apiVersion: apps/v1 kind: Deployment metadata: annotations: deployment.kubernetes.io/revision: "2" creationTimestamp: "2025-12-03T22:29:50Z" generation: 2 name: octavia-api namespace: openstack ownerReferences: - apiVersion: octavia.openstack.org/v1beta1 blockOwnerDeletion: true controller: true kind: OctaviaAPI name: octavia-api uid: 9e5b4ec4-36f9-4c0a-8365-977a0273bdfc resourceVersion: "39757" uid: dd3f19f8-d22e-43c6-80f4-aab732b7eb6a spec: progressDeadlineSeconds: 600 replicas: 1 revisionHistoryLimit: 10 selector: matchLabels: service: octavia strategy: rollingUpdate: maxSurge: 25% maxUnavailable: 25% type: RollingUpdate template: metadata: annotations: k8s.v1.cni.cncf.io/networks: '[{"name":"internalapi","namespace":"openstack","interface":"internalapi"}]' creationTimestamp: null labels: service: octavia spec: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: service operator: In values: - octavia-api topologyKey: kubernetes.io/hostname weight: 100 automountServiceAccountToken: false containers: - args: - -c - /usr/local/bin/kolla_start command: - /bin/bash env: - name: CONFIG_HASH value: n5c9hdhcdh99h559h559hb9h98hbh58fh8h586h59fh686h5f6h697h66hb7h5bfhcdh596h56fh5fh588h675h5b7h649hf6h7hcfh56bh6q - name: KOLLA_CONFIG_STRATEGY value: COPY_ALWAYS image: quay.io/podified-antelope-centos9/openstack-octavia-api@sha256:a7089bcd0a2dbc014b29391dbd14b3fbc3ba0abd0f36bd16cb3b594cfa001464 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthcheck port: 9876 scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 13 successThreshold: 1 timeoutSeconds: 15 name: octavia-api readinessProbe: failureThreshold: 3 httpGet: path: /healthcheck port: 9876 scheme: HTTPS initialDelaySeconds: 5 periodSeconds: 15 successThreshold: 1 timeoutSeconds: 15 resources: {} securityContext: runAsGroup: 42437 runAsNonRoot: true runAsUser: 42437 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /usr/local/bin/container-scripts name: scripts readOnly: true - mountPath: /var/lib/config-data/merged name: config-data-merged - mountPath: /var/lib/kolla/config_files/config.json name: config-data-merged readOnly: true subPath: octavia-api-config.json - mountPath: /run/octavia name: octavia-run - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem name: combined-ca-bundle readOnly: true subPath: tls-ca-bundle.pem - mountPath: /var/lib/config-data/tls/certs/internal.crt name: internal-tls-certs readOnly: true subPath: tls.crt - mountPath: /var/lib/config-data/tls/private/internal.key name: internal-tls-certs readOnly: true subPath: tls.key - mountPath: /var/lib/config-data/tls/certs/public.crt name: public-tls-certs readOnly: true subPath: tls.crt - mountPath: /var/lib/config-data/tls/private/public.key name: public-tls-certs readOnly: true subPath: tls.key - mountPath: /var/lib/config-data/tls/certs/ovndb.crt name: ovndb-tls-certs readOnly: true subPath: tls.crt - mountPath: /var/lib/config-data/tls/private/ovndb.key name: ovndb-tls-certs readOnly: true subPath: tls.key - mountPath: /var/lib/config-data/tls/certs/ovndbca.crt name: ovndb-tls-certs readOnly: true subPath: ca.crt - env: - name: CONFIG_HASH value: n5c9hdhcdh99h559h559hb9h98hbh58fh8h586h59fh686h5f6h697h66hb7h5bfhcdh596h56fh5fh588h675h5b7h649hf6h7hcfh56bh6q - name: KOLLA_CONFIG_STRATEGY value: COPY_ALWAYS image: quay.io/podified-antelope-centos9/openstack-octavia-api@sha256:a7089bcd0a2dbc014b29391dbd14b3fbc3ba0abd0f36bd16cb3b594cfa001464 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthcheck port: 9876 scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 13 successThreshold: 1 timeoutSeconds: 15 name: octavia-api-provider-agent readinessProbe: failureThreshold: 3 httpGet: path: /healthcheck port: 9876 scheme: HTTPS initialDelaySeconds: 5 periodSeconds: 15 successThreshold: 1 timeoutSeconds: 15 resources: {} securityContext: runAsGroup: 42437 runAsNonRoot: true runAsUser: 42437 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /usr/local/bin/container-scripts name: scripts readOnly: true - mountPath: /var/lib/config-data/merged name: config-data-merged - mountPath: /var/lib/kolla/config_files/config.json name: config-data-merged readOnly: true subPath: octavia-driver-agent-config.json - mountPath: /run/octavia name: octavia-run - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem name: combined-ca-bundle readOnly: true subPath: tls-ca-bundle.pem - mountPath: /var/lib/config-data/tls/certs/internal.crt name: internal-tls-certs readOnly: true subPath: tls.crt - mountPath: /var/lib/config-data/tls/private/internal.key name: internal-tls-certs readOnly: true subPath: tls.key - mountPath: /var/lib/config-data/tls/certs/public.crt name: public-tls-certs readOnly: true subPath: tls.crt - mountPath: /var/lib/config-data/tls/private/public.key name: public-tls-certs readOnly: true subPath: tls.key - mountPath: /var/lib/config-data/tls/certs/ovndb.crt name: ovndb-tls-certs readOnly: true subPath: tls.crt - mountPath: /var/lib/config-data/tls/private/ovndb.key name: ovndb-tls-certs readOnly: true subPath: tls.key - mountPath: /var/lib/config-data/tls/certs/ovndbca.crt name: ovndb-tls-certs readOnly: true subPath: ca.crt dnsPolicy: ClusterFirst initContainers: - args: - -c - /usr/local/bin/container-scripts/init.sh command: - /bin/bash image: quay.io/podified-antelope-centos9/openstack-octavia-api@sha256:a7089bcd0a2dbc014b29391dbd14b3fbc3ba0abd0f36bd16cb3b594cfa001464 imagePullPolicy: IfNotPresent name: init resources: {} securityContext: runAsGroup: 42437 runAsNonRoot: true runAsUser: 42437 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /usr/local/bin/container-scripts name: scripts readOnly: true - mountPath: /var/lib/config-data/default name: config-data readOnly: true - mountPath: /var/lib/config-data/merged name: config-data-merged restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 42437 serviceAccount: octavia-octavia serviceAccountName: octavia-octavia terminationGracePeriodSeconds: 30 volumes: - name: scripts secret: defaultMode: 493 secretName: octavia-api-scripts - name: config-data secret: defaultMode: 416 secretName: octavia-api-config-data - emptyDir: {} name: config-data-merged - emptyDir: {} name: octavia-run - name: combined-ca-bundle secret: defaultMode: 292 secretName: combined-ca-bundle - name: internal-tls-certs secret: defaultMode: 256 secretName: cert-octavia-internal-svc - name: public-tls-certs secret: defaultMode: 256 secretName: cert-octavia-public-svc - name: ovndb-tls-certs secret: defaultMode: 256 secretName: cert-octavia-ovndbs status: availableReplicas: 1 conditions: - lastTransitionTime: "2025-12-03T22:30:25Z" lastUpdateTime: "2025-12-03T22:30:25Z" message: Deployment has minimum availability. reason: MinimumReplicasAvailable status: "True" type: Available - lastTransitionTime: "2025-12-03T22:29:50Z" lastUpdateTime: "2025-12-03T22:30:49Z" message: ReplicaSet "octavia-api-79b888857f" has successfully progressed. reason: NewReplicaSetAvailable status: "True" type: Progressing observedGeneration: 2 readyReplicas: 1 replicas: 1 updatedReplicas: 1