTPS
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /
              port: 8775
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/log/nova
            name: logs
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-metadata-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/nova-metadata.crt
            name: nova-metadata-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/nova-metadata.key
            name: nova-metadata-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-metadata-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: nova-metadata-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-nova-metadata-internal-svc
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-metadata-5494b5d49
    observedGeneration: 4
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-metadata-5494b5d49
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:40:14Z"
    generation: 3
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"c7100d57-f003-4b41-89eb-24d348ff3609"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-scheduler-scheduler"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:41:12Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:41:30Z"
    name: nova-scheduler
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaScheduler
      name: nova-scheduler
      uid: c7100d57-f003-4b41-89eb-24d348ff3609
    resourceVersion: "35541"
    uid: 12fe0858-dcb9-4dc0-9e6f-f903941cf7e2
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: nova-scheduler
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          service: nova-scheduler
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-scheduler
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n77hbfh685hc5h644h685h56h664h668h5f4hfbh549h55ch99h647h688h5d6h5bfh554h665h548h677hdch667h665hbdhdhd8h5d7hbh5d9h6q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-scheduler@sha256:c9b4945c93b9e450adbdb035f59d0f911b9e9c22b2ad694c58e37c43e3e8d697
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-scheduler
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: nova-scheduler-scheduler
          readinessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-scheduler
            failureThreshold: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          startupProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-scheduler
            failureThreshold: 6
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-scheduler-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-scheduler-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-scheduler-77b696867d
    observedGeneration: 3
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-scheduler-77b696867d
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:36:30Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"b8aaa896-4de0-4328-b598-78e177f50f2c"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app: {}
                f:cr: {}
                f:galera/name: {}
                f:galera/namespace: {}
                f:galera/uid: {}
                f:owner: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"galera"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CR_CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":3306,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":4567,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/generated"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/galera.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/galera.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/mysql"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"mysql-bootstrap"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/generated"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/mysql"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-default"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"config-data-generated"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"galera-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"kolla-config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:36:30Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:37:06Z"
    name: openstack-cell1-galera
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Galera
      name: openstack-cell1
      uid: b8aaa896-4de0-4328-b598-78e177f50f2c
    resourceVersion: "28145"
    uid: 861f685a-ff1b-4a53-95ba-621933a2b150
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: galera
        cr: galera-openstack-cell1
        galera/name: openstack-cell1
        galera/namespace: openstack
        galera/uid: b8aaa896-4de0-4328-b598-78e177f50f2c
        owner: mariadb-operator
        service: openstack-cell1-galera
    serviceName: openstack-cell1-galera
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: galera
          cr: galera-openstack-cell1
          galera/name: openstack-cell1
          galera/namespace: openstack
          galera/uid: b8aaa896-4de0-4328-b598-78e177f50f2c
          owner: mariadb-operator
          service: openstack-cell1-galera
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - openstack-cell1-galera
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - command:
          - /usr/bin/dumb-init
          - --
          - /usr/local/bin/kolla_start
          env:
          - name: CR_CONFIG_HASH
            value: nf4h5cdh5fch59dh544h57ch7fh89h688h5b4hbh587h64ch58dh54fh86hb7h5cdh544h67h699h67ch649h7dh57hdch558h575h59bh8dh689h7cq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:763d1f1e8a1cf877c151c59609960fd2fa29e7e50001f8818122a2d51878befa
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /bin/bash
                - /var/lib/operator-scripts/mysql_shutdown.sh
          livenessProbe:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_probe.sh
              - liveness
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          name: galera
          ports:
          - containerPort: 3306
            name: mysql
            protocol: TCP
          - containerPort: 4567
            name: galera
            protocol: TCP
          readinessProbe:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_probe.sh
              - readiness
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources: {}
          startupProbe:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_probe.sh
              - startup
              - "240"
            failureThreshold: 1
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 250
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/mysql
            name: mysql-db
            subPath: mysql
          - mountPath: /var/lib/config-data/default
            name: config-data-default
            readOnly: true
          - mountPath: /var/lib/config-data/generated
            name: config-data-generated
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
          - mountPath: /var/lib/kolla/config_files
            name: kolla-config
            readOnly: true
          - mountPath: /var/lib/config-data/tls/certs/galera.crt
            name: galera-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/galera.key
            name: galera-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - command:
          - bash
          - /var/lib/operator-scripts/mysql_bootstrap.sh
          env:
          - name: KOLLA_BOOTSTRAP
            value: "True"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:763d1f1e8a1cf877c151c59609960fd2fa29e7e50001f8818122a2d51878befa
          imagePullPolicy: IfNotPresent
          name: mysql-bootstrap
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/mysql
            name: mysql-db
            subPath: mysql
          - mountPath: /var/lib/config-data/default
            name: config-data-default
            readOnly: true
          - mountPath: /var/lib/config-data/generated
            name: config-data-generated
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
          - mountPath: /var/lib/kolla/config_files
            name: kolla-config
            readOnly: true
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: config.json
              path: config.json
            name: openstack-cell1-config-data
          name: kolla-config
        - emptyDir: {}
          name: config-data-generated
        - configMap:
            defaultMode: 420
            items:
            - key: galera.cnf.in
              path: galera.cnf.in
            - key: galera_custom.cnf.in
              path: galera_custom.cnf.in
            - key: galera_tls.cnf.in
              path: galera_tls.cnf.in
            name: openstack-cell1-config-data
          name: config-data-default
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_bootstrap.sh
              path: mysql_bootstrap.sh
            - key: mysql_probe.sh
              path: mysql_probe.sh
            - key: mysql_shutdown.sh
              path: mysql_shutdown.sh
            - key: detect_last_commit.sh
