apiVersion: apps/v1
kind: DaemonSet
metadata:
  annotations:
    deprecated.daemonset.template.generation: "1"
  creationTimestamp: "2025-10-11T10:53:02Z"
  generation: 1
  name: ovn-controller-metrics
  namespace: openstack
  ownerReferences:
  - apiVersion: ovn.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OVNController
    name: ovncontroller
    uid: 03efddb7-9133-4e85-abfb-a97dae0db64c
  resourceVersion: "35938"
  uid: 4353783c-763d-426c-b132-6bba1aad2edc
spec:
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      metrics: enabled
      service: ovn-controller-metrics
  template:
    metadata:
      creationTimestamp: null
      labels:
        metrics: enabled
        service: ovn-controller-metrics
    spec:
      containers:
      - command:
        - /app/openstack-network-exporter
        env:
        - name: OPENSTACK_NETWORK_EXPORTER_YAML
          value: /etc/config/openstack-network-exporter.yaml
        image: quay.io/openstack-k8s-operators/openstack-network-exporter@sha256:ecd56e6733c475f2d441344fd98f288c3eac0261ba113695fec7520a954ccbc7
        imagePullPolicy: IfNotPresent
        name: openstack-network-exporter
        resources: {}
        securityContext:
          capabilities:
            add:
            - NET_ADMIN
            - SYS_ADMIN
            - SYS_NICE
          privileged: true
          runAsUser: 0
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: FallbackToLogsOnError
        volumeMounts:
        - mountPath: /var/run/openvswitch
          name: ovs-rundir
          readOnly: true
        - mountPath: /var/run/ovn
          name: ovn-rundir
          readOnly: true
        - mountPath: /etc/config
          name: config
          readOnly: true
        - mountPath: /etc/pki/tls/certs/ovnmetrics.crt
          name: metrics-certs-tls-certs
          readOnly: true
          subPath: tls.crt
        - mountPath: /etc/pki/tls/private/ovnmetrics.key
          name: metrics-certs-tls-certs
          readOnly: true
          subPath: tls.key
        - mountPath: /etc/pki/tls/certs/ovndbca.crt
          name: metrics-certs-tls-certs
          readOnly: true
          subPath: ca.crt
        - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
          name: combined-ca-bundle
          readOnly: true
          subPath: tls-ca-bundle.pem
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: ovncontroller-ovncontroller
      serviceAccountName: ovncontroller-ovncontroller
      terminationGracePeriodSeconds: 30
      volumes:
      - hostPath:
          path: /var/home/core/openstack/var/run/openvswitch
          type: DirectoryOrCreate
        name: ovs-rundir
      - hostPath:
          path: /var/home/core/openstack/var/run/ovn
          type: DirectoryOrCreate
        name: ovn-rundir
      - configMap:
          defaultMode: 420
          name: ovncontroller-metrics-config
        name: config
      - name: metrics-certs-tls-certs
        secret:
          defaultMode: 256
          secretName: cert-ovn-metrics
      - name: combined-ca-bundle
        secret:
          defaultMode: 292
          secretName: combined-ca-bundle
  updateStrategy:
    rollingUpdate:
      maxSurge: 0
      maxUnavailable: 1
    type: RollingUpdate
status:
  currentNumberScheduled: 3
  desiredNumberScheduled: 3
  numberAvailable: 3
  numberMisscheduled: 0
  numberReady: 3
  observedGeneration: 1
  updatedNumberScheduled: 3