---
apiVersion: batch/v1
items:
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n557h5bdh696hd9h55fh5dfhcbh586hbfh599hbbh5f9h688h5fdh655h5d8h55ch5bh86h5bbh69h587h545h678h5d8hd6h565h686h687h6bh54fh576q
    creationTimestamp: "2026-02-20T15:16:53Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: cinder_2c3c
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"17da4729-30eb-4151-a0af-2c2066a4eae2"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:16:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:16:57Z"
    name: cinder-2c3c-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: cinder
      uid: 17da4729-30eb-4151-a0af-2c2066a4eae2
    resourceVersion: "31325"
    uid: 7eea77bd-7160-405d-a9db-2dd72df8f315
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 7eea77bd-7160-405d-a9db-2dd72df8f315
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 7eea77bd-7160-405d-a9db-2dd72df8f315
          batch.kubernetes.io/job-name: cinder-2c3c-account-create-update
          controller-uid: 7eea77bd-7160-405d-a9db-2dd72df8f315
          job-name: cinder-2c3c-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "cinder" ]; then
                GRANT_DATABASE="cinder"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'cinder_2c3c'@'localhost';
            CREATE USER IF NOT EXISTS 'cinder_2c3c'@'%';

            ALTER USER 'cinder_2c3c'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'cinder_2c3c'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'cinder_2c3c'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'cinder_2c3c'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "cinder_2c3c" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='cinder_2c3c' and host='localhost';" )

            if [[ ${username} != "cinder_2c3c" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: cinder-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:16:57Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:16:57Z"
      lastTransitionTime: "2026-02-20T15:16:57Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:16:57Z"
      lastTransitionTime: "2026-02-20T15:16:57Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:16:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nch578h66h549h8dh54ch644h549h7h5fhdfh89h56bh569h67fhf7h98h57ch5dfh58fh67fh5f5h5bfh87h57dh5dch67h5f5h66fh594h675h6fq
    creationTimestamp: "2026-02-20T15:16:53Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: cinder
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"65b9a9fa-813c-4ecd-824c-4115421eb35a"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:16:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:16:57Z"
    name: cinder-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: cinder
      uid: 65b9a9fa-813c-4ecd-824c-4115421eb35a
    resourceVersion: "31322"
    uid: 0c170082-048c-4b64-96c1-6fb8f212ae89
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 0c170082-048c-4b64-96c1-6fb8f212ae89
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 0c170082-048c-4b64-96c1-6fb8f212ae89
          batch.kubernetes.io/job-name: cinder-db-create
          controller-uid: 0c170082-048c-4b64-96c1-6fb8f212ae89
          job-name: cinder-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS cinder; ALTER DATABASE cinder CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE cinder;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:16:57Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:16:57Z"
      lastTransitionTime: "2026-02-20T15:16:57Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:16:57Z"
      lastTransitionTime: "2026-02-20T15:16:57Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:16:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n7h568h5ffh87h559hcfh645h9ch658h54ch5ch5f7hddh679hd8h6hcdh7dh687h559hcbh549h5fbhbch569h544h5d4h66fh94h58h5fchd6q
    creationTimestamp: "2026-02-20T15:17:08Z"
    generation: 1
    labels:
      service: cinder
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"3f81e6bd-d036-45f1-8fee-c44feadb2c71"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"cinder-eea69-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"db-sync-config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:17:08Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:17:41Z"
    name: cinder-eea69-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Cinder
      name: cinder-eea69
      uid: 3f81e6bd-d036-45f1-8fee-c44feadb2c71
    resourceVersion: "32691"
    uid: e90908b8-fd64-4167-ae64-1ddc1bb52f63
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: e90908b8-fd64-4167-ae64-1ddc1bb52f63
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: e90908b8-fd64-4167-ae64-1ddc1bb52f63
          batch.kubernetes.io/job-name: cinder-eea69-db-sync
          controller-uid: e90908b8-fd64-4167-ae64-1ddc1bb52f63
          job-name: cinder-eea69-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "TRUE"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-cinder-api@sha256:3fa6e687aa002b92fedbfe2c1ccaa2906b399c58d17bf9ecece2c4cd69a0210b
          imagePullPolicy: IfNotPresent
          name: cinder-eea69-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/cinder/cinder.conf.d
            name: db-sync-config-data
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-eea69
        serviceAccountName: cinder-cinder-eea69
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-eea69-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-eea69-config-data
        - name: db-sync-config-data
          secret:
            defaultMode: 420
            items:
            - key: 00-global-defaults.conf
              path: 00-global-defaults.conf
            - key: 02-global-custom.conf
              path: 02-global-custom.conf
            secretName: cinder-eea69-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:17:41Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:17:41Z"
      lastTransitionTime: "2026-02-20T15:17:41Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:17:41Z"
      lastTransitionTime: "2026-02-20T15:17:41Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:17:08Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n59ch5d6h5cbhd5h587hffh664h655h54ch54h694h65fhd7h5bh6ch66h668h84h544h5bbh69h54chc5hc8h67bh65fh5b8h69hdbh5b6h599h564q
    creationTimestamp: "2026-02-20T15:16:32Z"
    generation: 1
    labels:
      service: glance
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"572012a9-814c-4e0e-96f6-819ff30ebea0"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"glance-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/glance/glance.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"db-sync-config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:16:32Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:17:01Z"
    name: glance-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: glance.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Glance
      name: glance-c0df7
      uid: 572012a9-814c-4e0e-96f6-819ff30ebea0
    resourceVersion: "31388"
    uid: fe8272de-3905-4253-80dd-a5381907788c
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: fe8272de-3905-4253-80dd-a5381907788c
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"storage","namespace":"openstack","interface":"storage"}]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: fe8272de-3905-4253-80dd-a5381907788c
          batch.kubernetes.io/job-name: glance-db-sync
          controller-uid: fe8272de-3905-4253-80dd-a5381907788c
          job-name: glance-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-glance-api@sha256:2a146cb0eb1a819e7b367354687fa3eeb3894fa4a03eadd0dc2e2c849345cbf0
          imagePullPolicy: IfNotPresent
          name: glance-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42415
            runAsUser: 42415
            seccompProfile:
              type: RuntimeDefault
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/glance/glance.conf.d
            name: db-sync-config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: glance-glance-c0df7
        serviceAccountName: glance-glance-c0df7
        terminationGracePeriodSeconds: 30
        volumes:
        - name: db-sync-config-data
          secret:
            defaultMode: 420
            items:
            - key: 00-config.conf
              path: 00-config.conf
            - key: 01-config.conf
              path: 01-config.conf
            secretName: glance-c0df7-config-data
        - name: config-data
          secret:
            defaultMode: 420
            secretName: glance-c0df7-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:17:01Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:17:01Z"
      lastTransitionTime: "2026-02-20T15:17:01Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:17:01Z"
      lastTransitionTime: "2026-02-20T15:17:01Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:16:32Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n8dh67h5c9h5b9h5c4hcdh65fh575hdh78h6ch5b9hb9h5b5hbfh567h7ch65dh659h6dh697h664h598h65fh5dbh559h554h579h689hc9hf6h5f7q
    creationTimestamp: "2026-02-20T15:17:08Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_280d
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"dbb80ca7-f4ec-4f20-a545-0ceb83e3dd6e"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:17:08Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:17:17Z"
    name: ironic-280d-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: ironic
      uid: dbb80ca7-f4ec-4f20-a545-0ceb83e3dd6e
    resourceVersion: "32239"
    uid: 2a9bb72e-fd5d-478d-b89d-eec837479d2a
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 2a9bb72e-fd5d-478d-b89d-eec837479d2a
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 2a9bb72e-fd5d-478d-b89d-eec837479d2a
          batch.kubernetes.io/job-name: ironic-280d-account-create-update
          controller-uid: 2a9bb72e-fd5d-478d-b89d-eec837479d2a
          job-name: ironic-280d-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "ironic" ]; then
                GRANT_DATABASE="ironic"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'ironic_280d'@'localhost';
            CREATE USER IF NOT EXISTS 'ironic_280d'@'%';