              path: detect_last_commit.sh
            - key: detect_gcomm_and_start.sh
              path: detect_gcomm_and_start.sh
            - key: mysql_wsrep_notify.sh
              path: mysql_wsrep_notify.sh
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
        - name: galera-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-galera-openstack-cell1-svc
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          app: galera
          cr: galera-openstack-cell1
          galera/name: openstack-cell1
          galera/namespace: openstack
          galera/uid: b8aaa896-4de0-4328-b598-78e177f50f2c
          owner: mariadb-operator
          service: openstack-cell1-galera
        name: mysql-db
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 5G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: openstack-cell1-galera-5d686748b8
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: openstack-cell1-galera-5d686748b8
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:36:27Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"ce227921-a1a3-4c88-8cf0-41e2377385af"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app: {}
                f:cr: {}
                f:galera/name: {}
                f:galera/namespace: {}
                f:galera/uid: {}
                f:owner: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"galera"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CR_CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":3306,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":4567,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/generated"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/galera.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/galera.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/mysql"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"mysql-bootstrap"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/generated"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/mysql"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-default"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"config-data-generated"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"galera-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"kolla-config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:36:27Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:37:07Z"
    name: openstack-galera
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Galera
      name: openstack
      uid: ce227921-a1a3-4c88-8cf0-41e2377385af
    resourceVersion: "28237"
    uid: 6f8cc29e-86a4-4179-8c08-94ac6c5ab7d8
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: galera
        cr: galera-openstack
        galera/name: openstack
        galera/namespace: openstack
        galera/uid: ce227921-a1a3-4c88-8cf0-41e2377385af
        owner: mariadb-operator
        service: openstack-galera
    serviceName: openstack-galera
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: galera
          cr: galera-openstack
          galera/name: openstack
          galera/namespace: openstack
          galera/uid: ce227921-a1a3-4c88-8cf0-41e2377385af
          owner: mariadb-operator
          service: openstack-galera
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - openstack-galera
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - command:
          - /usr/bin/dumb-init
          - --
          - /usr/local/bin/kolla_start
          env:
          - name: CR_CONFIG_HASH
            value: n64fh58ch5bch6h75h5bbh5b6h5dch5bbh56ch54fh6fh9h586h8ch57hb5hcch574h559h59bh58dh669h576h56bh674h546h9h5fdh688h677h699q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:763d1f1e8a1cf877c151c59609960fd2fa29e7e50001f8818122a2d51878befa
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /bin/bash
                - /var/lib/operator-scripts/mysql_shutdown.sh
          livenessProbe:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_probe.sh
              - liveness
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          name: galera
          ports:
          - containerPort: 3306
            name: mysql
            protocol: TCP
          - containerPort: 4567
            name: galera
            protocol: TCP
          readinessProbe:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_probe.sh
              - readiness
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources: {}
          startupProbe:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_probe.sh
              - startup
              - "240"
            failureThreshold: 1
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 250
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/mysql
            name: mysql-db
            subPath: mysql
          - mountPath: /var/lib/config-data/default
            name: config-data-default
            readOnly: true
          - mountPath: /var/lib/config-data/generated
            name: config-data-generated
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
          - mountPath: /var/lib/kolla/config_files
            name: kolla-config
            readOnly: true
          - mountPath: /var/lib/config-data/tls/certs/galera.crt
            name: galera-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/galera.key
            name: galera-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - command:
          - bash
          - /var/lib/operator-scripts/mysql_bootstrap.sh
          env:
          - name: KOLLA_BOOTSTRAP
            value: "True"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:763d1f1e8a1cf877c151c59609960fd2fa29e7e50001f8818122a2d51878befa
          imagePullPolicy: IfNotPresent
          name: mysql-bootstrap
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/mysql
            name: mysql-db
            subPath: mysql
          - mountPath: /var/lib/config-data/default
            name: config-data-default
            readOnly: true
          - mountPath: /var/lib/config-data/generated
            name: config-data-generated
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
          - mountPath: /var/lib/kolla/config_files
            name: kolla-config
            readOnly: true
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: config.json
              path: config.json
            name: openstack-config-data
          name: kolla-config
        - emptyDir: {}
          name: config-data-generated
        - configMap:
            defaultMode: 420
            items:
            - key: galera.cnf.in
              path: galera.cnf.in
            - key: galera_custom.cnf.in
              path: galera_custom.cnf.in
            - key: galera_tls.cnf.in
              path: galera_tls.cnf.in
            name: openstack-config-data
          name: config-data-default
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_bootstrap.sh
              path: mysql_bootstrap.sh
            - key: mysql_probe.sh
              path: mysql_probe.sh
            - key: mysql_shutdown.sh
              path: mysql_shutdown.sh
            - key: detect_last_commit.sh
              path: detect_last_commit.sh
            - key: detect_gcomm_and_start.sh
              path: detect_gcomm_and_start.sh
            - key: mysql_wsrep_notify.sh
              path: mysql_wsrep_notify.sh
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
        - name: galera-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-galera-openstack-svc
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          app: galera
          cr: galera-openstack
          galera/name: openstack
          galera/namespace: openstack
          galera/uid: ce227921-a1a3-4c88-8cf0-41e2377385af
          owner: mariadb-operator
          service: openstack-galera
        name: mysql-db
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 5G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: openstack-galera-6c4b996d94
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: openstack-galera-6c4b996d94
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:37:03Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"58c2a81e-d0d7-46df-98c6-6474ba87efaf"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"openstack-network-exporter"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OPENSTACK_NETWORK_EXPORTER_YAML"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovnmetrics.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/ovnmetrics.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"ovn-northd"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OVN_RUNDIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"certs"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"certs_metrics"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"ovnnorthd-config"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"ovnnorthd-scripts"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"tls-ca-bundle.pem"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndb.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/ovndb.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"metrics-certs-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"ovn-northd-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"ovn-rundir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:37:03Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:37:24Z"
