---
apiVersion: apps/v1
items:
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "17"
    creationTimestamp: "2026-03-13T01:43:38Z"
    generation: 17
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"21edb3df-165c-42c1-816b-d22385e16098"}: {}
        f:spec:
          f:progressDeadlineSeconds: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:strategy:
            f:rollingUpdate:
              .: {}
              f:maxSurge: {}
              f:maxUnavailable: {}
            f:type: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"dnsmasq-dns"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"POD_IP"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:runAsNonRoot: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/dnsmasq.d/config.cfg"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/dnsmasq.d/hosts/dns-svc"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/dnsmasq.d/hosts/dns-swift-storage-0"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/dnsmasq.d/hosts/ovsdbserver-nb"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/dnsmasq.d/hosts/ovsdbserver-sb"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"POD_IP"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:runAsNonRoot: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/dnsmasq.d/config.cfg"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/dnsmasq.d/hosts/dns-svc"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/dnsmasq.d/hosts/dns-swift-storage-0"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/dnsmasq.d/hosts/ovsdbserver-nb"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/dnsmasq.d/hosts/ovsdbserver-sb"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"dns-svc"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"dns-swift-storage-0"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"ovsdbserver-nb"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"ovsdbserver-sb"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
      manager: manager
      operation: Update
      time: "2026-03-13T01:48:10Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/revision: {}
        f:status:
          f:availableReplicas: {}
          f:conditions:
            .: {}
            k:{"type":"Available"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"Progressing"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T01:48:21Z"
    name: dnsmasq-dns
    namespace: openstack
    ownerReferences:
    - apiVersion: network.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: DNSMasq
      name: dns
      uid: 21edb3df-165c-42c1-816b-d22385e16098
    resourceVersion: "35261"
    uid: af6f1b75-b2c7-42fa-9ca9-b28da0cfc913
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: dnsmasq
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        creationTimestamp: null
        labels:
          service: dnsmasq
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - dnsmasq
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - dnsmasq --interface=* --conf-dir=/etc/dnsmasq.d --hostsdir=/etc/dnsmasq.d/hosts
            --keep-in-foreground --log-debug --bind-interfaces --listen-address=$(POD_IP)
            --port 5353 --log-facility=- --no-hosts --domain-needed --no-resolv --bogus-priv
            --log-queries
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n74h59ch698hd6h54dhfdhb8h556h78h659h58fh5c7hffh7dh9bh77h574hbh68fh5b6h5d9h675h66dh5b4h646h58bh86h586hc9h568h58h587q
          - name: POD_IP
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: status.podIP
          image: quay.io/podified-antelope-centos9/openstack-neutron-server@sha256:fbb5be29e9e4fa11f0743e7f74f2e80dcc7445d24770709ea0e038147f752c51
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            tcpSocket:
              port: 5353
            timeoutSeconds: 5
          name: dnsmasq-dns
          readinessProbe:
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            tcpSocket:
              port: 5353
            timeoutSeconds: 5
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            runAsNonRoot: true
            seccompProfile:
              type: RuntimeDefault
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/dnsmasq.d/config.cfg
            name: config
            readOnly: true
            subPath: dns
          - mountPath: /etc/dnsmasq.d/hosts/dns-svc
            name: dns-svc
            readOnly: true
            subPath: dns-svc
          - mountPath: /etc/dnsmasq.d/hosts/dns-swift-storage-0
            name: dns-swift-storage-0
            readOnly: true
            subPath: dns-swift-storage-0
          - mountPath: /etc/dnsmasq.d/hosts/ovsdbserver-nb
            name: ovsdbserver-nb
            readOnly: true
            subPath: ovsdbserver-nb
          - mountPath: /etc/dnsmasq.d/hosts/ovsdbserver-sb
            name: ovsdbserver-sb
            readOnly: true
            subPath: ovsdbserver-sb
        dnsPolicy: ClusterFirst
        initContainers:
        - args:
          - -c
          - dnsmasq --interface=* --conf-dir=/etc/dnsmasq.d --hostsdir=/etc/dnsmasq.d/hosts
            --keep-in-foreground --log-debug --bind-interfaces --listen-address=$(POD_IP)
            --port 5353 --log-facility=- --no-hosts --domain-needed --no-resolv --bogus-priv
            --log-queries --test
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n74h59ch698hd6h54dhfdhb8h556h78h659h58fh5c7hffh7dh9bh77h574hbh68fh5b6h5d9h675h66dh5b4h646h58bh86h586hc9h568h58h587q
          - name: POD_IP
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: status.podIP
          image: quay.io/podified-antelope-centos9/openstack-neutron-server@sha256:fbb5be29e9e4fa11f0743e7f74f2e80dcc7445d24770709ea0e038147f752c51
          imagePullPolicy: IfNotPresent
          name: init
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            runAsNonRoot: true
            seccompProfile:
              type: RuntimeDefault