            ALTER USER 'ironic_280d'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'ironic_280d'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_280d'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_280d'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "ironic_280d" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='ironic_280d' and host='localhost';" )

            if [[ ${username} != "ironic_280d" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: ironic-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:17:17Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:17:17Z"
      lastTransitionTime: "2026-02-20T15:17:17Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:17:17Z"
      lastTransitionTime: "2026-02-20T15:17:17Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:17:08Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n57fh564h85hc8hc9h6bh557hddh99h69h675hf9h5ddh5dbhb5h674h95h665h55ch87h5f6h55bh5c4h646hc9h68fh599h556hb9hdfhcch5c6q
    creationTimestamp: "2026-02-20T15:17:08Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"82a0c32b-6bb8-4c57-81a0-dc5fd72ce3fa"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:17:08Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:17:17Z"
    name: ironic-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: ironic
      uid: 82a0c32b-6bb8-4c57-81a0-dc5fd72ce3fa
    resourceVersion: "32235"
    uid: 5d048824-2b8d-4f70-acb5-89aaf079f87e
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 5d048824-2b8d-4f70-acb5-89aaf079f87e
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 5d048824-2b8d-4f70-acb5-89aaf079f87e
          batch.kubernetes.io/job-name: ironic-db-create
          controller-uid: 5d048824-2b8d-4f70-acb5-89aaf079f87e
          job-name: ironic-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS ironic; ALTER DATABASE ironic CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON ironic.* TO 'ironic'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON ironic.* TO 'ironic'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE ironic;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:17:17Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:17:17Z"
      lastTransitionTime: "2026-02-20T15:17:17Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:17:17Z"
      lastTransitionTime: "2026-02-20T15:17:17Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:17:08Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n569h68ch58h597h555h657h5bfh558h8ch677h8bh5b4hc7h9hdfh64ch646hc5hdch598h55ch5c8h9bhb9h5c5h68h599h665h66dh59h559h6cq
    creationTimestamp: "2026-02-20T15:17:19Z"
    generation: 1
    labels:
      service: ironic
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"75e87cc3-5443-45c3-8fac-f2f3845d7a76"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"ironic-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabaseHost"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DatabaseName"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DeployHTTPURL"}:
                      .: {}
                      f:name: {}
                    k:{"name":"IngressDomain"}:
                      .: {}
                      f:name: {}
                    k:{"name":"IronicPassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"PodName"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PodNamespace"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"ProvisionNetwork"}:
                      .: {}
                      f:name: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-merged"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:17:19Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:17:54Z"
    name: ironic-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Ironic
      name: ironic
      uid: 75e87cc3-5443-45c3-8fac-f2f3845d7a76
    resourceVersion: "33411"
    uid: f43f9d30-5b20-40b0-97aa-6a1da33c4e49
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: f43f9d30-5b20-40b0-97aa-6a1da33c4e49
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: f43f9d30-5b20-40b0-97aa-6a1da33c4e49
          batch.kubernetes.io/job-name: ironic-db-sync
          controller-uid: f43f9d30-5b20-40b0-97aa-6a1da33c4e49
          job-name: ironic-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/dbsync.sh
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor@sha256:1f519a69686478381fe122716a13d116612a9b6eaeb47ab00ef4cd82b93468bf
          imagePullPolicy: IfNotPresent
          name: ironic-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/init.sh
          command:
          - /bin/bash
          env:
          - name: IronicPassword
            valueFrom:
              secretKeyRef:
                key: IronicPassword
                name: osp-secret
          - name: PodName
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: PodNamespace
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: ProvisionNetwork
          - name: DatabaseHost
            value: openstack.openstack.svc
          - name: DatabaseName
            value: ironic
          - name: DeployHTTPURL
          - name: IngressDomain
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor@sha256:1f519a69686478381fe122716a13d116612a9b6eaeb47ab00ef4cd82b93468bf
          imagePullPolicy: IfNotPresent
          name: init
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: ironic-config-data
        - emptyDir: {}
          name: config-data-merged
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:17:54Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:17:54Z"
      lastTransitionTime: "2026-02-20T15:17:54Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:17:54Z"
      lastTransitionTime: "2026-02-20T15:17:54Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:17:19Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n8chffh579h59h5c7h4h696h58h96h67h54dh68h5bh584h688h6fh547h56ch675h559hb8h656h8h559h66dh69h57dh66bhffh5cfhc9h59cq
    creationTimestamp: "2026-02-20T15:17:54Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_inspector_4668
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"f4a8a710-4bab-438e-8b0a-ead15a1d2809"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:17:54Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:18:00Z"
    name: ironic-inspector-4668-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: ironic-inspector
      uid: f4a8a710-4bab-438e-8b0a-ead15a1d2809
    resourceVersion: "33911"
    uid: d0d90d6d-9ba4-4536-a678-646c4000549a
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: d0d90d6d-9ba4-4536-a678-646c4000549a
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: d0d90d6d-9ba4-4536-a678-646c4000549a
          batch.kubernetes.io/job-name: ironic-inspector-4668-account-create-update
          controller-uid: d0d90d6d-9ba4-4536-a678-646c4000549a
          job-name: ironic-inspector-4668-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "ironic_inspector" ]; then
                GRANT_DATABASE="ironic_inspector"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'ironic_inspector_4668'@'localhost';
            CREATE USER IF NOT EXISTS 'ironic_inspector_4668'@'%';