    name: ovn-northd
    namespace: openstack
    ownerReferences:
    - apiVersion: ovn.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: OVNNorthd
      name: ovnnorthd
      uid: 58c2a81e-d0d7-46df-98c6-6474ba87efaf
    resourceVersion: "28682"
    uid: 684b0795-415f-413b-ba60-265eaa2f9170
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: ovn-northd
    serviceName: ovn-northd
    template:
      metadata:
        creationTimestamp: null
        labels:
          service: ovn-northd
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - ovn-northd
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -vfile:off
          - -vconsole:info
          - --n-threads=1
          - --ovnnb-db=ssl:ovsdbserver-nb-0.openstack.svc.cluster.local:6641
          - --ovnsb-db=ssl:ovsdbserver-sb-0.openstack.svc.cluster.local:6642
          - --certificate=/etc/pki/tls/certs/ovndb.crt
          - --private-key=/etc/pki/tls/private/ovndb.key
          - --ca-cert=/etc/pki/tls/certs/ovndbca.crt
          command:
          - /usr/bin/ovn-northd
          env:
          - name: CONFIG_HASH
            value: n78h68h5d6h57fhbch5f4h5cbh644h59fhd7h55fh698h667h59fh54fh556h5bbh4h64fh69h8bhd4h584h5f4h74hcch547h5cdh58chf9h5f5h577q
          - name: OVN_RUNDIR
            value: /tmp
          - name: certs
            value: n57ch64bh54fh6bh678h7fh55ch5bh5ddh89hf4h675h54bh55bh546h7bh669h666h586h67bh576h699h79h5f9h5c4h56h649h556h679h64ch99h544q
          - name: certs_metrics
            value: n9h5f9h54bh59fh9dh585h5dch5b5h64fh695h59bh684h58fh5b8h6h59bh688h576h78h586h5c5h4h688h5f5h568h574h74h58fhfhd5h8h644q
          - name: ovnnorthd-config
            value: n5c8h7ch56bh8dh8hc4h5dch9dh68h6bhb7h598h549h5dbh66fh6bh5b4h5cch5d6h55ch57fhfch588h89h5ddh5d6h65bh65bh8dhc4h67dh569q
          - name: ovnnorthd-scripts
            value: n664hd8h66ch58dh64hc9h66bhd4h558h697h67bh557hdch664h567h669h555h696h556h556h5fh5bh569hbh665h9dh4h9bh564hc8h5b7h5c4q
          - name: tls-ca-bundle.pem
            value: ndfhf9hdbh4h665h555h6bh59bh97h5d6h584hf8h68fh67hd6h655hd9hf5h577hb4h5dh66h5b9h58fh5f5hbdhcfh5cfh7fh65ch647h5bcq
          image: quay.io/podified-antelope-centos9/openstack-ovn-northd@sha256:48da08c4e3dd579112045aaf6840563e42462346fedbcaaef7258caeed2406f0
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /usr/local/bin/container-scripts/status_check.sh
            failureThreshold: 3
            initialDelaySeconds: 10
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 15
          name: ovn-northd
          readinessProbe:
            exec:
              command:
              - /usr/local/bin/container-scripts/status_check.sh
            failureThreshold: 3
            initialDelaySeconds: 10
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 15
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /tmp
            name: ovn-rundir
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /etc/pki/tls/certs/ovndb.crt
            name: ovn-northd-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/ovndb.key
            name: ovn-northd-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/ovndbca.crt
            name: ovn-northd-tls-certs
            readOnly: true
            subPath: ca.crt
        - command:
          - /app/openstack-network-exporter
          env:
          - name: OPENSTACK_NETWORK_EXPORTER_YAML
            value: /etc/config/openstack-network-exporter.yaml
          - name: CONFIG_HASH
            value: n78h68h5d6h57fhbch5f4h5cbh644h59fhd7h55fh698h667h59fh54fh556h5bbh4h64fh69h8bhd4h584h5f4h74hcch547h5cdh58chf9h5f5h577q
          image: quay.io/openstack-k8s-operators/openstack-network-exporter@sha256:156f95f51d0a91422548c574e96ee37f07a200c948e173b22523982f24f1e79c
          imagePullPolicy: IfNotPresent
          name: openstack-network-exporter
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /tmp
            name: ovn-rundir
          - mountPath: /etc/config
            name: config
            readOnly: true
          - mountPath: /etc/pki/tls/certs/ovnmetrics.crt
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/ovnmetrics.key
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/ovndbca.crt
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: ca.crt
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ovnnorthd-ovnnorthd
        serviceAccountName: ovnnorthd-ovnnorthd
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 493
            name: ovnnorthd-scripts
          name: scripts
        - emptyDir: {}
          name: ovn-rundir
        - configMap:
            defaultMode: 493
            name: ovnnorthd-config
          name: config
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: ovn-northd-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ovnnorthd-ovndbs
        - name: metrics-certs-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ovn-metrics
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: ovn-northd-d8869c45
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: ovn-northd-d8869c45
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:36:36Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"37bbbe1c-f899-43bd-a870-c0929b6d3b9d"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"openstack-network-exporter"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OPENSTACK_NETWORK_EXPORTER_YAML"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovnmetrics.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/ovnmetrics.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"ovsdbserver-nb"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OVN_LOGDIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OVN_RUNDIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/ovn"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndb.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/ovndb.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"metrics-certs-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"ovsdb-rundir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"ovsdbserver-nb-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:36:36Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:37:02Z"
    name: ovsdbserver-nb
    namespace: openstack
    ownerReferences:
    - apiVersion: ovn.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: OVNDBCluster
      name: ovndbcluster-nb
      uid: 37bbbe1c-f899-43bd-a870-c0929b6d3b9d
    resourceVersion: "27870"
    uid: 24ae35d2-2bf0-4ff7-b1b8-975cefef0a42
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: ovsdbserver-nb
    serviceName: ovsdbserver-nb
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"internalapi","namespace":"openstack","interface":"internalapi"}]'
        creationTimestamp: null
        labels:
          service: ovsdbserver-nb
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - ovsdbserver-nb
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - /usr/local/bin/container-scripts/setup.sh
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n579h647h54h678h55fh698h567h8dh59dhch647hb9h5fhd8hdh4h5b9h5c5h5bbh5c7h645hfdh547hd5h577h555h5f9h9ch56dh556h5d8h566q
          - name: OVN_LOGDIR
            value: /tmp
          - name: OVN_RUNDIR
            value: /tmp
          image: quay.io/podified-antelope-centos9/openstack-ovn-nb-db-server@sha256:2f232911af0323066a07ba977e4fe2b28c1a3e78fe7032365517c1297dc71d11
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /usr/local/bin/container-scripts/cleanup.sh
          livenessProbe:
            exec:
              command:
              - /usr/bin/pidof
              - ovsdb-server
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: ovsdbserver-nb
          readinessProbe:
            exec:
              command:
              - /usr/bin/pidof
              - ovsdb-server
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          startupProbe:
            exec:
              command:
              - /usr/bin/pidof
              - ovsdb-server
            failureThreshold: 20
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /etc/ovn
            name: ovndbcluster-nb-etc-ovn
          - mountPath: /tmp
            name: ovsdb-rundir
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /etc/pki/tls/certs/ovndb.crt
            name: ovsdbserver-nb-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/ovndb.key
