apiVersion: keystone.openstack.org/v1beta1
kind: KeystoneAPI
metadata:
  creationTimestamp: "2026-03-08T03:36:31Z"
  finalizers:
  - openstack.org/keystoneapi
  - openstack.org/keystoneservice-glance
  - openstack.org/keystoneservice-nova
  - openstack.org/keystoneservice-neutron
  - openstack.org/keystoneendpoint-glance-bf784-default-external
  - openstack.org/keystoneservice-swift
  - openstack.org/keystoneendpoint-glance-bf784-default-internal
  - openstack.org/keystoneservice-ironic
  - openstack.org/keystoneendpoint-swift
  - openstack.org/keystoneendpoint-neutron
  - openstack.org/keystoneservice-placement
  - openstack.org/keystoneendpoint-ironic
  - openstack.org/keystoneendpoint-placement
  - openstack.org/keystoneservice-cinderv3
  - openstack.org/keystoneendpoint-cinderv3
  - openstack.org/keystoneservice-ironic-inspector
  - openstack.org/keystoneendpoint-ironic-inspector
  - openstack.org/keystoneendpoint-nova
  generation: 2
  managedFields:
  - apiVersion: keystone.openstack.org/v1beta1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        .: {}
        f:apiEndpoints:
          .: {}
          f:internal: {}
          f:public: {}
        f:conditions: {}
        f:databaseHostname: {}
        f:hash:
          .: {}
          f:bootstrap: {}
          f:dbsync: {}
          f:input: {}
        f:observedGeneration: {}
        f:readyCount: {}
        f:region: {}
        f:transportURLSecret: {}
    manager: manager
    operation: Update
    subresource: status
    time: "2026-03-08T03:38:56Z"
  - apiVersion: keystone.openstack.org/v1beta1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:finalizers:
          .: {}
          v:"openstack.org/keystoneapi": {}
          v:"openstack.org/keystoneendpoint-cinderv3": {}
          v:"openstack.org/keystoneendpoint-glance-bf784-default-external": {}
          v:"openstack.org/keystoneendpoint-glance-bf784-default-internal": {}
          v:"openstack.org/keystoneendpoint-ironic": {}
          v:"openstack.org/keystoneendpoint-ironic-inspector": {}
          v:"openstack.org/keystoneendpoint-neutron": {}
          v:"openstack.org/keystoneendpoint-nova": {}
          v:"openstack.org/keystoneendpoint-placement": {}
          v:"openstack.org/keystoneendpoint-swift": {}
          v:"openstack.org/keystoneservice-cinderv3": {}
          v:"openstack.org/keystoneservice-glance": {}
          v:"openstack.org/keystoneservice-ironic": {}
          v:"openstack.org/keystoneservice-ironic-inspector": {}
          v:"openstack.org/keystoneservice-neutron": {}
          v:"openstack.org/keystoneservice-nova": {}
          v:"openstack.org/keystoneservice-placement": {}
          v:"openstack.org/keystoneservice-swift": {}
        f:ownerReferences:
          .: {}
          k:{"uid":"6c7e5202-6a73-4c66-ab4b-ef8cb1f31a4f"}: {}
      f:spec:
        .: {}
        f:adminProject: {}
        f:adminUser: {}
        f:apiTimeout: {}
        f:containerImage: {}
        f:databaseAccount: {}
        f:databaseInstance: {}
        f:enableSecureRBAC: {}
        f:externalKeystoneAPI: {}
        f:extraMounts: {}
        f:federatedRealmConfig: {}
        f:fernetMaxActiveKeys: {}
        f:fernetRotationDays: {}
        f:httpdCustomization:
          .: {}
          f:processNumber: {}
        f:memcachedInstance: {}
        f:notificationsBus:
          .: {}
          f:cluster: {}
        f:override:
          .: {}
          f:service:
            .: {}
            f:internal:
              .: {}
              f:metadata:
                .: {}
                f:annotations:
                  .: {}
                  f:metallb.universe.tf/address-pool: {}
                  f:metallb.universe.tf/allow-shared-ip: {}
                  f:metallb.universe.tf/loadBalancerIPs: {}
                f:labels:
                  .: {}
                  f:osctlplane: {}
                  f:osctlplane-service: {}
              f:spec:
                .: {}
                f:type: {}
            f:public:
              .: {}
              f:endpointURL: {}
              f:metadata:
                .: {}
                f:labels:
                  .: {}
                  f:osctlplane: {}
                  f:osctlplane-service: {}
        f:passwordSelectors:
          .: {}
          f:admin: {}
        f:preserveJobs: {}
        f:region: {}
        f:replicas: {}
        f:resources: {}
        f:secret: {}
        f:tls:
          .: {}
          f:api:
            .: {}
            f:internal:
              .: {}
              f:secretName: {}
            f:public:
              .: {}
              f:secretName: {}
          f:caBundleSecretName: {}
        f:trustFlushArgs: {}
        f:trustFlushSchedule: {}
        f:trustFlushSuspend: {}
    manager: manager
    operation: Update
    time: "2026-03-08T03:40:58Z"
  name: keystone
  namespace: openstack
  ownerReferences:
  - apiVersion: core.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackControlPlane
    name: controlplane
    uid: 6c7e5202-6a73-4c66-ab4b-ef8cb1f31a4f
  resourceVersion: "34907"
  uid: 5c174342-2ef2-4cb7-be4b-30e55a5ef0e3
spec:
  adminProject: admin
  adminUser: admin
  apiTimeout: 60
  containerImage: quay.io/podified-antelope-centos9/openstack-keystone@sha256:0eeb2759adca98fed8913fe00b0a87d706bde89efff3b5ef6d962bc3ca5204b0
  databaseAccount: keystone
  databaseInstance: openstack
  enableSecureRBAC: true
  externalKeystoneAPI: false
  extraMounts: []
  federatedRealmConfig: ""
  fernetMaxActiveKeys: 5
  fernetRotationDays: 1
  httpdCustomization:
    processNumber: 3
  memcachedInstance: memcached
  notificationsBus:
    cluster: rabbitmq
  override:
    service:
      internal:
        metadata:
          annotations:
            metallb.universe.tf/address-pool: internalapi
            metallb.universe.tf/allow-shared-ip: internalapi
            metallb.universe.tf/loadBalancerIPs: 172.17.0.80
          labels:
            osctlplane: ""
            osctlplane-service: keystone
        spec:
          type: LoadBalancer
      public:
        endpointURL: https://keystone-public-openstack.apps.sno.openstack.lab
        metadata:
          labels:
            osctlplane: ""
            osctlplane-service: keystone
  passwordSelectors:
    admin: AdminPassword
  preserveJobs: false
  region: regionOne
  replicas: 1
  resources: {}
  secret: osp-secret
  tls:
    api:
      internal:
        secretName: cert-keystone-internal-svc
      public:
        secretName: cert-keystone-public-svc
    caBundleSecretName: combined-ca-bundle
  trustFlushArgs: ""
  trustFlushSchedule: 1 * * * *
  trustFlushSuspend: false
status:
  apiEndpoints:
    internal: https://keystone-internal.openstack.svc:5000
    public: https://keystone-public-openstack.apps.sno.openstack.lab
  conditions:
  - lastTransitionTime: "2026-03-08T03:38:56Z"
    message: Setup complete
    reason: Ready
    status: "True"
    type: Ready
  - lastTransitionTime: "2026-03-08T03:38:22Z"
    message: Bootstrap completed
    reason: Ready
    status: "True"
    type: BootstrapReady
  - lastTransitionTime: "2026-03-08T03:37:57Z"
    message: Create service completed
    reason: Ready
    status: "True"
    type: CreateServiceReady
  - lastTransitionTime: "2026-03-08T03:38:22Z"
    message: CronJob completed
    reason: Ready
    status: "True"
    type: CronJobReady
  - lastTransitionTime: "2026-03-08T03:37:22Z"
    message: DB create completed
    reason: Ready
    status: "True"
    type: DBReady
  - lastTransitionTime: "2026-03-08T03:37:57Z"
    message: DBsync completed
    reason: Ready
    status: "True"
    type: DBSyncReady
  - lastTransitionTime: "2026-03-08T03:38:56Z"
    message: Deployment completed
    reason: Ready
    status: "True"
    type: DeploymentReady
  - lastTransitionTime: "2026-03-08T03:36:31Z"
    message: Input data complete
    reason: Ready
    status: "True"
    type: InputReady
  - lastTransitionTime: "2026-03-08T03:36:31Z"
    message: MariaDBAccount creation complete
    reason: Ready
    status: "True"
    type: MariaDBAccountReady
  - lastTransitionTime: "2026-03-08T03:37:34Z"
    message: ' Memcached instance has been provisioned'
    reason: Ready
    status: "True"
    type: MemcachedReady
  - lastTransitionTime: "2026-03-08T03:38:22Z"
    message: NetworkAttachments completed
    reason: Ready
    status: "True"
    type: NetworkAttachmentsReady
  - lastTransitionTime: "2026-03-08T03:37:34Z"
    message: RabbitMqTransportURL successfully created
    reason: Ready
    status: "True"
    type: RabbitMqTransportURLReady
  - lastTransitionTime: "2026-03-08T03:37:57Z"
    message: RoleBinding created
    reason: Ready
    status: "True"
    type: RoleBindingReady
  - lastTransitionTime: "2026-03-08T03:37:57Z"
    message: Role created
    reason: Ready
    status: "True"
    type: RoleReady
  - lastTransitionTime: "2026-03-08T03:37:57Z"
    message: ServiceAccount created
    reason: Ready
    status: "True"
    type: ServiceAccountReady
  - lastTransitionTime: "2026-03-08T03:37:57Z"
    message: Service config create completed
    reason: Ready
    status: "True"
    type: ServiceConfigReady
  - lastTransitionTime: "2026-03-08T03:37:34Z"
    message: Input data complete
    reason: Ready
    status: "True"
    type: TLSInputReady
  databaseHostname: openstack.openstack.svc
  hash:
    bootstrap: n664h648h65dh5cch649h5fbh96h5c6h59h588h566h98h584h648h674h585hd9h54dh77hb9h8ch5dh66dhbchfbh56chd8h87h9fh6dhfhd6q
    dbsync: n555hc7h656h5c9h655h577hd5hcch66ch5c4h5c8h5fh57ch5b6h67fh5cchc5hcbh657hb8h4h57chdfhb9h5f9h59fh669h684hb9hb9h5b4h5fq
    input: n67dh658h644h5h67chd6hbch574h6dh64chf6h5dh5cdh578h95h89hb4h684h598h585hch579hb8h556h59fhbhc9h585h544h5f9h5f9h545q
  observedGeneration: 2
  readyCount: 1
  region: regionOne
  transportURLSecret: rabbitmq-transport-url-keystone-keystone-transport