apiVersion: apps/v1
kind: ReplicaSet
metadata:
  annotations:
    deployment.kubernetes.io/desired-replicas: "1"
    deployment.kubernetes.io/max-replicas: "2"
    deployment.kubernetes.io/revision: "3"
  creationTimestamp: "2025-12-03T22:26:38Z"
  generation: 2
  labels:
    component: cfnapi
    pod-template-hash: 687b5cdd65
    service: heat
  name: heat-cfnapi-687b5cdd65
  namespace: openstack
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: Deployment
    name: heat-cfnapi
    uid: 9ff266bf-c054-4d97-a0da-515827086e80
  resourceVersion: "35524"
  uid: 3460f628-ab63-4bd7-a4b2-3ebc067a72f1
spec:
  replicas: 1
  selector:
    matchLabels:
      component: cfnapi
      pod-template-hash: 687b5cdd65
      service: heat
  template:
    metadata:
      creationTimestamp: null
      labels:
        component: cfnapi
        pod-template-hash: 687b5cdd65
        service: heat
    spec:
      affinity:
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
          - podAffinityTerm:
              labelSelector:
                matchExpressions:
                - key: service
                  operator: In
                  values:
                  - heat
              topologyKey: kubernetes.io/hostname
            weight: 100
      containers:
      - args:
        - -c
        - /usr/local/bin/kolla_httpd_setup && /usr/local/bin/kolla_start
        command:
        - /bin/bash
        env:
        - name: CONFIG_HASH
          value: n9fh549h78h5bbh99h8dh68fhb4h84h87h8ch594h565h96h64dhd9h568h666h5fdh6ch67bh646h5f9h68h679hcfh5dfh654h699h68dh697h586q
        - name: KOLLA_CONFIG_STRATEGY
          value: COPY_ALWAYS
        image: quay.io/podified-antelope-centos9/openstack-heat-api-cfn@sha256:d506b2ca02a16cdab757b38a86d40e0459094c7269067de89beb3edf4a50bf5e
        imagePullPolicy: IfNotPresent
        livenessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthcheck
            port: 8000
            scheme: HTTPS
          initialDelaySeconds: 5
          periodSeconds: 5
          successThreshold: 1
          timeoutSeconds: 10
        name: heat-cfnapi
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthcheck
            port: 8000
            scheme: HTTPS
          initialDelaySeconds: 5
          periodSeconds: 5
          successThreshold: 1
          timeoutSeconds: 10
        resources: {}
        securityContext:
          runAsGroup: 42418
          runAsUser: 42418
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /var/lib/kolla/config_files/config.json
          name: config-data
          readOnly: true
          subPath: heat-cfnapi-config.json
        - mountPath: /etc/heat/heat.conf.d
          name: config-data-custom
          readOnly: true
        - mountPath: /var/lib/config-data/default
          name: config-data
          readOnly: true
        - mountPath: /etc/my.cnf
          name: config-data
          readOnly: true
          subPath: my.cnf
        - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
          name: combined-ca-bundle
          readOnly: true
          subPath: tls-ca-bundle.pem
        - mountPath: /var/lib/config-data/tls/certs/internal.crt
          name: internal-tls-certs
          readOnly: true
          subPath: tls.crt
        - mountPath: /var/lib/config-data/tls/private/internal.key
          name: internal-tls-certs
          readOnly: true
          subPath: tls.key
        - mountPath: /var/lib/config-data/tls/certs/public.crt
          name: public-tls-certs
          readOnly: true
          subPath: tls.crt
        - mountPath: /var/lib/config-data/tls/private/public.key
          name: public-tls-certs
          readOnly: true
          subPath: tls.key
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext:
        fsGroup: 42418
      serviceAccount: heat-heat
      serviceAccountName: heat-heat
      terminationGracePeriodSeconds: 60
      volumes:
      - name: config-data-custom
        secret:
          defaultMode: 420
          secretName: heat-cfnapi-config-data
      - name: config-data
        secret:
          defaultMode: 420
          secretName: heat-config-data
      - name: combined-ca-bundle
        secret:
          defaultMode: 292
          secretName: combined-ca-bundle
      - name: internal-tls-certs
        secret:
          defaultMode: 256
          secretName: cert-heat-cfnapi-internal-svc
      - name: public-tls-certs
        secret:
          defaultMode: 256
          secretName: cert-heat-cfnapi-public-svc
status:
  availableReplicas: 1
  fullyLabeledReplicas: 1
  observedGeneration: 2
  readyReplicas: 1
  replicas: 1