            name: ovsdbserver-nb-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/ovndbca.crt
            name: ovsdbserver-nb-tls-certs
            readOnly: true
            subPath: ca.crt
        - command:
          - /app/openstack-network-exporter
          env:
          - name: OPENSTACK_NETWORK_EXPORTER_YAML
            value: /etc/config/openstack-network-exporter.yaml
          - name: CONFIG_HASH
            value: n579h647h54h678h55fh698h567h8dh59dhch647hb9h5fhd8hdh4h5b9h5c5h5bbh5c7h645hfdh547hd5h577h555h5f9h9ch56dh556h5d8h566q
          image: quay.io/openstack-k8s-operators/openstack-network-exporter@sha256:156f95f51d0a91422548c574e96ee37f07a200c948e173b22523982f24f1e79c
          imagePullPolicy: IfNotPresent
          name: openstack-network-exporter
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /tmp
            name: ovsdb-rundir
          - mountPath: /etc/config
            name: config
            readOnly: true
          - mountPath: /etc/pki/tls/certs/ovnmetrics.crt
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/ovnmetrics.key
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/ovndbca.crt
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: ca.crt
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ovncluster-ovndbcluster-nb
        serviceAccountName: ovncluster-ovndbcluster-nb
        terminationGracePeriodSeconds: 300
        volumes:
        - configMap:
            defaultMode: 493
            name: ovndbcluster-nb-scripts
          name: scripts
        - emptyDir: {}
          name: ovsdb-rundir
        - configMap:
            defaultMode: 493
            name: ovndbcluster-nb-config
          name: config
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: ovsdbserver-nb-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ovndbcluster-nb-ovndbs
        - name: metrics-certs-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ovn-metrics
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          owner: ovndbcluster-nb
          service: ovsdbserver-nb
        name: ovndbcluster-nb-etc-ovn
        namespace: openstack
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: ovsdbserver-nb-f987647f4
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: ovsdbserver-nb-f987647f4
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:36:38Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"04ac44cd-21a2-47fd-bae5-d484b75acad0"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"openstack-network-exporter"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OPENSTACK_NETWORK_EXPORTER_YAML"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovnmetrics.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/ovnmetrics.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"ovsdbserver-sb"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OVN_LOGDIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OVN_RUNDIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/ovn"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndb.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/ovndb.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"metrics-certs-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"ovsdb-rundir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"ovsdbserver-sb-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:36:38Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:37:01Z"
    name: ovsdbserver-sb
    namespace: openstack
    ownerReferences:
    - apiVersion: ovn.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: OVNDBCluster
      name: ovndbcluster-sb
      uid: 04ac44cd-21a2-47fd-bae5-d484b75acad0
    resourceVersion: "27778"
    uid: 38498359-0aaa-482a-9cd4-78c6cf503f66
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: ovsdbserver-sb
    serviceName: ovsdbserver-sb
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"internalapi","namespace":"openstack","interface":"internalapi"}]'
        creationTimestamp: null
        labels:
          service: ovsdbserver-sb
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - ovsdbserver-sb
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - /usr/local/bin/container-scripts/setup.sh
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n649hc7h59dh669h56h668h584h665h64dh6dh59ch5ddh5f4h644hd6hc9h7fhch9dh54bh684h5b6h5dh5bdh57fh659hf9h9fh5dch5bdh5bh5f9q
          - name: OVN_LOGDIR
            value: /tmp
          - name: OVN_RUNDIR
            value: /tmp
          image: quay.io/podified-antelope-centos9/openstack-ovn-sb-db-server@sha256:812985ffe0b6b538838297b37df5bd7a8be92b372465f939f2588b7f54690e63
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /usr/local/bin/container-scripts/cleanup.sh
          livenessProbe:
            exec:
              command:
              - /usr/bin/pidof
              - ovsdb-server
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: ovsdbserver-sb
          readinessProbe:
            exec:
              command:
              - /usr/bin/pidof
              - ovsdb-server
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          startupProbe:
            exec:
              command:
              - /usr/bin/pidof
              - ovsdb-server
            failureThreshold: 20
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /etc/ovn
            name: ovndbcluster-sb-etc-ovn
          - mountPath: /tmp
            name: ovsdb-rundir
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /etc/pki/tls/certs/ovndb.crt
            name: ovsdbserver-sb-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/ovndb.key
            name: ovsdbserver-sb-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/ovndbca.crt
            name: ovsdbserver-sb-tls-certs
            readOnly: true
            subPath: ca.crt
        - command:
          - /app/openstack-network-exporter
          env:
          - name: OPENSTACK_NETWORK_EXPORTER_YAML
            value: /etc/config/openstack-network-exporter.yaml
          - name: CONFIG_HASH
            value: n649hc7h59dh669h56h668h584h665h64dh6dh59ch5ddh5f4h644hd6hc9h7fhch9dh54bh684h5b6h5dh5bdh57fh659hf9h9fh5dch5bdh5bh5f9q
          image: quay.io/openstack-k8s-operators/openstack-network-exporter@sha256:156f95f51d0a91422548c574e96ee37f07a200c948e173b22523982f24f1e79c
          imagePullPolicy: IfNotPresent
          name: openstack-network-exporter
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /tmp
            name: ovsdb-rundir
          - mountPath: /etc/config
            name: config
            readOnly: true
          - mountPath: /etc/pki/tls/certs/ovnmetrics.crt
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/ovnmetrics.key
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/ovndbca.crt
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: ca.crt
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ovncluster-ovndbcluster-sb
        serviceAccountName: ovncluster-ovndbcluster-sb
        terminationGracePeriodSeconds: 300
        volumes:
        - configMap:
            defaultMode: 493
            name: ovndbcluster-sb-scripts
          name: scripts
        - emptyDir: {}
          name: ovsdb-rundir
        - configMap:
            defaultMode: 493
            name: ovndbcluster-sb-config
          name: config
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: ovsdbserver-sb-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ovndbcluster-sb-ovndbs
        - name: metrics-certs-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ovn-metrics
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          owner: ovndbcluster-sb
          service: ovsdbserver-sb
        name: ovndbcluster-sb-etc-ovn
        namespace: openstack
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: ovsdbserver-sb-cd9f4458b
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: ovsdbserver-sb-cd9f4458b
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:36:25Z"
    generation: 1
    labels:
      app.kubernetes.io/component: rabbitmq
      app.kubernetes.io/name: rabbitmq-cell1
      app.kubernetes.io/part-of: rabbitmq
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c1140690-ec71-44e7-965c-c788cc5d73c9"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app.kubernetes.io/component: {}
                f:app.kubernetes.io/name: {}
                f:app.kubernetes.io/part-of: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:automountServiceAccountToken: {}
              f:containers:
                k:{"name":"rabbitmq"}:
                  .: {}
                  f:args: {}
                  f:env:
                    .: {}