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/dnsmasq.d/config.cfg
            name: config
            readOnly: true
            subPath: dns
          - mountPath: /etc/dnsmasq.d/hosts/dns-svc
            name: dns-svc
            readOnly: true
            subPath: dns-svc
          - mountPath: /etc/dnsmasq.d/hosts/dns-swift-storage-0
            name: dns-swift-storage-0
            readOnly: true
            subPath: dns-swift-storage-0
          - mountPath: /etc/dnsmasq.d/hosts/ovsdbserver-nb
            name: ovsdbserver-nb
            readOnly: true
            subPath: ovsdbserver-nb
          - mountPath: /etc/dnsmasq.d/hosts/ovsdbserver-sb
            name: ovsdbserver-sb
            readOnly: true
            subPath: ovsdbserver-sb
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: dnsmasq-dns
        serviceAccountName: dnsmasq-dns
        terminationGracePeriodSeconds: 10
        volumes:
        - configMap:
            defaultMode: 420
            name: dns
          name: config
        - configMap:
            defaultMode: 420
            name: dns-svc
          name: dns-svc
        - configMap:
            defaultMode: 420
            name: dns-swift-storage-0
          name: dns-swift-storage-0
        - configMap:
            defaultMode: 420
            name: ovsdbserver-nb
          name: ovsdbserver-nb
        - configMap:
            defaultMode: 420
            name: ovsdbserver-sb
          name: ovsdbserver-sb
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2026-03-13T01:44:06Z"
      lastUpdateTime: "2026-03-13T01:44:06Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2026-03-13T01:43:38Z"
      lastUpdateTime: "2026-03-13T01:48:21Z"
      message: ReplicaSet "dnsmasq-dns-94597dfc" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 17
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "2"
    creationTimestamp: "2026-03-13T01:45:57Z"
    generation: 2
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"d5442861-81ea-404f-a7b3-3c4b0c0fd570"}: {}
        f:spec:
          f:progressDeadlineSeconds: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:strategy:
            f:rollingUpdate:
              .: {}
              f:maxSurge: {}
              f:maxUnavailable: {}
            f:type: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"ironic-api"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/log/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"ironic-api-log"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/log/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabaseHost"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DatabaseName"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DeployHTTPURL"}:
                      .: {}
                      f:name: {}
                    k:{"name":"IngressDomain"}:
                      .: {}
                      f:name: {}
                    k:{"name":"IronicPassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"PodName"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PodNamespace"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"ProvisionNetwork"}:
                      .: {}
                      f:name: {}
                    k:{"name":"QuorumQueues"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"TransportURL"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-merged"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
      manager: manager
      operation: Update
      time: "2026-03-13T01:46:01Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/revision: {}
        f:status:
          f:availableReplicas: {}
          f:conditions:
            .: {}
            k:{"type":"Available"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"Progressing"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T01:46:11Z"
    name: ironic
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: IronicAPI
      name: ironic-api
      uid: d5442861-81ea-404f-a7b3-3c4b0c0fd570
    resourceVersion: "32325"
    uid: 5491a5e8-61de-48bb-8e76-03f268a5d6c7
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: api
        service: ironic
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          component: api
          service: ironic
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - ironic
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - --single-child
          - --
          - /usr/bin/tail
          - -n+1
          - -F
          - /var/log/ironic/ironic-api.log
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n586h566h665h679h65h55bh698h664hd6hcfh55fh5b8h57dhc7h5dch54ch5c7h56h84h65bh5d8h5b4h89h5cfh56bh5f4hffh5bh9hf4h545h66q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-api@sha256:ce607a55786d436f9ce7ef94f3d17fa07b0f19364c3ec81b45dd7c499aaea800
          imagePullPolicy: IfNotPresent
          name: ironic-api-log
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/log/ironic
            name: logs
        - args:
          - -c
          - /usr/local/bin/container-scripts/api-prep.sh && /usr/local/bin/kolla_set_configs
            && usermod -a -G tty ironic && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n586h566h665h679h65h55bh698h664hd6hcfh55fh5b8h57dhc7h5dch54ch5c7h56h84h65bh5d8h5b4h89h5cfh56bh5f4hffh5bh9hf4h545h66q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-api@sha256:ce607a55786d436f9ce7ef94f3d17fa07b0f19364c3ec81b45dd7c499aaea800
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /v1
              port: 6385
              scheme: HTTPS
            initialDelaySeconds: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          name: ironic-api
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /v1
              port: 6385
              scheme: HTTPS
            initialDelaySeconds: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: ironic-api-config.json
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/log/ironic
            name: logs