            ALTER USER 'ironic_inspector_4668'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'ironic_inspector_4668'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_inspector_4668'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_inspector_4668'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "ironic_inspector_4668" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='ironic_inspector_4668' and host='localhost';" )

            if [[ ${username} != "ironic_inspector_4668" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: ironic-inspector-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:18:00Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:18:00Z"
      lastTransitionTime: "2026-02-20T15:18:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:18:00Z"
      lastTransitionTime: "2026-02-20T15:18:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:17:54Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n577h677h68bh58dh64bh5b7h558hd6h584h5fh54fh695h7ch54fh549h5fbh5f8h57ch8h98h5dbh5cch54ch5c7hddh7dhc6h656h85hb5h596hd7q
    creationTimestamp: "2026-02-20T15:17:54Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_inspector
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"b49decdb-b6cf-41fc-82f4-ab9d7f0fb1d4"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:17:54Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:18:00Z"
    name: ironic-inspector-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: ironic-inspector
      uid: b49decdb-b6cf-41fc-82f4-ab9d7f0fb1d4
    resourceVersion: "33915"
    uid: 1a754a18-644c-491f-8110-54d1078da9e9
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 1a754a18-644c-491f-8110-54d1078da9e9
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 1a754a18-644c-491f-8110-54d1078da9e9
          batch.kubernetes.io/job-name: ironic-inspector-db-create
          controller-uid: 1a754a18-644c-491f-8110-54d1078da9e9
          job-name: ironic-inspector-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS ironic_inspector; ALTER DATABASE ironic_inspector CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON ironic_inspector.* TO 'ironic_inspector'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON ironic_inspector.* TO 'ironic_inspector'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE ironic_inspector;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:18:00Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:18:00Z"
      lastTransitionTime: "2026-02-20T15:18:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:18:00Z"
      lastTransitionTime: "2026-02-20T15:18:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:17:54Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n59fh57bh565h697h94h64fh6dh65ch664hfdhbh58fh66fhbh556h5b8h669h54bh66fhd5h565h64ch4h68ch666h5f6h55dhd7h5f6hcdh666h5ccq
    creationTimestamp: "2026-02-20T15:18:09Z"
    generation: 1
    labels:
      component: inspector
      service: ironic
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"dad99910-78c1-4266-b084-6f980e12c4d8"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"ironic-inspector-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"var-lib-ironic"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"var-lib-ironic-inspector-dhcp-hostsdir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:18:09Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:18:17Z"
    name: ironic-inspector-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: IronicInspector
      name: ironic-inspector
      uid: dad99910-78c1-4266-b084-6f980e12c4d8
    resourceVersion: "34343"
    uid: a3c600aa-ef70-4ba8-9792-3af8b501b4a0
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: a3c600aa-ef70-4ba8-9792-3af8b501b4a0
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: a3c600aa-ef70-4ba8-9792-3af8b501b4a0
          batch.kubernetes.io/job-name: ironic-inspector-db-sync
          controller-uid: a3c600aa-ef70-4ba8-9792-3af8b501b4a0
          job-name: ironic-inspector-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /bin/bash -c 'ironic-inspector-dbsync
            --config-file /etc/ironic-inspector/inspector.conf --config-dir /etc/ironic-inspector/inspector.conf.d
            upgrade'
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector@sha256:696ca56ff35797483603be60573aabc2d626a9e2886b14fbd163b25bbd01443e
          imagePullPolicy: IfNotPresent
          name: ironic-inspector-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-inspector-scripts
        - name: config
          secret:
            defaultMode: 416
            secretName: ironic-inspector-config-data
        - emptyDir: {}
          name: var-lib-ironic
        - emptyDir: {}
          name: var-lib-ironic-inspector-dhcp-hostsdir
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:18:17Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:18:17Z"
      lastTransitionTime: "2026-02-20T15:18:17Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:18:17Z"
      lastTransitionTime: "2026-02-20T15:18:17Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:18:09Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nfdh68fh66bh686h569hdfh59bhfchcch585h5f7h559h585h58dh68dh64bh5b6h77h689h694h576hcfh689h9fh667h7h54h84h587h6h4h65bq
    creationTimestamp: "2026-02-20T15:17:18Z"
    generation: 1
    labels:
      owner: keystone
      service: keystone
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6ef03b87-df61-4d65-b921-9480a34cbb2c"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"keystone-bootstrap"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_INTERNAL_URL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_PASSWORD"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"OS_BOOTSTRAP_PROJECT_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_PUBLIC_URL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_REGION_ID"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_SERVICE_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_USERNAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/keystone/credential-keys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/keystone/fernet-keys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"credential-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"fernet-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:17:18Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:17:36Z"
    name: keystone-bootstrap
    namespace: openstack
    ownerReferences:
    - apiVersion: keystone.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: KeystoneAPI
      name: keystone
      uid: 6ef03b87-df61-4d65-b921-9480a34cbb2c
    resourceVersion: "32587"
    uid: 063965d3-e29c-465e-86cc-41b75feba48e
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 063965d3-e29c-465e-86cc-41b75feba48e
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 063965d3-e29c-465e-86cc-41b75feba48e
          batch.kubernetes.io/job-name: keystone-bootstrap
          controller-uid: 063965d3-e29c-465e-86cc-41b75feba48e
          job-name: keystone-bootstrap
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && keystone-manage bootstrap
          command:
          - /bin/bash
          env:
          - name: OS_BOOTSTRAP_PASSWORD
            valueFrom:
              secretKeyRef:
                key: AdminPassword
                name: osp-secret
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: OS_BOOTSTRAP_INTERNAL_URL
            value: https://keystone-internal.openstack.svc:5000
          - name: OS_BOOTSTRAP_PROJECT_NAME
            value: admin
          - name: OS_BOOTSTRAP_PUBLIC_URL
            value: https://keystone-public-openstack.apps.sno.openstack.lab
          - name: OS_BOOTSTRAP_REGION_ID
            value: regionOne
          - name: OS_BOOTSTRAP_SERVICE_NAME
            value: keystone
          - name: OS_BOOTSTRAP_USERNAME
            value: admin
          image: quay.io/podified-antelope-centos9/openstack-keystone@sha256:d832d062b84e8f6354ac9ace6aafd6fed301d95a94751db33338dccc1ab59605
          imagePullPolicy: IfNotPresent
          name: keystone-bootstrap
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: keystone-api-config.json
          - mountPath: /etc/keystone/fernet-keys
            name: fernet-keys
            readOnly: true
          - mountPath: /etc/keystone/credential-keys
            name: credential-keys
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: keystone-keystone
        serviceAccountName: keystone-keystone
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: keystone-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: keystone-config-data
        - name: fernet-keys
          secret:
            defaultMode: 420
            items:
            - key: FernetKeys0
              path: "0"
            - key: FernetKeys1
              path: "1"
            - key: FernetKeys2
              path: "2"
            - key: FernetKeys3
              path: "3"
            - key: FernetKeys4
              path: "4"
            secretName: keystone
