apiVersion: batch/v1
kind: CronJob
metadata:
  creationTimestamp: "2025-10-11T10:54:36Z"
  generation: 1
  name: keystone-cron
  namespace: openstack
  ownerReferences:
  - apiVersion: keystone.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: KeystoneAPI
    name: keystone
    uid: 5b468bea-99c5-4c26-baf3-f0a570a04a6f
  resourceVersion: "48920"
  uid: 5f5e71d5-ff26-4298-ab72-6dd78d2ae9ca
spec:
  concurrencyPolicy: Forbid
  failedJobsHistoryLimit: 1
  jobTemplate:
    metadata:
      annotations:
        k8s.v1.cni.cncf.io/networks: '[]'
      creationTimestamp: null
      labels:
        owner: keystone
        service: keystone
    spec:
      completions: 1
      parallelism: 1
      template:
        metadata:
          creationTimestamp: null
        spec:
          containers:
          - args:
            - -c
            - keystone-manage trust_flush
            command:
            - /bin/bash
            env:
            - name: KOLLA_CONFIG_STRATEGY
              value: COPY_ALWAYS
            image: quay.io/podified-antelope-centos9/openstack-keystone@sha256:1e5714637b6e1a24c2858fe6d9bbb3f00bc61d69ad74a657b1c23682bf4cb2b7
            imagePullPolicy: IfNotPresent
            name: keystone-cron
            resources: {}
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              runAsGroup: 42425
              runAsNonRoot: true
              runAsUser: 42425
            terminationMessagePath: /dev/termination-log
            terminationMessagePolicy: File
            volumeMounts:
            - mountPath: /etc/keystone/keystone.conf
              name: config-data
              readOnly: true
              subPath: keystone.conf
            - mountPath: /etc/my.cnf
              name: config-data
              readOnly: true
              subPath: my.cnf
            - mountPath: /etc/keystone/fernet-keys
              name: fernet-keys
              readOnly: true
            - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
              name: combined-ca-bundle
              readOnly: true
              subPath: tls-ca-bundle.pem
          dnsPolicy: ClusterFirst
          restartPolicy: Never
          schedulerName: default-scheduler
          securityContext:
            fsGroup: 42425
          serviceAccount: keystone-keystone
          serviceAccountName: keystone-keystone
          terminationGracePeriodSeconds: 30
          volumes:
          - name: scripts
            secret:
              defaultMode: 493
              secretName: keystone-scripts
          - name: config-data
            secret:
              defaultMode: 420
              secretName: keystone-config-data
          - name: fernet-keys
            secret:
              defaultMode: 420
              items:
              - key: FernetKeys0
                path: "0"
              - key: FernetKeys1
                path: "1"
              - key: FernetKeys2
                path: "2"
              - key: FernetKeys3
                path: "3"
              - key: FernetKeys4
                path: "4"
              secretName: keystone
          - name: credential-keys
            secret:
              defaultMode: 420
              items:
              - key: CredentialKeys0
                path: "0"
              - key: CredentialKeys1
                path: "1"
              secretName: keystone
          - name: combined-ca-bundle
            secret:
              defaultMode: 292
              secretName: combined-ca-bundle
  schedule: 1 * * * *
  successfulJobsHistoryLimit: 3
  suspend: false
status:
  lastScheduleTime: "2025-10-11T11:01:00Z"
  lastSuccessfulTime: "2025-10-11T11:01:05Z"