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        initContainers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/init.sh
          command:
          - /bin/bash
          env:
          - name: IronicPassword
            valueFrom:
              secretKeyRef:
                key: IronicPassword
                name: osp-secret
          - name: PodName
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: PodNamespace
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: ProvisionNetwork
          - name: TransportURL
            valueFrom:
              secretKeyRef:
                key: transport_url
                name: rabbitmq-transport-url-ironic-transport
          - name: QuorumQueues
            valueFrom:
              secretKeyRef:
                key: quorumqueues
                name: rabbitmq-transport-url-ironic-transport
                optional: true
          - name: DatabaseHost
            value: openstack.openstack.svc
          - name: DatabaseName
            value: ironic
          - name: DeployHTTPURL
          - name: IngressDomain
          image: quay.io/podified-antelope-centos9/openstack-ironic-api@sha256:ce607a55786d436f9ce7ef94f3d17fa07b0f19364c3ec81b45dd7c499aaea800
          imagePullPolicy: IfNotPresent
          name: init
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 60
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-api-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: ironic-api-config-data
        - emptyDir: {}
          name: config-data-merged
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: config-data-custom
          secret:
            defaultMode: 416
            secretName: ironic-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ironic-internal-svc
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ironic-public-svc
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2026-03-13T01:46:11Z"
      lastUpdateTime: "2026-03-13T01:46:11Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2026-03-13T01:45:57Z"
      lastUpdateTime: "2026-03-13T01:46:11Z"
      message: ReplicaSet "ironic-556665446f" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2026-03-13T01:45:57Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"3b38098c-ce86-4dfa-90d2-98a06a48a098"}: {}
        f:spec:
          f:progressDeadlineSeconds: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:strategy:
            f:rollingUpdate:
              .: {}
              f:maxSurge: {}
              f:maxUnavailable: {}
            f:type: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"ironic-neutron-agent"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
      manager: manager
      operation: Update
      time: "2026-03-13T01:45:57Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/revision: {}
        f:status:
          f:availableReplicas: {}
          f:conditions:
            .: {}
            k:{"type":"Available"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"Progressing"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T01:46:38Z"
    name: ironic-neutron-agent
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: IronicNeutronAgent
      name: ironic-ironic-neutron-agent
      uid: 3b38098c-ce86-4dfa-90d2-98a06a48a098
    resourceVersion: "33211"
    uid: 5077ac95-ecb8-4b8e-a2a3-f0eb726ada24
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: ironic-neutron-agent
        service: ironic-neutron-agent
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        creationTimestamp: null
        labels:
          component: ironic-neutron-agent
          service: ironic-neutron-agent
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - ironic-neutron-agent
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n56fh668h5f4h6fh547hc5h7dh56fh94h684h65ch5fhb5h698h4h5cch7dh8chcdh587h6bhc5h65bh64bhfbh5c5h585h645h656h64fh578h5d5q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-neutron-agent@sha256:d966b6024aabc0d204669b2b99cd0a9a39114334c8b426830c8c178dec6746ec
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /bin/true
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          name: ironic-neutron-agent
          readinessProbe:
            exec:
              command:
              - /bin/true
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: ironic-neutron-agent-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 60
        volumes:
        - name: config
          secret:
            defaultMode: 416
            secretName: ironic-ironic-neutron-agent-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2026-03-13T01:45:57Z"
      lastUpdateTime: "2026-03-13T01:46:06Z"
      message: ReplicaSet "ironic-neutron-agent-84f79fc9fc" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    - lastTransitionTime: "2026-03-13T01:46:38Z"
      lastUpdateTime: "2026-03-13T01:46:38Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2026-03-13T01:45:35Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"cc4ef09a-0e23-4a4b-abd4-d9db04b40a95"}: {}
        f:spec:
          f:progressDeadlineSeconds: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:strategy:
            f:rollingUpdate:
              .: {}
              f:maxSurge: {}
              f:maxUnavailable: {}
            f:type: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:owner: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"keystone-api"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/keystone/credential-keys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/keystone/fernet-keys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"credential-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"fernet-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
      manager: manager
      operation: Update
      time: "2026-03-13T01:45:35Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/revision: {}
        f:status:
          f:availableReplicas: {}