        - name: credential-keys
          secret:
            defaultMode: 420
            items:
            - key: CredentialKeys0
              path: "0"
            - key: CredentialKeys1
              path: "1"
            secretName: keystone
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:17:36Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:17:36Z"
      lastTransitionTime: "2026-02-20T15:17:36Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:17:36Z"
      lastTransitionTime: "2026-02-20T15:17:36Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:17:18Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n59ch54h544hc8h5b5h67ch5d7h5h5chf4h548h79h679h5b6h69h697h9bh6bh695h5f9h58h66bhdbh5d5h64fh57ch5fbh89h5b7h7fh68ch654q
    creationTimestamp: "2026-02-20T15:16:53Z"
    generation: 1
    labels:
      owner: keystone
      service: keystone
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6ef03b87-df61-4d65-b921-9480a34cbb2c"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"keystone-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/keystone/keystone.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"credential-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"fernet-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:16:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:17:08Z"
    name: keystone-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: keystone.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: KeystoneAPI
      name: keystone
      uid: 6ef03b87-df61-4d65-b921-9480a34cbb2c
    resourceVersion: "31617"
    uid: cb96c5ac-08f9-4753-9e5e-dcca97203fe7
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: cb96c5ac-08f9-4753-9e5e-dcca97203fe7
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: cb96c5ac-08f9-4753-9e5e-dcca97203fe7
          batch.kubernetes.io/job-name: keystone-db-sync
          controller-uid: cb96c5ac-08f9-4753-9e5e-dcca97203fe7
          job-name: keystone-db-sync
      spec:
        containers:
        - args:
          - -c
          - keystone-manage db_sync
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-keystone@sha256:d832d062b84e8f6354ac9ace6aafd6fed301d95a94751db33338dccc1ab59605
          imagePullPolicy: IfNotPresent
          name: keystone-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42425
            runAsUser: 42425
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/keystone/keystone.conf
            name: config-data
            readOnly: true
            subPath: keystone.conf
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: keystone-keystone
        serviceAccountName: keystone-keystone
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: keystone-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: keystone-config-data
        - name: fernet-keys
          secret:
            defaultMode: 420
            items:
            - key: FernetKeys0
              path: "0"
            - key: FernetKeys1
              path: "1"
            - key: FernetKeys2
              path: "2"
            - key: FernetKeys3
              path: "3"
            - key: FernetKeys4
              path: "4"
            secretName: keystone
        - name: credential-keys
          secret:
            defaultMode: 420
            items:
            - key: CredentialKeys0
              path: "0"
            - key: CredentialKeys1
              path: "1"
            secretName: keystone
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:17:08Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:17:08Z"
      lastTransitionTime: "2026-02-20T15:17:08Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:17:08Z"
      lastTransitionTime: "2026-02-20T15:17:08Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:16:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n598h559h665h55dh67bh687h566h554h545hbch644h66fh596h6h559h698h5cch579h5cch67bh696h694hdh595h7fh656hfchd5hcbh57chb9h59fq
    creationTimestamp: "2026-02-20T15:16:53Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: neutron
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"74f4f07a-9a4d-48ac-902d-3eab9471ff7a"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:16:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:16:58Z"
    name: neutron-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: neutron
      uid: 74f4f07a-9a4d-48ac-902d-3eab9471ff7a
    resourceVersion: "31344"
    uid: 2e6ef2f8-62ef-4bd6-9a5d-c2c3388f165f
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 2e6ef2f8-62ef-4bd6-9a5d-c2c3388f165f
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 2e6ef2f8-62ef-4bd6-9a5d-c2c3388f165f
          batch.kubernetes.io/job-name: neutron-db-create
          controller-uid: 2e6ef2f8-62ef-4bd6-9a5d-c2c3388f165f
          job-name: neutron-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS neutron; ALTER DATABASE neutron CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE neutron;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:16:58Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:16:58Z"
      lastTransitionTime: "2026-02-20T15:16:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:16:58Z"
      lastTransitionTime: "2026-02-20T15:16:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:16:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5f7h5cch559h7dhfch5bdh68bhcbhb9h685hddh85h66dh69h588hdh555h54fh64bh594h587h5fchfbh55chc9hd9h68ch657h7dh64h64dhf9q
      k8s.v1.cni.cncf.io/networks: '[{"name":"internalapi","namespace":"openstack","interface":"internalapi"}]'
    creationTimestamp: "2026-02-20T15:17:08Z"
    generation: 1
    labels:
      service: neutron
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"57b3c932-fae2-4dc6-84d1-a8703d04e9de"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"neutron-db-sync"}:
                  .: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"httpd-config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:17:08Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:17:47Z"
    name: neutron-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: neutron.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NeutronAPI
      name: neutron
      uid: 57b3c932-fae2-4dc6-84d1-a8703d04e9de
    resourceVersion: "33064"
    uid: f2bdf331-d15d-41ce-b9e1-c5c8a2a650c5
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: f2bdf331-d15d-41ce-b9e1-c5c8a2a650c5
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: f2bdf331-d15d-41ce-b9e1-c5c8a2a650c5
          batch.kubernetes.io/job-name: neutron-db-sync
          controller-uid: f2bdf331-d15d-41ce-b9e1-c5c8a2a650c5
          job-name: neutron-db-sync
      spec:
        containers:
        - env:
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-neutron-server@sha256:f391b842000dadaeb692eb6b5e845c2aa3125ef24679fbb4af2c8b98252de4b2
          imagePullPolicy: IfNotPresent
          name: neutron-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42435
            runAsNonRoot: true
            runAsUser: 42435
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: neutron-neutron
        serviceAccountName: neutron-neutron
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config
          secret:
            defaultMode: 420
            secretName: neutron-config
        - name: httpd-config
          secret:
            defaultMode: 420
            secretName: neutron-httpd-config
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:17:47Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:17:47Z"
      lastTransitionTime: "2026-02-20T15:17:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:17:47Z"
      lastTransitionTime: "2026-02-20T15:17:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:17:08Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5c6hd8h665h64dh574h8dh59ch65h54fh58fh5d6h554h554h5h544hdh65chc4h654h59bh88h97h67h686h58h5b6h96h88h64fh76h546h649q
    creationTimestamp: "2026-02-20T15:16:53Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: neutron_ff8a
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8e37b379-16dd-4aef-bb35-726678c0ab83"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:16:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:16:58Z"
    name: neutron-ff8a-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: neutron
      uid: 8e37b379-16dd-4aef-bb35-726678c0ab83
    resourceVersion: "31345"
    uid: d56f324a-64aa-409e-b73c-52dd3bfdbab5
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: d56f324a-64aa-409e-b73c-52dd3bfdbab5
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: d56f324a-64aa-409e-b73c-52dd3bfdbab5
          batch.kubernetes.io/job-name: neutron-ff8a-account-create-update
          controller-uid: d56f324a-64aa-409e-b73c-52dd3bfdbab5
          job-name: neutron-ff8a-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "neutron" ]; then
                GRANT_DATABASE="neutron"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'neutron_ff8a'@'localhost';
            CREATE USER IF NOT EXISTS 'neutron_ff8a'@'%';

