apiVersion: apps/v1 kind: ReplicaSet metadata: annotations: deployment.kubernetes.io/desired-replicas: "1" deployment.kubernetes.io/max-replicas: "2" deployment.kubernetes.io/revision: "2" creationTimestamp: "2025-10-11T11:03:21Z" generation: 1 labels: pod-template-hash: 7f8fd8dbdd service: octavia name: octavia-api-7f8fd8dbdd namespace: openstack ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: Deployment name: octavia-api uid: ad2ec409-9219-4f8b-ac18-8da9e162593a resourceVersion: "50598" uid: 8fc33774-551d-4e6b-b993-3431e32c3e8a spec: replicas: 1 selector: matchLabels: pod-template-hash: 7f8fd8dbdd service: octavia template: metadata: annotations: k8s.v1.cni.cncf.io/networks: '[{"name":"internalapi","namespace":"openstack","interface":"internalapi"}]' creationTimestamp: null labels: pod-template-hash: 7f8fd8dbdd service: octavia spec: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: service operator: In values: - octavia-api topologyKey: kubernetes.io/hostname weight: 100 automountServiceAccountToken: false containers: - args: - -c - /usr/local/bin/kolla_start command: - /bin/bash env: - name: CONFIG_HASH value: nd7h7h596h685h56dh555h67fh565h674h5dch688h8ch6ch568h659h55h687h5c8h675h575h8bh5f8h679h5cfhcdh5f9h88hc7h7bh5d9h595h68dq - name: KOLLA_CONFIG_STRATEGY value: COPY_ALWAYS image: quay.io/podified-antelope-centos9/openstack-octavia-api@sha256:97d88fc53421b699fc91983313d7beec4a0f177089e95bdf5ba15c3f521db9a9 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthcheck port: 9876 scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 13 successThreshold: 1 timeoutSeconds: 15 name: octavia-api readinessProbe: failureThreshold: 3 httpGet: path: /healthcheck port: 9876 scheme: HTTPS initialDelaySeconds: 5 periodSeconds: 15 successThreshold: 1 timeoutSeconds: 15 resources: {} securityContext: runAsGroup: 42437 runAsNonRoot: true runAsUser: 42437 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /usr/local/bin/container-scripts name: scripts readOnly: true - mountPath: /var/lib/config-data/merged name: config-data-merged - mountPath: /var/lib/kolla/config_files/config.json name: config-data-merged readOnly: true subPath: octavia-api-config.json - mountPath: /run/octavia name: octavia-run - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem name: combined-ca-bundle readOnly: true subPath: tls-ca-bundle.pem - mountPath: /var/lib/config-data/tls/certs/internal.crt name: internal-tls-certs readOnly: true subPath: tls.crt - mountPath: /var/lib/config-data/tls/private/internal.key name: internal-tls-certs readOnly: true subPath: tls.key - mountPath: /var/lib/config-data/tls/certs/public.crt name: public-tls-certs readOnly: true subPath: tls.crt - mountPath: /var/lib/config-data/tls/private/public.key name: public-tls-certs readOnly: true subPath: tls.key - mountPath: /var/lib/config-data/tls/certs/ovndb.crt name: ovndb-tls-certs readOnly: true subPath: tls.crt - mountPath: /var/lib/config-data/tls/private/ovndb.key name: ovndb-tls-certs readOnly: true subPath: tls.key - mountPath: /var/lib/config-data/tls/certs/ovndbca.crt name: ovndb-tls-certs readOnly: true subPath: ca.crt - env: - name: CONFIG_HASH value: nd7h7h596h685h56dh555h67fh565h674h5dch688h8ch6ch568h659h55h687h5c8h675h575h8bh5f8h679h5cfhcdh5f9h88hc7h7bh5d9h595h68dq - name: KOLLA_CONFIG_STRATEGY value: COPY_ALWAYS image: quay.io/podified-antelope-centos9/openstack-octavia-api@sha256:97d88fc53421b699fc91983313d7beec4a0f177089e95bdf5ba15c3f521db9a9 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthcheck port: 9876 scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 13 successThreshold: 1 timeoutSeconds: 15 name: octavia-api-provider-agent readinessProbe: failureThreshold: 3 httpGet: path: /healthcheck port: 9876 scheme: HTTPS initialDelaySeconds: 5 periodSeconds: 15 successThreshold: 1 timeoutSeconds: 15 resources: {} securityContext: runAsGroup: 42437 runAsNonRoot: true runAsUser: 42437 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /usr/local/bin/container-scripts name: scripts readOnly: true - mountPath: /var/lib/config-data/merged name: config-data-merged - mountPath: /var/lib/kolla/config_files/config.json name: config-data-merged readOnly: true subPath: octavia-driver-agent-config.json - mountPath: /run/octavia name: octavia-run - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem name: combined-ca-bundle readOnly: true subPath: tls-ca-bundle.pem - mountPath: /var/lib/config-data/tls/certs/internal.crt name: internal-tls-certs readOnly: true subPath: tls.crt - mountPath: /var/lib/config-data/tls/private/internal.key name: internal-tls-certs readOnly: true subPath: tls.key - mountPath: /var/lib/config-data/tls/certs/public.crt name: public-tls-certs readOnly: true subPath: tls.crt - mountPath: /var/lib/config-data/tls/private/public.key name: public-tls-certs readOnly: true subPath: tls.key - mountPath: /var/lib/config-data/tls/certs/ovndb.crt name: ovndb-tls-certs readOnly: true subPath: tls.crt - mountPath: /var/lib/config-data/tls/private/ovndb.key name: ovndb-tls-certs readOnly: true subPath: tls.key - mountPath: /var/lib/config-data/tls/certs/ovndbca.crt name: ovndb-tls-certs readOnly: true subPath: ca.crt dnsPolicy: ClusterFirst initContainers: - args: - -c - /usr/local/bin/container-scripts/init.sh command: - /bin/bash image: quay.io/podified-antelope-centos9/openstack-octavia-api@sha256:97d88fc53421b699fc91983313d7beec4a0f177089e95bdf5ba15c3f521db9a9 imagePullPolicy: IfNotPresent name: init resources: {} securityContext: runAsGroup: 42437 runAsNonRoot: true runAsUser: 42437 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /usr/local/bin/container-scripts name: scripts readOnly: true - mountPath: /var/lib/config-data/default name: config-data readOnly: true - mountPath: /var/lib/config-data/merged name: config-data-merged restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 42437 serviceAccount: octavia-octavia serviceAccountName: octavia-octavia terminationGracePeriodSeconds: 30 volumes: - name: scripts secret: defaultMode: 493 secretName: octavia-api-scripts - name: config-data secret: defaultMode: 416 secretName: octavia-api-config-data - emptyDir: {} name: config-data-merged - emptyDir: {} name: octavia-run - name: combined-ca-bundle secret: defaultMode: 292 secretName: combined-ca-bundle - name: internal-tls-certs secret: defaultMode: 256 secretName: cert-octavia-internal-svc - name: public-tls-certs secret: defaultMode: 256 secretName: cert-octavia-public-svc - name: ovndb-tls-certs secret: defaultMode: 256 secretName: cert-octavia-ovndbs status: availableReplicas: 1 fullyLabeledReplicas: 1 observedGeneration: 1 readyReplicas: 1 replicas: 1