                    k:{"name":"HOME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"K8S_HOSTNAME_SUFFIX"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"K8S_SERVICE_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MY_POD_NAME"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"MY_POD_NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_CTL_ERL_ARGS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_ENABLED_PLUGINS_FILE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_NODENAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_UPGRADE_LOG"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_USE_LONGNAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":4369,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":5671,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":15671,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":15691,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pod-info/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/rabbitmq-tls/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/rabbitmq/advanced.config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/conf.d/10-operatorDefaults.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/conf.d/11-default_user.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/conf.d/90-userDefinedConfiguration.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/erl_inetrc"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/inter-node-tls.config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/operator"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/mnesia/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"setup-container"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/operator"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/tmp/default_user.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp/erlang-cookie-secret/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/tmp/rabbitmq-plugins/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/mnesia/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"erlang-cookie-secret"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"plugins-conf"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"pod-info"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"rabbitmq-confd"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"rabbitmq-erlang-cookie"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"rabbitmq-plugins"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"rabbitmq-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"server-conf"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:36:26Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:37:32Z"
    name: rabbitmq-cell1-server
    namespace: openstack
    ownerReferences:
    - apiVersion: rabbitmq.com/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: RabbitmqCluster
      name: rabbitmq-cell1
      uid: c1140690-ec71-44e7-965c-c788cc5d73c9
    resourceVersion: "28884"
    uid: 653c3bd0-bc09-4ef4-ac16-10bf3f07266d
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: rabbitmq-cell1
    serviceName: rabbitmq-cell1-nodes
    template:
      metadata:
        creationTimestamp: null
        labels:
          app.kubernetes.io/component: rabbitmq
          app.kubernetes.io/name: rabbitmq-cell1
          app.kubernetes.io/part-of: rabbitmq
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: app.kubernetes.io/name
                    operator: In
                    values:
                    - rabbitmq-cell1
                topologyKey: kubernetes.io/hostname
              weight: 100
        automountServiceAccountToken: true
        containers:
        - args:
          - /usr/lib/rabbitmq/bin/rabbitmq-server
          env:
          - name: MY_POD_NAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: MY_POD_NAMESPACE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: K8S_SERVICE_NAME
            value: rabbitmq-cell1-nodes
          - name: RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS
            value: '-kernel inetrc ''/etc/rabbitmq/erl_inetrc'' -proto_dist inet_tls
              -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config '
          - name: RABBITMQ_CTL_ERL_ARGS
            value: -proto_dist inet_tls -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config
          - name: RABBITMQ_UPGRADE_LOG
            value: /var/lib/rabbitmq/rabbitmq_upgrade.log
          - name: HOME
            value: /var/lib/rabbitmq
          - name: PATH
            value: /usr/lib/rabbitmq/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
          - name: RABBITMQ_ENABLED_PLUGINS_FILE
            value: /operator/enabled_plugins
          - name: RABBITMQ_USE_LONGNAME
            value: "true"
          - name: RABBITMQ_NODENAME
            value: rabbit@$(MY_POD_NAME).$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE)
          - name: K8S_HOSTNAME_SUFFIX
            value: .$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE)
          image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:9e7397d61095b02a8c1deb24bca874bc0032aa18019f12d53e0eda8998b85447
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /bin/bash
                - -c
                - if [ ! -z "$(cat /etc/pod-info/skipPreStopChecks)" ]; then exit
                  0; fi; rabbitmq-upgrade await_online_quorum_plus_one -t 604800 &&
                  rabbitmq-upgrade await_online_synchronized_mirror -t 604800 || true
                  && rabbitmq-upgrade drain -t 604800
          name: rabbitmq
          ports:
          - containerPort: 4369
            name: epmd
            protocol: TCP
          - containerPort: 5671
            name: amqps
            protocol: TCP
          - containerPort: 15671
            name: management-tls
            protocol: TCP
          - containerPort: 15691
            name: prometheus-tls
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            initialDelaySeconds: 10
            periodSeconds: 10
            successThreshold: 1
            tcpSocket:
              port: amqps
            timeoutSeconds: 5
          resources:
            limits:
              cpu: "2"
              memory: 2Gi
            requests:
              cpu: "1"
              memory: 2Gi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/rabbitmq/
            name: rabbitmq-erlang-cookie
          - mountPath: /var/lib/rabbitmq/mnesia/
            name: persistence
          - mountPath: /etc/rabbitmq/inter-node-tls.config
            name: config-data
            readOnly: true
            subPath: inter_node_tls.config
          - mountPath: /operator
            name: rabbitmq-plugins
          - mountPath: /etc/rabbitmq/conf.d/10-operatorDefaults.conf
            name: rabbitmq-confd
            subPath: operatorDefaults.conf
          - mountPath: /etc/rabbitmq/conf.d/90-userDefinedConfiguration.conf
            name: rabbitmq-confd
            subPath: userDefinedConfiguration.conf
          - mountPath: /etc/pod-info/
            name: pod-info
          - mountPath: /etc/rabbitmq/conf.d/11-default_user.conf
            name: rabbitmq-confd
            subPath: default_user.conf
          - mountPath: /etc/rabbitmq/advanced.config
            name: server-conf
            subPath: advanced.config
          - mountPath: /etc/rabbitmq/erl_inetrc
            name: server-conf
            subPath: erl_inetrc
          - mountPath: /etc/rabbitmq-tls/
            name: rabbitmq-tls
            readOnly: true
        dnsPolicy: ClusterFirst
        initContainers:
        - command:
          - sh
          - -c
          - cp /tmp/erlang-cookie-secret/.erlang.cookie /var/lib/rabbitmq/.erlang.cookie
            && chmod 600 /var/lib/rabbitmq/.erlang.cookie ; cp /tmp/rabbitmq-plugins/enabled_plugins
            /operator/enabled_plugins ; echo '[default]' > /var/lib/rabbitmq/.rabbitmqadmin.conf
            && sed -e 's/default_user/username/' -e 's/default_pass/password/' /tmp/default_user.conf
            >> /var/lib/rabbitmq/.rabbitmqadmin.conf && chmod 600 /var/lib/rabbitmq/.rabbitmqadmin.conf
            ; sleep 30
          image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:9e7397d61095b02a8c1deb24bca874bc0032aa18019f12d53e0eda8998b85447
          imagePullPolicy: IfNotPresent
          name: setup-container
          resources:
            limits:
              cpu: 20m
              memory: 64Mi
            requests:
              cpu: 20m
              memory: 64Mi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /tmp/rabbitmq-plugins/
            name: plugins-conf
          - mountPath: /var/lib/rabbitmq/
            name: rabbitmq-erlang-cookie
          - mountPath: /tmp/erlang-cookie-secret/
            name: erlang-cookie-secret
          - mountPath: /operator
            name: rabbitmq-plugins
          - mountPath: /var/lib/rabbitmq/mnesia/
            name: persistence
          - mountPath: /tmp/default_user.conf
            name: rabbitmq-confd
            subPath: default_user.conf
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: rabbitmq-cell1-server