            ALTER USER 'neutron_ff8a'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'neutron_ff8a'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'neutron_ff8a'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'neutron_ff8a'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "neutron_ff8a" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='neutron_ff8a' and host='localhost';" )

            if [[ ${username} != "neutron_ff8a" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: neutron-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:16:58Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:16:58Z"
      lastTransitionTime: "2026-02-20T15:16:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:16:58Z"
      lastTransitionTime: "2026-02-20T15:16:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:16:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n647h674hb5h6bh6ch58dh559hddh579h5c5h6h58h549h557h5c5h646h54fhc9h586hcdh66hb4h76hd6h677h5d4hd4hb5h5ch5c7h58bh5c5q
    creationTimestamp: "2026-02-20T15:18:40Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_api_9efe
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"3fbd1dc4-7ece-4da2-8f1b-a1cb856a8e6b"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:18:40Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:18:47Z"
    name: nova-api-9efe-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-api
      uid: 3fbd1dc4-7ece-4da2-8f1b-a1cb856a8e6b
    resourceVersion: "35352"
    uid: 65b86f6f-e494-413f-9d46-abec23db5784
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 65b86f6f-e494-413f-9d46-abec23db5784
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 65b86f6f-e494-413f-9d46-abec23db5784
          batch.kubernetes.io/job-name: nova-api-9efe-account-create-update
          controller-uid: 65b86f6f-e494-413f-9d46-abec23db5784
          job-name: nova-api-9efe-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "nova_api" ]; then
                GRANT_DATABASE="nova_api"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_api_9efe'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_api_9efe'@'%';

            ALTER USER 'nova_api_9efe'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_api_9efe'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_api_9efe'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_api_9efe'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_api_9efe" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_api_9efe' and host='localhost';" )

            if [[ ${username} != "nova_api_9efe" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-api-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:18:47Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:18:47Z"
      lastTransitionTime: "2026-02-20T15:18:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:18:47Z"
      lastTransitionTime: "2026-02-20T15:18:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:18:40Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nf7h56dh659h6fh58h57h5dbhb9h7dh64dh85h644h59ch55h68bh65fh54dh76h6dh58ch87hd9h9ch578h545h54dh9dh5cbh685h668h5fch5f7q
    creationTimestamp: "2026-02-20T15:18:40Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_api
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"eed1b741-e444-4add-8ec4-4c7e6fc51832"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:18:40Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:18:45Z"
    name: nova-api-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-api
      uid: eed1b741-e444-4add-8ec4-4c7e6fc51832
    resourceVersion: "35283"
    uid: 1dfdd9cf-93c9-46e3-89b6-2f286ca67995
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 1dfdd9cf-93c9-46e3-89b6-2f286ca67995
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 1dfdd9cf-93c9-46e3-89b6-2f286ca67995
          batch.kubernetes.io/job-name: nova-api-db-create
          controller-uid: 1dfdd9cf-93c9-46e3-89b6-2f286ca67995
          job-name: nova-api-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_api; ALTER DATABASE nova_api CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova_api'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_api.* TO 'nova_api'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_api;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:18:44Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:18:44Z"
      lastTransitionTime: "2026-02-20T15:18:44Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:18:45Z"
      lastTransitionTime: "2026-02-20T15:18:45Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:18:40Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: ncbh65h597hbch5b4h66bh5b6h579hdhfbh559h7dh54h5fbh5bbh58hbch654h569h54dhbch9ch5bh59dh59fh574h599h589h5d9h685h566hb7q
    creationTimestamp: "2026-02-20T15:18:40Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell0_b3af
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"3d530ef7-216c-4c53-8b8f-991deefc3ed8"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:18:40Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:18:46Z"
    name: nova-cell0-b3af-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-cell0
      uid: 3d530ef7-216c-4c53-8b8f-991deefc3ed8
    resourceVersion: "35328"
    uid: d989909e-345b-4572-ab94-0b9f554730ab
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: d989909e-345b-4572-ab94-0b9f554730ab
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: d989909e-345b-4572-ab94-0b9f554730ab
          batch.kubernetes.io/job-name: nova-cell0-b3af-account-create-update
          controller-uid: d989909e-345b-4572-ab94-0b9f554730ab
          job-name: nova-cell0-b3af-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "nova_cell0" ]; then
                GRANT_DATABASE="nova_cell0"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_cell0_b3af'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_cell0_b3af'@'%';