          f:conditions:
            .: {}
            k:{"type":"Available"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"Progressing"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T01:46:09Z"
    name: keystone
    namespace: openstack
    ownerReferences:
    - apiVersion: keystone.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: KeystoneAPI
      name: keystone
      uid: cc4ef09a-0e23-4a4b-abd4-d9db04b40a95
    resourceVersion: "32273"
    uid: 1e500b99-04cc-4855-90ac-bedc0d173b29
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        owner: keystone
        service: keystone
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          owner: keystone
          service: keystone
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - keystone
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n694h66ch55h56h56ch7fh645h86h659h644h5b4hffh596h68fh59bh5bfh686h547h56dh89h56fhcch65fh75h5bch684hbh65ch5d9hb9hd7hb9q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-keystone@sha256:3a148c87899d4cbbb6bbe1203ad6c237fb295b5f42abda425dc0329305723414
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /v3
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: keystone-api
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /v3
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42425
            runAsUser: 42425
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: keystone-api-config.json
          - mountPath: /etc/keystone/fernet-keys
            name: fernet-keys
            readOnly: true
          - mountPath: /etc/keystone/credential-keys
            name: credential-keys
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: keystone-keystone
        serviceAccountName: keystone-keystone
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: keystone-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: keystone-config-data
        - name: fernet-keys
          secret:
            defaultMode: 420
            items:
            - key: FernetKeys0
              path: "0"
            - key: FernetKeys1
              path: "1"
            - key: FernetKeys2
              path: "2"
            - key: FernetKeys3
              path: "3"
            - key: FernetKeys4
              path: "4"
            secretName: keystone
        - name: credential-keys
          secret:
            defaultMode: 420
            items:
            - key: CredentialKeys0
              path: "0"
            - key: CredentialKeys1
              path: "1"
            secretName: keystone
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-keystone-internal-svc
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-keystone-public-svc
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2026-03-13T01:46:09Z"
      lastUpdateTime: "2026-03-13T01:46:09Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2026-03-13T01:45:35Z"
      lastUpdateTime: "2026-03-13T01:46:09Z"
      message: ReplicaSet "keystone-5bb5b98c8c" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "2"
    creationTimestamp: "2026-03-13T01:45:44Z"
    generation: 2
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"e0a4fd98-bfa1-4f60-a84a-b3629cd355ee"}: {}
        f:spec:
          f:progressDeadlineSeconds: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:strategy:
            f:rollingUpdate:
              .: {}
              f:maxSurge: {}
              f:maxUnavailable: {}
            f:type: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"neutron-api"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/ovndb.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/ovndb.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"neutron-httpd"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"httpd-config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"ovndb-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
      manager: manager
      operation: Update
      time: "2026-03-13T01:45:51Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/revision: {}
        f:status:
          f:availableReplicas: {}
          f:conditions:
            .: {}
            k:{"type":"Available"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"Progressing"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T01:46:22Z"
    name: neutron
    namespace: openstack
    ownerReferences:
    - apiVersion: neutron.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NeutronAPI
      name: neutron
      uid: e0a4fd98-bfa1-4f60-a84a-b3629cd355ee
    resourceVersion: "32576"
    uid: af8554fc-5d9f-48ca-a8a4-7e340ce9cc02
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: neutron
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"internalapi","namespace":"openstack","interface":"internalapi"}]'
        creationTimestamp: null
        labels:
          service: neutron
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - neutron
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n5cfh657h649h655h88h595h66ch79h545h668hbdh5bch7fh547hb4hd8h5bh675h594h9bhc7h57fh5bdh64bh6dh58dh597h579h587hf6h79h5ccq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-neutron-server@sha256:fbb5be29e9e4fa11f0743e7f74f2e80dcc7445d24770709ea0e038147f752c51
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 9696
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: neutron-api
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42435
            runAsNonRoot: true
            runAsUser: 42435
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: neutron-api-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/ovndb.crt
            name: ovndb-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/ovndb.key
            name: ovndb-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/ovndbca.crt
            name: ovndb-tls-certs
            readOnly: true
            subPath: ca.crt