        serviceAccountName: rabbitmq-cell1-server
        terminationGracePeriodSeconds: 604800
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              app.kubernetes.io/name: rabbitmq-cell1
          maxSkew: 1
          topologyKey: topology.kubernetes.io/zone
          whenUnsatisfiable: ScheduleAnyway
        volumes:
        - configMap:
            defaultMode: 272
            items:
            - key: inter_node_tls.config
              path: inter_node_tls.config
            name: rabbitmq-cell1-config-data
          name: config-data
        - configMap:
            defaultMode: 420
            name: rabbitmq-cell1-plugins-conf
          name: plugins-conf
        - name: rabbitmq-confd
          projected:
            defaultMode: 420
            sources:
            - configMap:
                items:
                - key: operatorDefaults.conf
                  path: operatorDefaults.conf
                - key: userDefinedConfiguration.conf
                  path: userDefinedConfiguration.conf
                name: rabbitmq-cell1-server-conf
            - secret:
                items:
                - key: default_user.conf
                  path: default_user.conf
                name: rabbitmq-cell1-default-user
        - emptyDir: {}
          name: rabbitmq-erlang-cookie
        - name: erlang-cookie-secret
          secret:
            defaultMode: 420
            secretName: rabbitmq-cell1-erlang-cookie
        - emptyDir: {}
          name: rabbitmq-plugins
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.labels['skipPreStopChecks']
              path: skipPreStopChecks
          name: pod-info
        - configMap:
            defaultMode: 420
            name: rabbitmq-cell1-server-conf
          name: server-conf
        - name: rabbitmq-tls
          projected:
            defaultMode: 400
            sources:
            - secret:
                items:
                - key: tls.crt
                  path: tls.crt
                - key: tls.key
                  path: tls.key
                name: cert-rabbitmq-cell1-svc
                optional: true
            - secret:
                items:
                - key: ca.crt
                  path: ca.crt
                name: cert-rabbitmq-cell1-svc
                optional: true
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          app.kubernetes.io/component: rabbitmq
          app.kubernetes.io/name: rabbitmq-cell1
          app.kubernetes.io/part-of: rabbitmq
        name: persistence
        namespace: openstack
        ownerReferences:
        - apiVersion: rabbitmq.com/v1beta1
          blockOwnerDeletion: false
          controller: true
          kind: RabbitmqCluster
          name: rabbitmq-cell1
          uid: c1140690-ec71-44e7-965c-c788cc5d73c9
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10Gi
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: rabbitmq-cell1-server-846c5c7966
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: rabbitmq-cell1-server-846c5c7966
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:36:26Z"
    generation: 1
    labels:
      app.kubernetes.io/component: rabbitmq
      app.kubernetes.io/name: rabbitmq
      app.kubernetes.io/part-of: rabbitmq
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"7256234e-deba-41c4-98a7-d9d349584343"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app.kubernetes.io/component: {}
                f:app.kubernetes.io/name: {}
                f:app.kubernetes.io/part-of: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:automountServiceAccountToken: {}
              f:containers:
                k:{"name":"rabbitmq"}:
                  .: {}
                  f:args: {}
                  f:env:
                    .: {}
                    k:{"name":"HOME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"K8S_HOSTNAME_SUFFIX"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"K8S_SERVICE_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MY_POD_NAME"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"MY_POD_NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_CTL_ERL_ARGS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_ENABLED_PLUGINS_FILE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_NODENAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_UPGRADE_LOG"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_USE_LONGNAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":4369,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":5671,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":15671,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":15691,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pod-info/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/rabbitmq-tls/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/rabbitmq/advanced.config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/conf.d/10-operatorDefaults.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/conf.d/11-default_user.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/conf.d/90-userDefinedConfiguration.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/erl_inetrc"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/inter-node-tls.config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/operator"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/mnesia/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"setup-container"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/operator"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/tmp/default_user.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp/erlang-cookie-secret/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/tmp/rabbitmq-plugins/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/mnesia/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"erlang-cookie-secret"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"plugins-conf"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"pod-info"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"rabbitmq-confd"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"rabbitmq-erlang-cookie"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"rabbitmq-plugins"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"rabbitmq-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"server-conf"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:36:26Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:37:33Z"
    name: rabbitmq-server
    namespace: openstack
    ownerReferences:
    - apiVersion: rabbitmq.com/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: RabbitmqCluster
      name: rabbitmq
      uid: 7256234e-deba-41c4-98a7-d9d349584343
    resourceVersion: "29003"
    uid: 5d5a7027-37c3-43d6-a881-89f967e3e7f8
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: rabbitmq
    serviceName: rabbitmq-nodes
    template:
      metadata:
        creationTimestamp: null
        labels:
          app.kubernetes.io/component: rabbitmq
          app.kubernetes.io/name: rabbitmq
          app.kubernetes.io/part-of: rabbitmq
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: app.kubernetes.io/name
                    operator: In
                    values:
                    - rabbitmq
                topologyKey: kubernetes.io/hostname
              weight: 100
        automountServiceAccountToken: true
        containers:
        - args:
          - /usr/lib/rabbitmq/bin/rabbitmq-server
          env:
          - name: MY_POD_NAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: MY_POD_NAMESPACE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: K8S_SERVICE_NAME
            value: rabbitmq-nodes
          - name: RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS
            value: '-kernel inetrc ''/etc/rabbitmq/erl_inetrc'' -proto_dist inet_tls
              -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config '
          - name: RABBITMQ_CTL_ERL_ARGS
            value: -proto_dist inet_tls -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config
          - name: RABBITMQ_UPGRADE_LOG
            value: /var/lib/rabbitmq/rabbitmq_upgrade.log
          - name: HOME
            value: /var/lib/rabbitmq
          - name: PATH
            value: /usr/lib/rabbitmq/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
          - name: RABBITMQ_ENABLED_PLUGINS_FILE
            value: /operator/enabled_plugins
          - name: RABBITMQ_USE_LONGNAME
            value: "true"
          - name: RABBITMQ_NODENAME
            value: rabbit@$(MY_POD_NAME).$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE)
          - name: K8S_HOSTNAME_SUFFIX
            value: .$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE)
          image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:9e7397d61095b02a8c1deb24bca874bc0032aa18019f12d53e0eda8998b85447
