apiVersion: keystone.openstack.org/v1beta1
kind: KeystoneAPI
metadata:
  creationTimestamp: '2025-12-03T22:22:53Z'
  finalizers:
  - openstack.org/keystoneapi
  - openstack.org/keystoneservice-swift
  - openstack.org/keystoneendpoint-swift
  - openstack.org/keystoneservice-cinderv3
  - openstack.org/keystoneservice-placement
  - openstack.org/keystoneendpoint-cinderv3
  - openstack.org/keystoneservice-glance
  - openstack.org/keystoneendpoint-placement
  - openstack.org/keystoneservice-barbican
  - openstack.org/keystoneservice-nova
  - openstack.org/keystoneendpoint-glance-baebb-default-external
  - openstack.org/keystoneendpoint-glance-baebb-default-internal
  - openstack.org/keystoneendpoint-barbican-api
  - openstack.org/keystoneservice-neutron
  - openstack.org/keystoneservice-ceilometer
  - openstack.org/keystoneendpoint-neutron
  - openstack.org/keystoneservice-heat-cfn
  - openstack.org/keystoneservice-heat
  - openstack.org/keystoneendpoint-heat-cfn
  - openstack.org/keystoneendpoint-heat
  - openstack.org/keystoneservice-aodh
  - openstack.org/keystoneendpoint-aodh
  - openstack.org/keystoneendpoint-nova
  - openstack.org/keystoneservice-octavia
  - openstack.org/keystoneendpoint-octavia
  generation: 2
  name: keystone
  namespace: openstack
  ownerReferences:
  - apiVersion: core.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackControlPlane
    name: controlplane
    uid: baebb606-0aee-480e-936d-ecfd322a7e8c
  resourceVersion: '39060'
  uid: 6e59c64d-4f58-40f5-892d-401b2b17ba68
spec:
  adminProject: admin
  adminUser: admin
  apiTimeout: 60
  containerImage: quay.io/podified-antelope-centos9/openstack-keystone@sha256:a7b6fa2f16a882674624b48939737e2bd95da7bef60db593a8e6e4d397fa516c
  databaseAccount: keystone
  databaseInstance: openstack
  enableSecureRBAC: true
  extraMounts: []
  federatedRealmConfig: ''
  fernetMaxActiveKeys: 5
  fernetRotationDays: 1
  httpdCustomization:
    processNumber: 3
  memcachedInstance: memcached
  override:
    service:
      internal:
        metadata:
          annotations:
            metallb.universe.tf/address-pool: internalapi
            metallb.universe.tf/allow-shared-ip: internalapi
            metallb.universe.tf/loadBalancerIPs: 172.17.0.80
          labels:
            osctlplane: ''
            osctlplane-service: keystone
        spec:
          type: LoadBalancer
      public:
        endpointURL: https://keystone-public-openstack.apps.sno.openstack.lab
        metadata:
          labels:
            osctlplane: ''
            osctlplane-service: keystone
  passwordSelectors:
    admin: AdminPassword
  preserveJobs: false
  rabbitMqClusterName: rabbitmq
  region: regionOne
  replicas: 1
  resources: {}
  secret: osp-secret
  tls:
    api:
      internal:
        secretName: cert-keystone-internal-svc
      public:
        secretName: cert-keystone-public-svc
    caBundleSecretName: combined-ca-bundle
  trustFlushArgs: ''
  trustFlushSchedule: 1 * * * *
  trustFlushSuspend: false
status:
  apiEndpoints:
    internal: https://keystone-internal.openstack.svc:5000
    public: https://keystone-public-openstack.apps.sno.openstack.lab
  conditions:
  - lastTransitionTime: '2025-12-03T22:26:03Z'
    message: Setup complete
    reason: Ready
    status: 'True'
    type: Ready
  - lastTransitionTime: '2025-12-03T22:25:29Z'
    message: Bootstrap completed
    reason: Ready
    status: 'True'
    type: BootstrapReady
  - lastTransitionTime: '2025-12-03T22:24:50Z'
    message: Create service completed
    reason: Ready
    status: 'True'
    type: CreateServiceReady
  - lastTransitionTime: '2025-12-03T22:25:29Z'
    message: CronJob completed
    reason: Ready
    status: 'True'
    type: CronJobReady
  - lastTransitionTime: '2025-12-03T22:24:06Z'
    message: DB create completed
    reason: Ready
    status: 'True'
    type: DBReady
  - lastTransitionTime: '2025-12-03T22:24:50Z'
    message: DBsync completed
    reason: Ready
    status: 'True'
    type: DBSyncReady
  - lastTransitionTime: '2025-12-03T22:26:03Z'
    message: Deployment completed
    reason: Ready
    status: 'True'
    type: DeploymentReady
  - lastTransitionTime: '2025-12-03T22:22:54Z'
    message: Input data complete
    reason: Ready
    status: 'True'
    type: InputReady
  - lastTransitionTime: '2025-12-03T22:22:55Z'
    message: MariaDBAccount creation complete
    reason: Ready
    status: 'True'
    type: MariaDBAccountReady
  - lastTransitionTime: '2025-12-03T22:24:28Z'
    message: ' Memcached instance has been provisioned'
    reason: Ready
    status: 'True'
    type: MemcachedReady
  - lastTransitionTime: '2025-12-03T22:25:29Z'
    message: NetworkAttachments completed
    reason: Ready
    status: 'True'
    type: NetworkAttachmentsReady
  - lastTransitionTime: '2025-12-03T22:24:28Z'
    message: RabbitMqTransportURL successfully created
    reason: Ready
    status: 'True'
    type: RabbitMqTransportURLReady
  - lastTransitionTime: '2025-12-03T22:24:50Z'
    message: RoleBinding created
    reason: Ready
    status: 'True'
    type: RoleBindingReady
  - lastTransitionTime: '2025-12-03T22:24:50Z'
    message: Role created
    reason: Ready
    status: 'True'
    type: RoleReady
  - lastTransitionTime: '2025-12-03T22:24:50Z'
    message: ServiceAccount created
    reason: Ready
    status: 'True'
    type: ServiceAccountReady
  - lastTransitionTime: '2025-12-03T22:24:50Z'
    message: Service config create completed
    reason: Ready
    status: 'True'
    type: ServiceConfigReady
  - lastTransitionTime: '2025-12-03T22:24:28Z'
    message: Input data complete
    reason: Ready
    status: 'True'
    type: TLSInputReady
  databaseHostname: openstack.openstack.svc
  hash:
    bootstrap: ndfh66chc4h644h97h645h66chd5hcch545h594h9dh698h9ch668h5ch5b8h668h5f7h645h589h8h6bhbch594h5fbh57ch55ch566hb4h66ch56bq
    dbsync: n68ch5f8h698h697h5dfh645h54h56ch689h6bh5ddh58bh56hd5h5b9h5bbh545h9bh55fh5fbh5bh587h5fh78h559h5d4hdch5fh54bh5cch8dh665q
    input: n56dh577h5c9h547h5d6h567h584hf8h9fh55ch8bh5bch5d4h549h77h694h87h5dh68ch656h66h5c5h568hf7h66dh5ffh58h59dh594h59bh67chb7q
  observedGeneration: 2
  readyCount: 1
  region: regionOne
  transportURLSecret: rabbitmq-transport-url-keystone-keystone-transport