            ALTER USER 'nova_cell0_b3af'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_cell0_b3af'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell0_b3af'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell0_b3af'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_cell0_b3af" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_cell0_b3af' and host='localhost';" )

            if [[ ${username} != "nova_cell0_b3af" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-cell0-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:18:46Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:18:46Z"
      lastTransitionTime: "2026-02-20T15:18:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:18:46Z"
      lastTransitionTime: "2026-02-20T15:18:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:18:40Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n548h64dhfchfdh66ch664hd4h94h568hc6h5c8h5b4hd7h697h659h8chc5hfdhf6h78h65bh5bfh58dh5f7h58dh98h58dh5b4h656h68bh5fdhb5q
    creationTimestamp: "2026-02-20T15:19:31Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c1aede57-3aaa-481e-adee-e0653bbb1cce"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:19:31Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:19:46Z"
    name: nova-cell0-cell-mapping
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: c1aede57-3aaa-481e-adee-e0653bbb1cce
    resourceVersion: "36391"
    uid: e931cafe-3e69-4237-be7d-f8843682ee2f
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: e931cafe-3e69-4237-be7d-f8843682ee2f
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: e931cafe-3e69-4237-be7d-f8843682ee2f
          batch.kubernetes.io/job-name: nova-cell0-cell-mapping
          controller-uid: e931cafe-3e69-4237-be7d-f8843682ee2f
          job-name: nova-cell0-cell-mapping
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell0
          - name: INPUT_HASH
            value: n656h68bh5d7h5d9h579h5cbh59fhdh95h584h54dh4h67fh585h57h55dhc9h588h86h7bh55bh658h548h56h5bhb5h666h5b8h5c4hcfh5cdh4q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:eccc6fdd115baca2b86b615f4ff120577c13761fac897a9c60ddc6e239eb94fb
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: cell-mapping-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell0-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell0-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:19:46Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:19:46Z"
      lastTransitionTime: "2026-02-20T15:19:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:19:46Z"
      lastTransitionTime: "2026-02-20T15:19:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:19:31Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5fch645h689h67ch565hd7h596h584h575h67fh67h576hd9h5h589hb6h77h9fhdbhdh578h679h5d4hc5h5b5h54dh66ch549h8ch67ch569h56q
      k8s.v1.cni.cncf.io/networks: '[]'
    creationTimestamp: "2026-02-20T15:18:51Z"
    generation: 1
    labels:
      service: nova-conductor
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a5b41659-cc66-4a50-a760-29c146b4bb75"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-cell0-conductor-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:18:51Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:19:19Z"
    name: nova-cell0-conductor-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell0-conductor
      uid: a5b41659-cc66-4a50-a760-29c146b4bb75
    resourceVersion: "35699"
    uid: 21e6a249-a696-45c5-ae56-995976196f3b
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 21e6a249-a696-45c5-ae56-995976196f3b
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 21e6a249-a696-45c5-ae56-995976196f3b
          batch.kubernetes.io/job-name: nova-cell0-conductor-db-sync
          controller-uid: 21e6a249-a696-45c5-ae56-995976196f3b
          job-name: nova-cell0-conductor-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell0
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:eccc6fdd115baca2b86b615f4ff120577c13761fac897a9c60ddc6e239eb94fb
          imagePullPolicy: IfNotPresent
          name: nova-cell0-conductor-db-sync
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell0-conductor-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell0-conductor-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:19:19Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:19:19Z"
      lastTransitionTime: "2026-02-20T15:19:19Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:19:19Z"
      lastTransitionTime: "2026-02-20T15:19:19Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:18:51Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n74h5dfhbdhb5h58dh595h7dh5f9hb5hbch569h5dh54fh9ch584hcbh57dh7hbfh578h65ch6h67dh59h56dh6h665h68bh578h555h575h5ccq
    creationTimestamp: "2026-02-20T15:18:40Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell0
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a2e4e351-53b1-48b1-9a0f-8154bc4bd483"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:18:40Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:18:46Z"
    name: nova-cell0-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-cell0
      uid: a2e4e351-53b1-48b1-9a0f-8154bc4bd483
    resourceVersion: "35325"
    uid: e99f956d-dfc3-4793-a65f-2554889e36fd
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: e99f956d-dfc3-4793-a65f-2554889e36fd
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: e99f956d-dfc3-4793-a65f-2554889e36fd
          batch.kubernetes.io/job-name: nova-cell0-db-create
          controller-uid: e99f956d-dfc3-4793-a65f-2554889e36fd
          job-name: nova-cell0-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_cell0; ALTER DATABASE nova_cell0 CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova_cell0'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova_cell0'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_cell0;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:18:46Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:18:46Z"
      lastTransitionTime: "2026-02-20T15:18:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:18:46Z"
      lastTransitionTime: "2026-02-20T15:18:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:18:40Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n54dhf8h57h66bh697h9dh69h5d9hcchf6hd6h698h68bh67fh77h75h59ch66h98h66dh87h86h669h89h65bh66hfchdfh98h6bh6fh86q
    creationTimestamp: "2026-02-20T15:18:41Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell1_7035
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"66da4751-01c6-4aa4-9c45-57754a0623e9"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:18:41Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:18:46Z"
    name: nova-cell1-7035-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-cell1
      uid: 66da4751-01c6-4aa4-9c45-57754a0623e9
    resourceVersion: "35332"
    uid: ced92801-bb5b-430c-90b7-aba937bc2d61
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: ced92801-bb5b-430c-90b7-aba937bc2d61
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: ced92801-bb5b-430c-90b7-aba937bc2d61
          batch.kubernetes.io/job-name: nova-cell1-7035-account-create-update
          controller-uid: ced92801-bb5b-430c-90b7-aba937bc2d61
          job-name: nova-cell1-7035-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -P 3306"

            if [ -n "nova_cell1" ]; then
                GRANT_DATABASE="nova_cell1"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_cell1_7035'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_cell1_7035'@'%';