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /bin/bash
                - -c
                - if [ ! -z "$(cat /etc/pod-info/skipPreStopChecks)" ]; then exit
                  0; fi; rabbitmq-upgrade await_online_quorum_plus_one -t 604800 &&
                  rabbitmq-upgrade await_online_synchronized_mirror -t 604800 || true
                  && rabbitmq-upgrade drain -t 604800
          name: rabbitmq
          ports:
          - containerPort: 4369
            name: epmd
            protocol: TCP
          - containerPort: 5671
            name: amqps
            protocol: TCP
          - containerPort: 15671
            name: management-tls
            protocol: TCP
          - containerPort: 15691
            name: prometheus-tls
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            initialDelaySeconds: 10
            periodSeconds: 10
            successThreshold: 1
            tcpSocket:
              port: amqps
            timeoutSeconds: 5
          resources:
            limits:
              cpu: "2"
              memory: 2Gi
            requests:
              cpu: "1"
              memory: 2Gi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/rabbitmq/
            name: rabbitmq-erlang-cookie
          - mountPath: /var/lib/rabbitmq/mnesia/
            name: persistence
          - mountPath: /etc/rabbitmq/inter-node-tls.config
            name: config-data
            readOnly: true
            subPath: inter_node_tls.config
          - mountPath: /operator
            name: rabbitmq-plugins
          - mountPath: /etc/rabbitmq/conf.d/10-operatorDefaults.conf
            name: rabbitmq-confd
            subPath: operatorDefaults.conf
          - mountPath: /etc/rabbitmq/conf.d/90-userDefinedConfiguration.conf
            name: rabbitmq-confd
            subPath: userDefinedConfiguration.conf
          - mountPath: /etc/pod-info/
            name: pod-info
          - mountPath: /etc/rabbitmq/conf.d/11-default_user.conf
            name: rabbitmq-confd
            subPath: default_user.conf
          - mountPath: /etc/rabbitmq/advanced.config
            name: server-conf
            subPath: advanced.config
          - mountPath: /etc/rabbitmq/erl_inetrc
            name: server-conf
            subPath: erl_inetrc
          - mountPath: /etc/rabbitmq-tls/
            name: rabbitmq-tls
            readOnly: true
        dnsPolicy: ClusterFirst
        initContainers:
        - command:
          - sh
          - -c
          - cp /tmp/erlang-cookie-secret/.erlang.cookie /var/lib/rabbitmq/.erlang.cookie
            && chmod 600 /var/lib/rabbitmq/.erlang.cookie ; cp /tmp/rabbitmq-plugins/enabled_plugins
            /operator/enabled_plugins ; echo '[default]' > /var/lib/rabbitmq/.rabbitmqadmin.conf
            && sed -e 's/default_user/username/' -e 's/default_pass/password/' /tmp/default_user.conf
            >> /var/lib/rabbitmq/.rabbitmqadmin.conf && chmod 600 /var/lib/rabbitmq/.rabbitmqadmin.conf
            ; sleep 30
          image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:9e7397d61095b02a8c1deb24bca874bc0032aa18019f12d53e0eda8998b85447
          imagePullPolicy: IfNotPresent
          name: setup-container
          resources:
            limits:
              cpu: 20m
              memory: 64Mi
            requests:
              cpu: 20m
              memory: 64Mi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /tmp/rabbitmq-plugins/
            name: plugins-conf
          - mountPath: /var/lib/rabbitmq/
            name: rabbitmq-erlang-cookie
          - mountPath: /tmp/erlang-cookie-secret/
            name: erlang-cookie-secret
          - mountPath: /operator
            name: rabbitmq-plugins
          - mountPath: /var/lib/rabbitmq/mnesia/
            name: persistence
          - mountPath: /tmp/default_user.conf
            name: rabbitmq-confd
            subPath: default_user.conf
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: rabbitmq-server
        serviceAccountName: rabbitmq-server
        terminationGracePeriodSeconds: 604800
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              app.kubernetes.io/name: rabbitmq
          maxSkew: 1
          topologyKey: topology.kubernetes.io/zone
          whenUnsatisfiable: ScheduleAnyway
        volumes:
        - configMap:
            defaultMode: 272
            items:
            - key: inter_node_tls.config
              path: inter_node_tls.config
            name: rabbitmq-config-data
          name: config-data
        - configMap:
            defaultMode: 420
            name: rabbitmq-plugins-conf
          name: plugins-conf
        - name: rabbitmq-confd
          projected:
            defaultMode: 420
            sources:
            - configMap:
                items:
                - key: operatorDefaults.conf
                  path: operatorDefaults.conf
                - key: userDefinedConfiguration.conf
                  path: userDefinedConfiguration.conf
                name: rabbitmq-server-conf
            - secret:
                items:
                - key: default_user.conf
                  path: default_user.conf
                name: rabbitmq-default-user
        - emptyDir: {}
          name: rabbitmq-erlang-cookie
        - name: erlang-cookie-secret
          secret:
            defaultMode: 420
            secretName: rabbitmq-erlang-cookie
        - emptyDir: {}
          name: rabbitmq-plugins
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.labels['skipPreStopChecks']
              path: skipPreStopChecks
          name: pod-info
        - configMap:
            defaultMode: 420
            name: rabbitmq-server-conf
          name: server-conf
        - name: rabbitmq-tls
          projected:
            defaultMode: 400
            sources:
            - secret:
                items:
                - key: tls.crt
                  path: tls.crt
                - key: tls.key
                  path: tls.key
                name: cert-rabbitmq-svc
                optional: true
            - secret:
                items:
                - key: ca.crt
                  path: ca.crt
                name: cert-rabbitmq-svc
                optional: true
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          app.kubernetes.io/component: rabbitmq
          app.kubernetes.io/name: rabbitmq
          app.kubernetes.io/part-of: rabbitmq
        name: persistence
        namespace: openstack
        ownerReferences:
        - apiVersion: rabbitmq.com/v1beta1
          blockOwnerDeletion: false
          controller: true
          kind: RabbitmqCluster
          name: rabbitmq
          uid: 7256234e-deba-41c4-98a7-d9d349584343
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10Gi
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: rabbitmq-server-596c9875db
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: rabbitmq-server-596c9875db
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-08T03:37:04Z"
    generation: 1
    labels:
      component: swift-storage
      service: swift
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a0f30eee-02dd-4056-80a5-87be30ae57b9"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"account-auditor"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"account-reaper"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"account-replicator"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"account-server"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":6202,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"container-auditor"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"container-replicator"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"container-server"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":6201,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"container-updater"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"object-auditor"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"object-expirer"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"object-replicator"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"object-server"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":6200,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"object-updater"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"rsync"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":873,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"swift-recon-cron"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
                f:fsGroupChangePolicy: {}
                f:runAsNonRoot: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
                f:sysctls: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"cache"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-swift"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"lock"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"swift"}:
