apiVersion: apps/v1 kind: StatefulSet metadata: creationTimestamp: "2025-10-11T10:52:57Z" generation: 2 labels: app.kubernetes.io/component: exporter app.kubernetes.io/name: kube-state-metrics service: kube-state-metrics name: kube-state-metrics namespace: openstack ownerReferences: - apiVersion: telemetry.openstack.org/v1beta1 blockOwnerDeletion: true controller: true kind: Ceilometer name: ceilometer uid: dbcbe67a-bba0-4b81-a2dc-561e4a825494 resourceVersion: "45774" uid: 9ebcad28-b62c-4374-b61c-7ae9a0558345 spec: persistentVolumeClaimRetentionPolicy: whenDeleted: Retain whenScaled: Retain podManagementPolicy: OrderedReady replicas: 1 revisionHistoryLimit: 10 selector: matchLabels: app.kubernetes.io/component: exporter app.kubernetes.io/name: kube-state-metrics service: kube-state-metrics serviceName: "" template: metadata: creationTimestamp: null labels: app.kubernetes.io/component: exporter app.kubernetes.io/name: kube-state-metrics service: kube-state-metrics name: kube-state-metrics namespace: openstack spec: automountServiceAccountToken: true containers: - args: - --resources=pods - --namespaces=openstack - --tls-config=/etc/ksm/tls_config.yaml image: registry.k8s.io/kube-state-metrics/kube-state-metrics@sha256:db384bf43222b066c378e77027a675d4cd9911107adba46c2922b3a55e10d6fb imagePullPolicy: Always livenessProbe: failureThreshold: 3 httpGet: path: /livez port: 8080 scheme: HTTPS initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 name: kube-state-metrics ports: - containerPort: 8080 name: http-metrics protocol: TCP - containerPort: 8081 name: telemetry protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTPS initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/pki/tls/certs/tls.crt name: kube-state-metrics-tls-certs readOnly: true subPath: tls.crt - mountPath: /etc/pki/tls/private/tls.key name: kube-state-metrics-tls-certs readOnly: true subPath: tls.key - mountPath: /etc/ksm/tls_config.yaml name: kube-state-metrics-tls-config readOnly: true subPath: tls_config.yaml - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem name: combined-ca-bundle readOnly: true subPath: tls-ca-bundle.pem dnsPolicy: ClusterFirst restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: telemetry-ceilometer serviceAccountName: telemetry-ceilometer terminationGracePeriodSeconds: 30 volumes: - name: kube-state-metrics-tls-certs secret: defaultMode: 256 secretName: cert-kube-state-metrics-svc - name: kube-state-metrics-tls-config secret: defaultMode: 256 secretName: kube-state-metrics-tls-config - name: combined-ca-bundle secret: defaultMode: 292 secretName: combined-ca-bundle updateStrategy: rollingUpdate: partition: 0 type: RollingUpdate status: availableReplicas: 1 collisionCount: 0 currentReplicas: 1 currentRevision: kube-state-metrics-59dd6cf778 observedGeneration: 2 readyReplicas: 1 replicas: 1 updateRevision: kube-state-metrics-59dd6cf778 updatedReplicas: 1