            ALTER USER 'nova_cell1_7035'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_cell1_7035'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell1_7035'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell1_7035'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_cell1_7035" = "root" ]; then
                MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_cell1_7035' and host='localhost';" )

            if [[ ${username} != "nova_cell1_7035" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-cell1-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:18:46Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:18:46Z"
      lastTransitionTime: "2026-02-20T15:18:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:18:46Z"
      lastTransitionTime: "2026-02-20T15:18:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:18:41Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n69h55fh99h5c6h5dbh5f5h59bh5bdhf5h64fh9fh75h688h69hb9h76h5fh54h555h66dh65ch658h647hfch6dh566h5fh688hb6hfdh5f6h74q
    creationTimestamp: "2026-02-20T15:20:18Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c1aede57-3aaa-481e-adee-e0653bbb1cce"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:20:18Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:20:26Z"
    name: nova-cell1-cell-mapping
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: c1aede57-3aaa-481e-adee-e0653bbb1cce
    resourceVersion: "37155"
    uid: 0bdd2a70-dcf6-4acf-8f8a-ba89a25cb5d4
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 0bdd2a70-dcf6-4acf-8f8a-ba89a25cb5d4
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 0bdd2a70-dcf6-4acf-8f8a-ba89a25cb5d4
          batch.kubernetes.io/job-name: nova-cell1-cell-mapping
          controller-uid: 0bdd2a70-dcf6-4acf-8f8a-ba89a25cb5d4
          job-name: nova-cell1-cell-mapping
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell1
          - name: INPUT_HASH
            value: n569h5f8h65bh7dh85hb6h5bh65bh5d4h6dhbh568h5bfh554h686h5dh5dbh57ch665h95h675h645h9fh67fhb4h5d9h5b9hfbh575h548h66dh58q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:eccc6fdd115baca2b86b615f4ff120577c13761fac897a9c60ddc6e239eb94fb
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: cell-mapping-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:20:26Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:20:26Z"
      lastTransitionTime: "2026-02-20T15:20:26Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:20:26Z"
      lastTransitionTime: "2026-02-20T15:20:26Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:20:18Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n66bh598h665hb8h5f7h568hd7h8dh5d7hfchcdh5c7h568h544hdch79h58ch556h5cdh585h68hfdh64bh574h8dhd7hc4h599h6fh55dh589h65fq
      k8s.v1.cni.cncf.io/networks: '[]'
    creationTimestamp: "2026-02-20T15:19:32Z"
    generation: 1
    labels:
      service: nova-conductor
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"94883026-cb10-432e-a7bc-95414979d7c0"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-cell1-conductor-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:19:32Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:19:47Z"
    name: nova-cell1-conductor-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell1-conductor
      uid: 94883026-cb10-432e-a7bc-95414979d7c0
    resourceVersion: "36440"
    uid: f5f17f63-e371-4232-9f5b-fa15c0539088
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: f5f17f63-e371-4232-9f5b-fa15c0539088
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: f5f17f63-e371-4232-9f5b-fa15c0539088
          batch.kubernetes.io/job-name: nova-cell1-conductor-db-sync
          controller-uid: f5f17f63-e371-4232-9f5b-fa15c0539088
          job-name: nova-cell1-conductor-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell1
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:eccc6fdd115baca2b86b615f4ff120577c13761fac897a9c60ddc6e239eb94fb
          imagePullPolicy: IfNotPresent
          name: nova-cell1-conductor-db-sync
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-conductor-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-conductor-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:19:47Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:19:47Z"
      lastTransitionTime: "2026-02-20T15:19:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:19:47Z"
      lastTransitionTime: "2026-02-20T15:19:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:19:32Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n68h584h5c8h94h65bh699h666h5dfh67dh699hf4h59bh67dhc8h5c7hdbh59h557h567h86h676h5c5h59dh6dh554hd6h59dh59bh55bhbh5cch5f6q
    creationTimestamp: "2026-02-20T15:18:40Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell1
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"d1f4b936-2932-400f-a22d-a797f5ed7e74"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:18:40Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:18:47Z"
    name: nova-cell1-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-cell1
      uid: d1f4b936-2932-400f-a22d-a797f5ed7e74
    resourceVersion: "35343"
    uid: f369acfc-37ea-408f-a51a-1309cb0470b4
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: f369acfc-37ea-408f-a51a-1309cb0470b4
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: f369acfc-37ea-408f-a51a-1309cb0470b4
          batch.kubernetes.io/job-name: nova-cell1-db-create
          controller-uid: f369acfc-37ea-408f-a51a-1309cb0470b4
          job-name: nova-cell1-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack-cell1.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_cell1; ALTER DATABASE nova_cell1 CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack-cell1.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_cell1.* TO 'nova_cell1'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_cell1.* TO 'nova_cell1'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack-cell1.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_cell1;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:0f7943e02fbdd3daec1d3db72fa9396bf37ad3fdd6b0f3119c90e29629e095ed
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:18:47Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:18:47Z"
      lastTransitionTime: "2026-02-20T15:18:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:18:47Z"
      lastTransitionTime: "2026-02-20T15:18:47Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:18:40Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nd7h5dbhb7h65hf9hc5h645h5c5h88h549h56bhd9h5b4h68bh98h5c8hfh695hcfh686hdch546h656h67bhbdhd7h56bh575h556h5f5h64fh56dq
    creationTimestamp: "2026-02-20T15:20:18Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c1aede57-3aaa-481e-adee-e0653bbb1cce"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:20:18Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:20:24Z"
    name: nova-cell1-host-discover
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: c1aede57-3aaa-481e-adee-e0653bbb1cce
    resourceVersion: "37123"
    uid: 1776af7d-0a34-4753-a5a4-dc905abfa7ff
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 1776af7d-0a34-4753-a5a4-dc905abfa7ff
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 1776af7d-0a34-4753-a5a4-dc905abfa7ff
          batch.kubernetes.io/job-name: nova-cell1-host-discover
          controller-uid: 1776af7d-0a34-4753-a5a4-dc905abfa7ff
          job-name: nova-cell1-host-discover
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: INPUT_HASH
            value: nch64bh5fbh68h5c4h598h9h66bh7ch5f9h64bhfhcch567h568h677h5bfh5c7hb5h664h69h58dh655h79hbbh544h57bh6dhd4h95h599h84q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:eccc6fdd115baca2b86b615f4ff120577c13761fac897a9c60ddc6e239eb94fb
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: host-discover-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:20:24Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:20:24Z"
      lastTransitionTime: "2026-02-20T15:20:24Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:20:24Z"
