apiVersion: apps/v1
kind: ReplicaSet
metadata:
  annotations:
    deployment.kubernetes.io/desired-replicas: "1"
    deployment.kubernetes.io/max-replicas: "2"
    deployment.kubernetes.io/revision: "3"
  creationTimestamp: "2025-10-11T10:55:27Z"
  generation: 2
  labels:
    component: cfnapi
    pod-template-hash: 64fcdf7d54
    service: heat
  name: heat-cfnapi-64fcdf7d54
  namespace: openstack
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: Deployment
    name: heat-cfnapi
    uid: 506a3025-2f11-4071-ac30-dfab1e73cd3e
  resourceVersion: "43359"
  uid: d058c7e8-2992-4d89-92cd-a900be3b21ff
spec:
  replicas: 1
  selector:
    matchLabels:
      component: cfnapi
      pod-template-hash: 64fcdf7d54
      service: heat
  template:
    metadata:
      creationTimestamp: null
      labels:
        component: cfnapi
        pod-template-hash: 64fcdf7d54
        service: heat
    spec:
      affinity:
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
          - podAffinityTerm:
              labelSelector:
                matchExpressions:
                - key: service
                  operator: In
                  values:
                  - heat
              topologyKey: kubernetes.io/hostname
            weight: 100
      containers:
      - args:
        - -c
        - /usr/local/bin/kolla_httpd_setup && /usr/local/bin/kolla_start
        command:
        - /bin/bash
        env:
        - name: CONFIG_HASH
          value: n64bhcch646h8bh678h55ch666h57bh549h54ch696h54dh687h5fdh5d9h5f9h58dh54fh668h5b9h64fhf6h96h685h55h565hb7h645hd7h688h565h4q
        - name: KOLLA_CONFIG_STRATEGY
          value: COPY_ALWAYS
        image: quay.io/podified-antelope-centos9/openstack-heat-api-cfn@sha256:58a4e9a4dea86635c93ce37a2bb3c60ece62b3d656f6ee6a8845347cbb3e90fd
        imagePullPolicy: IfNotPresent
        livenessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthcheck
            port: 8000
            scheme: HTTPS
          initialDelaySeconds: 5
          periodSeconds: 5
          successThreshold: 1
          timeoutSeconds: 10
        name: heat-cfnapi
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthcheck
            port: 8000
            scheme: HTTPS
          initialDelaySeconds: 5
          periodSeconds: 5
          successThreshold: 1
          timeoutSeconds: 10
        resources: {}
        securityContext:
          runAsGroup: 42418
          runAsUser: 42418
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /var/lib/kolla/config_files/config.json
          name: config-data
          readOnly: true
          subPath: heat-cfnapi-config.json
        - mountPath: /etc/heat/heat.conf.d
          name: config-data-custom
          readOnly: true
        - mountPath: /var/lib/config-data/default
          name: config-data
          readOnly: true
        - mountPath: /etc/my.cnf
          name: config-data
          readOnly: true
          subPath: my.cnf
        - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
          name: combined-ca-bundle
          readOnly: true
          subPath: tls-ca-bundle.pem
        - mountPath: /var/lib/config-data/tls/certs/internal.crt
          name: internal-tls-certs
          readOnly: true
          subPath: tls.crt
        - mountPath: /var/lib/config-data/tls/private/internal.key
          name: internal-tls-certs
          readOnly: true
          subPath: tls.key
        - mountPath: /var/lib/config-data/tls/certs/public.crt
          name: public-tls-certs
          readOnly: true
          subPath: tls.crt
        - mountPath: /var/lib/config-data/tls/private/public.key
          name: public-tls-certs
          readOnly: true
          subPath: tls.key
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext:
        fsGroup: 42418
      serviceAccount: heat-heat
      serviceAccountName: heat-heat
      terminationGracePeriodSeconds: 60
      volumes:
      - name: config-data-custom
        secret:
          defaultMode: 420
          secretName: heat-cfnapi-config-data
      - name: config-data
        secret:
          defaultMode: 420
          secretName: heat-config-data
      - name: combined-ca-bundle
        secret:
          defaultMode: 292
          secretName: combined-ca-bundle
      - name: internal-tls-certs
        secret:
          defaultMode: 256
          secretName: cert-heat-cfnapi-internal-svc
      - name: public-tls-certs
        secret:
          defaultMode: 256
          secretName: cert-heat-cfnapi-public-svc
status:
  availableReplicas: 1
  fullyLabeledReplicas: 1
  observedGeneration: 2
  readyReplicas: 1
  replicas: 1