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n5cfh657h649h655h88h595h66ch79h545h668hbdh5bch7fh547hb4hd8h5bh675h594h9bhc7h57fh5bdh64bh6dh58dh597h579h587hf6h79h5ccq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-neutron-server@sha256:fbb5be29e9e4fa11f0743e7f74f2e80dcc7445d24770709ea0e038147f752c51
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 9696
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: neutron-httpd
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 9696
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42435
            runAsNonRoot: true
            runAsUser: 42435
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/lib/config-data/default
            name: httpd-config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: neutron-httpd-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /etc/pki/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 42435
        serviceAccount: neutron-neutron
        serviceAccountName: neutron-neutron
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config
          secret:
            defaultMode: 420
            secretName: neutron-config
        - name: httpd-config
          secret:
            defaultMode: 420
            secretName: neutron-httpd-config
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-neutron-internal-svc
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-neutron-public-svc
        - name: ovndb-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-neutron-ovndbs
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2026-03-13T01:46:15Z"
      lastUpdateTime: "2026-03-13T01:46:15Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2026-03-13T01:45:44Z"
      lastUpdateTime: "2026-03-13T01:46:22Z"
      message: ReplicaSet "neutron-59fb7b67df" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "2"
    creationTimestamp: "2026-03-13T01:45:22Z"
    generation: 2
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"72ad1398-b302-411e-bad6-ed400dd51933"}: {}
        f:spec:
          f:progressDeadlineSeconds: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:strategy:
            f:rollingUpdate:
              .: {}
              f:maxSurge: {}
              f:maxUnavailable: {}
            f:type: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:owner: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"placement-api"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/log/placement"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"placement-log"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/log/placement"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
      manager: manager
      operation: Update
      time: "2026-03-13T01:45:54Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/revision: {}
        f:status:
          f:availableReplicas: {}
          f:conditions:
            .: {}
            k:{"type":"Available"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"Progressing"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T01:46:26Z"
    name: placement
    namespace: openstack
    ownerReferences:
    - apiVersion: placement.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: PlacementAPI
      name: placement
      uid: 72ad1398-b302-411e-bad6-ed400dd51933
    resourceVersion: "32673"
    uid: 87dace94-0ce0-4fc1-8729-4926a78128bf
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        owner: placement
        service: placement
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          owner: placement
          service: placement
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - placement
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - --single-child
          - --
          - /usr/bin/tail
          - -n+1
          - -F
          - /var/log/placement/placement-api.log
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: nc9h65ch684hfdh8dh5f7h66bh545h66ch67ch66fh5f9h56fh677h5cfh96hd7h656h64chfh569h56fh55bh55bh5b7h644h554hf7h64h648h84h5ddq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-placement-api@sha256:b8a5d052890fb9cefa333baf10b607add227ed5d79aa108b576a97b21e89327a
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8778
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: placement-log
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8778
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            runAsUser: 42482
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/log/placement
            name: logs
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: placement-api-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: nc9h65ch684hfdh8dh5f7h66bh545h66ch67ch66fh5f9h56fh677h5cfh96hd7h656h64chfh569h56fh55bh55bh5b7h644h554hf7h64h648h84h5ddq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-placement-api@sha256:b8a5d052890fb9cefa333baf10b607add227ed5d79aa108b576a97b21e89327a
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8778
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: placement-api
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8778
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            runAsUser: 42482
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/log/placement
            name: logs
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: placement-api-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: placement-placement
        serviceAccountName: placement-placement
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: placement-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: placement-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-placement-internal-svc
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-placement-public-svc
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2026-03-13T01:45:53Z"
      lastUpdateTime: "2026-03-13T01:45:53Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2026-03-13T01:45:22Z"
      lastUpdateTime: "2026-03-13T01:46:26Z"
      message: ReplicaSet "placement-6d877f97b" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2026-03-13T01:46:17Z"