      lastTransitionTime: "2026-02-20T15:20:24Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:20:18Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n654h6bh659h5cfh98h8h9bh64bh54fh549h55h54fh79h5c5h5d6h554h5d6h596h66bh5fh58ch5fdh674h689h547h699h5b5h64h645h5b5hch54bq
    creationTimestamp: "2026-02-20T15:17:08Z"
    generation: 1
    labels:
      owner: placement
      service: placement
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"aecba70b-b37c-4431-a03d-0788165b3c20"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"placement-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/log/placement"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:17:08Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:17:30Z"
    name: placement-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: placement.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: PlacementAPI
      name: placement
      uid: aecba70b-b37c-4431-a03d-0788165b3c20
    resourceVersion: "32499"
    uid: b5895f54-bcd0-4538-aba2-d52b7ed7f969
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: b5895f54-bcd0-4538-aba2-d52b7ed7f969
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: b5895f54-bcd0-4538-aba2-d52b7ed7f969
          batch.kubernetes.io/job-name: placement-db-sync
          controller-uid: b5895f54-bcd0-4538-aba2-d52b7ed7f969
          job-name: placement-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-placement-api@sha256:657020ed78b5d92505b0b4187dfcf078515484304fd39ce38702d4fb06f4ca36
          imagePullPolicy: IfNotPresent
          name: placement-db-sync
          resources: {}
          securityContext:
            runAsUser: 42482
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/log/placement
            name: logs
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: placement-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: placement-placement
        serviceAccountName: placement-placement
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: placement-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: placement-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-02-20T15:17:30Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:17:30Z"
      lastTransitionTime: "2026-02-20T15:17:30Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:17:30Z"
      lastTransitionTime: "2026-02-20T15:17:30Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:17:08Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nbch697h5c9h5c8h669h689h57h5f4h55dh559h68bh5f4h655h8bh7bh67hchf8h5fbh9dh9ch598h8dh99hcbh569h5cbh557h76h7dh85h5dcq
    creationTimestamp: "2026-02-20T15:16:18Z"
    generation: 1
    labels:
      job-name: swift-ring-rebalance
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:job-name: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"fde96c72-8bca-483f-be1e-8cb3c0f16820"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"swift-ring-rebalance"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CM_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_APIVERSION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_KIND"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_UID"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_MIN_PART_HOURS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_PART_POWER"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_REPLICAS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/swift/dispersion.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift/swift.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/swift-ring-tool"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/ring-devices"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                  f:workingDir: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"dispersionconf"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"etc-swift"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"ring-data-devices"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"swiftconf"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
      manager: manager
      operation: Update
      time: "2026-02-20T15:16:18Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-20T15:16:32Z"
    name: swift-ring-rebalance
    namespace: openstack
    ownerReferences:
    - apiVersion: swift.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: SwiftRing
      name: swift-ring
      uid: fde96c72-8bca-483f-be1e-8cb3c0f16820
    resourceVersion: "30697"
    uid: ed24968c-48af-4c5b-8cdd-af9afe76aba0
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: ed24968c-48af-4c5b-8cdd-af9afe76aba0
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: ed24968c-48af-4c5b-8cdd-af9afe76aba0
          batch.kubernetes.io/job-name: swift-ring-rebalance
          controller-uid: ed24968c-48af-4c5b-8cdd-af9afe76aba0
          job-name: swift-ring-rebalance
      spec:
        containers:
        - command:
          - /usr/local/bin/swift-ring-tool
          - all
          env:
          - name: CM_NAME
            value: swift-ring-files
          - name: NAMESPACE
            value: openstack
          - name: OWNER_APIVERSION
            value: swift.openstack.org/v1beta1
          - name: OWNER_KIND
            value: SwiftRing
          - name: OWNER_NAME
            value: swift-ring
          - name: OWNER_UID
            value: fde96c72-8bca-483f-be1e-8cb3c0f16820
          - name: SWIFT_MIN_PART_HOURS
            value: "1"
          - name: SWIFT_PART_POWER
            value: "10"
          - name: SWIFT_REPLICAS
            value: "1"
          image: quay.io/podified-antelope-centos9/openstack-swift-proxy-server@sha256:32aab2bf162442b5c6bbb3716fbdb0ec53cb67d6b0e7f018766b29cd8cb8692d
          imagePullPolicy: IfNotPresent
          name: swift-ring-rebalance
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/swift-ring-tool
            name: scripts
            readOnly: true
            subPath: swift-ring-tool
          - mountPath: /etc/swift/swift.conf
            name: swiftconf
            readOnly: true
            subPath: swift.conf
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/lib/config-data/ring-devices
            name: ring-data-devices
            readOnly: true
          - mountPath: /etc/swift/dispersion.conf
            name: dispersionconf
            readOnly: true
            subPath: dispersion.conf
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          workingDir: /etc/swift
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext:
          seccompProfile:
            type: RuntimeDefault
        serviceAccount: swift-swift
        serviceAccountName: swift-swift
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 493
            items:
            - key: swift-ring-tool
              path: swift-ring-tool
            name: swift-ring-scripts
          name: scripts
        - name: swiftconf
          secret:
            defaultMode: 420
            items:
            - key: swift.conf
              path: swift.conf
            secretName: swift-conf
        - emptyDir: {}
          name: etc-swift
        - configMap:
            defaultMode: 420
            name: swift-ring-config-data
          name: ring-data-devices
        - name: dispersionconf
          secret:
            defaultMode: 420
            items:
            - key: dispersion.conf
              path: dispersion.conf
            optional: true
            secretName: swift-proxy-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
  status:
    completionTime: "2026-02-20T15:16:32Z"
    conditions:
    - lastProbeTime: "2026-02-20T15:16:32Z"
      lastTransitionTime: "2026-02-20T15:16:32Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-02-20T15:16:32Z"
      lastTransitionTime: "2026-02-20T15:16:32Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-02-20T15:16:18Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
kind: JobList
metadata:
  resourceVersion: "40724"