                  .: {}
                  f:name: {}
                  f:persistentVolumeClaim:
                    .: {}
                    f:claimName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-08T03:37:04Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-08T03:37:31Z"
    name: swift-storage
    namespace: openstack
    ownerReferences:
    - apiVersion: swift.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: SwiftStorage
      name: swift-storage
      uid: a0f30eee-02dd-4056-80a5-87be30ae57b9
    resourceVersion: "28810"
    uid: 5a094825-41f2-4cf9-9b2a-43dc77f4ef44
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: swift-storage
        service: swift
    serviceName: swift-storage
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          component: swift-storage
          service: swift
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: component
                    operator: In
                    values:
                    - swift-storage
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - command:
          - /usr/bin/swift-account-server
          - /etc/swift/account-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-account@sha256:6b75226d63980ff4a0dd49f490031ca563324b792940a9e453c9e3bd34456645
          imagePullPolicy: IfNotPresent
          name: account-server
          ports:
          - containerPort: 6202
            name: account
            protocol: TCP
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-account-replicator
          - /etc/swift/account-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-account@sha256:6b75226d63980ff4a0dd49f490031ca563324b792940a9e453c9e3bd34456645
          imagePullPolicy: IfNotPresent
          name: account-replicator
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-account-auditor
          - /etc/swift/account-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-account@sha256:6b75226d63980ff4a0dd49f490031ca563324b792940a9e453c9e3bd34456645
          imagePullPolicy: IfNotPresent
          name: account-auditor
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-account-reaper
          - /etc/swift/account-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-account@sha256:6b75226d63980ff4a0dd49f490031ca563324b792940a9e453c9e3bd34456645
          imagePullPolicy: IfNotPresent
          name: account-reaper
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-container-server
          - /etc/swift/container-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-container@sha256:1af3cfa900bdb14059b01962275ab139988ff3d9056421fc6cea49f366b60c49
          imagePullPolicy: IfNotPresent
          name: container-server
          ports:
          - containerPort: 6201
            name: container
            protocol: TCP
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-container-replicator
          - /etc/swift/container-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-container@sha256:1af3cfa900bdb14059b01962275ab139988ff3d9056421fc6cea49f366b60c49
          imagePullPolicy: IfNotPresent
          name: container-replicator
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-container-auditor
          - /etc/swift/container-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-container@sha256:1af3cfa900bdb14059b01962275ab139988ff3d9056421fc6cea49f366b60c49
          imagePullPolicy: IfNotPresent
          name: container-auditor
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-container-updater
          - /etc/swift/container-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-container@sha256:1af3cfa900bdb14059b01962275ab139988ff3d9056421fc6cea49f366b60c49
          imagePullPolicy: IfNotPresent
          name: container-updater
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-object-server
          - /etc/swift/object-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-object@sha256:aa0a8dc035cb40e854b9a868e55606e79254b7d4cf6d686918380b317aa1d1c3
          imagePullPolicy: IfNotPresent
          name: object-server
          ports:
          - containerPort: 6200
            name: object
            protocol: TCP
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-object-replicator
          - /etc/swift/object-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-object@sha256:aa0a8dc035cb40e854b9a868e55606e79254b7d4cf6d686918380b317aa1d1c3
          imagePullPolicy: IfNotPresent
          name: object-replicator
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-object-auditor
          - /etc/swift/object-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-object@sha256:aa0a8dc035cb40e854b9a868e55606e79254b7d4cf6d686918380b317aa1d1c3
          imagePullPolicy: IfNotPresent
          name: object-auditor
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-object-updater
          - /etc/swift/object-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-object@sha256:aa0a8dc035cb40e854b9a868e55606e79254b7d4cf6d686918380b317aa1d1c3
          imagePullPolicy: IfNotPresent
          name: object-updater
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-object-expirer
          - /etc/swift/object-expirer.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-proxy-server@sha256:4edf7a23d172c4a133480d60844e80fb843a6aaf50a68d8d5fec13ae0c3c03d7
          imagePullPolicy: IfNotPresent
          name: object-expirer
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/rsync
          - --daemon
          - --no-detach
          - --config=/etc/swift/rsyncd.conf
          - --log-file=/dev/stdout
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-object@sha256:aa0a8dc035cb40e854b9a868e55606e79254b7d4cf6d686918380b317aa1d1c3
          imagePullPolicy: IfNotPresent
          name: rsync
          ports:
          - containerPort: 873
            name: rsync
            protocol: TCP
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - sh
          - -c
          - while true; do /usr/bin/swift-recon-cron /etc/swift/object-server.conf.d
            -v; sleep 300; done
          env:
          - name: CONFIG_HASH
            value: n59bh85hfh5c9h565h678h674h657h66h657h4h696h554hfbh598h68h5cfhc6h656h78hcbh55ch5fch5b7h64dh57ch6chfbh7dh575h55bh55cq
          image: quay.io/podified-antelope-centos9/openstack-swift-object@sha256:aa0a8dc035cb40e854b9a868e55606e79254b7d4cf6d686918380b317aa1d1c3
          imagePullPolicy: IfNotPresent
          name: swift-recon-cron
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 42445
          fsGroupChangePolicy: OnRootMismatch
          runAsNonRoot: true
          seccompProfile:
            type: RuntimeDefault
          sysctls:
          - name: net.ipv4.ip_unprivileged_port_start
            value: "873"
        serviceAccount: swift-swift
        serviceAccountName: swift-swift
        terminationGracePeriodSeconds: 30
        volumes:
        - name: swift
          persistentVolumeClaim:
            claimName: swift
        - name: etc-swift
          projected:
            defaultMode: 420
            sources:
            - configMap:
                items:
                - key: 00-account-server.conf
                  path: account-server.conf.d/00-account-server.conf
                - key: 01-account-server.conf
                  path: account-server.conf.d/01-account-server.conf
                - key: 00-container-server.conf
                  path: container-server.conf.d/00-container-server.conf
                - key: 01-container-server.conf
                  path: container-server.conf.d/01-container-server.conf
                - key: 00-object-server.conf
                  path: object-server.conf.d/00-object-server.conf
                - key: 01-object-server.conf
                  path: object-server.conf.d/01-object-server.conf
                - key: 00-object-expirer.conf
                  path: object-expirer.conf.d/00-object-expirer.conf
                - key: 01-object-expirer.conf
                  path: object-expirer.conf.d/01-object-expirer.conf
                - key: internal-client.conf
                  path: internal-client.conf
                - key: rsyncd.conf
                  path: rsyncd.conf
                name: swift-storage-config-data
            - secret:
                name: swift-conf
            - configMap:
                name: swift-ring-files
        - emptyDir: {}
          name: cache
        - emptyDir: {}
          name: lock
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        name: swift
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10Gi
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: swift-storage-78cdc48788
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: swift-storage-78cdc48788
    updatedReplicas: 1
kind: StatefulSetList
metadata:
  resourceVersion: "48044"