    generation: 1
    labels:
      component: swift-proxy
      service: swift
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"4ff1afd3-7dc0-4e5b-9949-20beb3ebbf4a"}: {}
        f:spec:
          f:progressDeadlineSeconds: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:strategy:
            f:rollingUpdate:
              .: {}
              f:maxSurge: {}
              f:maxUnavailable: {}
            f:type: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"proxy-httpd"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8080,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/httpd/conf.d/ssl.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/httpd/conf/httpd.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/run/httpd"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/log/httpd"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"proxy-server"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8081,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
                f:runAsNonRoot: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-swift"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"log-httpd"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"run-httpd"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
      manager: manager
      operation: Update
      time: "2026-03-13T01:46:17Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/revision: {}
        f:status:
          f:availableReplicas: {}
          f:conditions:
            .: {}
            k:{"type":"Available"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"Progressing"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T01:46:28Z"
    name: swift-proxy
    namespace: openstack
    ownerReferences:
    - apiVersion: swift.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: SwiftProxy
      name: swift-proxy
      uid: 4ff1afd3-7dc0-4e5b-9949-20beb3ebbf4a
    resourceVersion: "32717"
    uid: 58e942e1-c19b-432f-8654-604129dd228c
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: swift-proxy
        service: swift
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          component: swift-proxy
          service: swift
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: component
                    operator: In
                    values:
                    - swift-proxy
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -DFOREGROUND
          command:
          - /usr/sbin/httpd
          env:
          - name: CONFIG_HASH
            value: n88h557h548h695h54h547h564hc4h66dh98h5cbh5dh578h7h6ch67dhfbh698h55bh5fch694hd4h55fh57ch5fh548h556h8bhb9hcdhffh556q
          image: quay.io/podified-antelope-centos9/openstack-swift-proxy-server@sha256:6c3eb966650a7a98feb4ddb31e1bdba1095b0c62e349196aca6a423681d7e5fb
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 8080
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: proxy-httpd
          ports:
          - containerPort: 8080
            name: proxy-httpd
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 8080
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /etc/httpd/conf/httpd.conf
            name: config-data
            readOnly: true
            subPath: httpd.conf
          - mountPath: /etc/httpd/conf.d/ssl.conf
            name: config-data
            readOnly: true
            subPath: ssl.conf
          - mountPath: /run/httpd
            name: run-httpd
          - mountPath: /var/log/httpd
            name: log-httpd
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /etc/pki/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        - command:
          - /usr/bin/swift-proxy-server
          - /etc/swift/proxy-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n88h557h548h695h54h547h564hc4h66dh98h5cbh5dh578h7h6ch67dhfbh698h55bh5fch694hd4h55fh57ch5fh548h556h8bhb9hcdhffh556q
          image: quay.io/podified-antelope-centos9/openstack-swift-proxy-server@sha256:6c3eb966650a7a98feb4ddb31e1bdba1095b0c62e349196aca6a423681d7e5fb
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 8080
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: proxy-server
          ports:
          - containerPort: 8081
            name: proxy-server
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 8080
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 42445
          runAsNonRoot: true
          seccompProfile:
            type: RuntimeDefault
        serviceAccount: swift-swift
        serviceAccountName: swift-swift
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 420
            secretName: swift-proxy-config-data
        - name: etc-swift
          projected:
            defaultMode: 420
            sources:
            - secret:
                items:
                - key: 00-proxy-server.conf
                  path: proxy-server.conf.d/00-proxy-server.conf
                - key: 01-proxy-server.conf
                  path: proxy-server.conf.d/01-proxy-server.conf
                - key: dispersion.conf
                  path: dispersion.conf
                - key: keymaster.conf
                  path: keymaster.conf
                name: swift-proxy-config-data
            - secret:
                name: swift-conf
            - configMap:
                name: swift-ring-files
        - emptyDir: {}
          name: run-httpd
        - emptyDir: {}
          name: log-httpd
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-swift-internal-svc
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-swift-public-svc
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2026-03-13T01:46:28Z"
      lastUpdateTime: "2026-03-13T01:46:28Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2026-03-13T01:46:17Z"
      lastUpdateTime: "2026-03-13T01:46:28Z"
      message: ReplicaSet "swift-proxy-79fb9b7bb8" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
kind: DeploymentList
metadata:
  resourceVersion: "39052"