apiVersion: keystone.openstack.org/v1beta1
kind: KeystoneAPI
metadata:
  creationTimestamp: "2025-10-11T10:52:54Z"
  finalizers:
  - openstack.org/keystoneapi
  - openstack.org/keystoneservice-neutron
  - openstack.org/keystoneservice-cinderv3
  - openstack.org/keystoneendpoint-neutron
  - openstack.org/keystoneservice-placement
  - openstack.org/keystoneservice-nova
  - openstack.org/keystoneendpoint-cinderv3
  - openstack.org/keystoneendpoint-placement
  - openstack.org/keystoneservice-swift
  - openstack.org/keystoneservice-ceilometer
  - openstack.org/keystoneservice-glance
  - openstack.org/keystoneendpoint-swift
  - openstack.org/keystoneendpoint-glance-b5802-default-external
  - openstack.org/keystoneendpoint-glance-b5802-default-internal
  - openstack.org/keystoneservice-ironic
  - openstack.org/keystoneservice-heat-cfn
  - openstack.org/keystoneservice-heat
  - openstack.org/keystoneendpoint-heat-cfn
  - openstack.org/keystoneendpoint-ironic
  - openstack.org/keystoneendpoint-heat
  - openstack.org/keystoneservice-aodh
  - openstack.org/keystoneendpoint-aodh
  - openstack.org/keystoneendpoint-nova
  - openstack.org/keystoneservice-octavia
  - openstack.org/keystoneendpoint-octavia
  generation: 2
  name: keystone
  namespace: openstack
  ownerReferences:
  - apiVersion: core.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackControlPlane
    name: controlplane
    uid: b58026d9-78f6-41aa-860f-3c207e5b077b
  resourceVersion: "49915"
  uid: 5b468bea-99c5-4c26-baf3-f0a570a04a6f
spec:
  adminProject: admin
  adminUser: admin
  apiTimeout: 60
  containerImage: quay.io/podified-antelope-centos9/openstack-keystone@sha256:1e5714637b6e1a24c2858fe6d9bbb3f00bc61d69ad74a657b1c23682bf4cb2b7
  databaseAccount: keystone
  databaseInstance: openstack
  enableSecureRBAC: true
  extraMounts: []
  federatedRealmConfig: ""
  fernetMaxActiveKeys: 5
  fernetRotationDays: 1
  httpdCustomization:
    processNumber: 3
  memcachedInstance: memcached
  override:
    service:
      internal:
        metadata:
          annotations:
            metallb.universe.tf/address-pool: internalapi
            metallb.universe.tf/allow-shared-ip: internalapi
            metallb.universe.tf/loadBalancerIPs: 172.17.0.80
          labels:
            osctlplane: ""
            osctlplane-service: keystone
        spec:
          type: LoadBalancer
      public:
        endpointURL: https://keystone-public-openstack.apps.ocp.openstack.lab
        metadata:
          labels:
            osctlplane: ""
            osctlplane-service: keystone
  passwordSelectors:
    admin: AdminPassword
  preserveJobs: false
  rabbitMqClusterName: rabbitmq
  region: regionOne
  replicas: 3
  resources: {}
  secret: osp-secret
  tls:
    api:
      internal:
        secretName: cert-keystone-internal-svc
      public:
        secretName: cert-keystone-public-svc
    caBundleSecretName: combined-ca-bundle
  trustFlushArgs: ""
  trustFlushSchedule: 1 * * * *
  trustFlushSuspend: false
status:
  apiEndpoints:
    internal: https://keystone-internal.openstack.svc:5000
    public: https://keystone-public-openstack.apps.ocp.openstack.lab
  conditions:
  - lastTransitionTime: "2025-10-11T10:55:09Z"
    message: Setup complete
    reason: Ready
    status: "True"
    type: Ready
  - lastTransitionTime: "2025-10-11T10:54:36Z"
    message: Bootstrap completed
    reason: Ready
    status: "True"
    type: BootstrapReady
  - lastTransitionTime: "2025-10-11T10:54:25Z"
    message: Create service completed
    reason: Ready
    status: "True"
    type: CreateServiceReady
  - lastTransitionTime: "2025-10-11T10:54:36Z"
    message: CronJob completed
    reason: Ready
    status: "True"
    type: CronJobReady
  - lastTransitionTime: "2025-10-11T10:54:00Z"
    message: DB create completed
    reason: Ready
    status: "True"
    type: DBReady
  - lastTransitionTime: "2025-10-11T10:54:25Z"
    message: DBsync completed
    reason: Ready
    status: "True"
    type: DBSyncReady
  - lastTransitionTime: "2025-10-11T10:55:09Z"
    message: Deployment completed
    reason: Ready
    status: "True"
    type: DeploymentReady
  - lastTransitionTime: "2025-10-11T10:52:54Z"
    message: Input data complete
    reason: Ready
    status: "True"
    type: InputReady
  - lastTransitionTime: "2025-10-11T10:52:54Z"
    message: MariaDBAccount creation complete
    reason: Ready
    status: "True"
    type: MariaDBAccountReady
  - lastTransitionTime: "2025-10-11T10:54:08Z"
    message: ' Memcached instance has been provisioned'
    reason: Ready
    status: "True"
    type: MemcachedReady
  - lastTransitionTime: "2025-10-11T10:54:36Z"
    message: NetworkAttachments completed
    reason: Ready
    status: "True"
    type: NetworkAttachmentsReady
  - lastTransitionTime: "2025-10-11T10:54:08Z"
    message: RabbitMqTransportURL successfully created
    reason: Ready
    status: "True"
    type: RabbitMqTransportURLReady
  - lastTransitionTime: "2025-10-11T10:54:25Z"
    message: RoleBinding created
    reason: Ready
    status: "True"
    type: RoleBindingReady
  - lastTransitionTime: "2025-10-11T10:54:25Z"
    message: Role created
    reason: Ready
    status: "True"
    type: RoleReady
  - lastTransitionTime: "2025-10-11T10:54:25Z"
    message: ServiceAccount created
    reason: Ready
    status: "True"
    type: ServiceAccountReady
  - lastTransitionTime: "2025-10-11T10:54:25Z"
    message: Service config create completed
    reason: Ready
    status: "True"
    type: ServiceConfigReady
  - lastTransitionTime: "2025-10-11T10:54:08Z"
    message: Input data complete
    reason: Ready
    status: "True"
    type: TLSInputReady
  databaseHostname: openstack.openstack.svc
  hash:
    bootstrap: nbh5d5h5d9h687h68fh67fhf7h5b9h5bbh57bh5b5h589h5f4h597h654hb4h556h557h699h5fch97h5b6h7bh85h569h689h677h556h597h58hc7h574q
    dbsync: n678h5dhb5h55dh5bh554h554h589hb5h584hdfh5fdh5cfh65dh8ch59bh54dh64bh649h7h5c7hbhfdh54chd9h549h5fh55bh69h65fh9ch558q
    input: n9dh85hb4hbfh96h64fh8hdbh56fh7fh586h75h64h6fh687h6chdbhbdh5fbh59h79h677h5c7h5c5h5f5h695h55fh5c9h99h65fh57dh54cq
  observedGeneration: 2
  readyCount: 3
  region: regionOne
  transportURLSecret: rabbitmq-transport-url-keystone-keystone-transport