apiVersion: apps/v1
kind: StatefulSet
metadata:
  creationTimestamp: "2025-10-11T10:52:53Z"
  generation: 1
  name: openstack-cell1-galera
  namespace: openstack
  ownerReferences:
  - apiVersion: mariadb.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: Galera
    name: openstack-cell1
    uid: 516c0a46-52a4-4f92-abab-35ea5d19a3da
  resourceVersion: "37435"
  uid: 53a2ca16-d924-4f65-8ac4-4b25b3d18304
spec:
  persistentVolumeClaimRetentionPolicy:
    whenDeleted: Retain
    whenScaled: Retain
  podManagementPolicy: Parallel
  replicas: 3
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app: galera
      cr: galera-openstack-cell1
      galera/name: openstack-cell1
      galera/namespace: openstack
      galera/uid: 516c0a46-52a4-4f92-abab-35ea5d19a3da
      owner: mariadb-operator
      service: openstack-cell1-galera
  serviceName: openstack-cell1-galera
  template:
    metadata:
      creationTimestamp: null
      labels:
        app: galera
        cr: galera-openstack-cell1
        galera/name: openstack-cell1
        galera/namespace: openstack
        galera/uid: 516c0a46-52a4-4f92-abab-35ea5d19a3da
        owner: mariadb-operator
        service: openstack-cell1-galera
    spec:
      affinity:
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
          - podAffinityTerm:
              labelSelector:
                matchExpressions:
                - key: service
                  operator: In
                  values:
                  - openstack-cell1-galera
              topologyKey: kubernetes.io/hostname
            weight: 100
      containers:
      - command:
        - /usr/bin/dumb-init
        - --
        - /usr/local/bin/kolla_start
        env:
        - name: CR_CONFIG_HASH
          value: nb5h85h6h595h666h669hf7hd4hcch577h576h69hcdh68fh669h548h5cfhd7h556h5c8hcch89hb6h66bh6bh679h66ch577h7fh69h64ch6dq
        - name: KOLLA_CONFIG_STRATEGY
          value: COPY_ALWAYS
        - name: DB_ROOT_PASSWORD
          valueFrom:
            secretKeyRef:
              key: DbRootPassword
              name: osp-secret
        image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:56b75d97f4a48c8cf58b3a7c18c43618efb308bf0188124f6301142e61299b0c
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_shutdown.sh
        livenessProbe:
          exec:
            command:
            - /bin/bash
            - /var/lib/operator-scripts/mysql_probe.sh
            - liveness
          failureThreshold: 3
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        name: galera
        ports:
        - containerPort: 3306
          name: mysql
          protocol: TCP
        - containerPort: 4567
          name: galera
          protocol: TCP
        readinessProbe:
          exec:
            command:
            - /bin/bash
            - /var/lib/operator-scripts/mysql_probe.sh
            - readiness
          failureThreshold: 3
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 1
        resources: {}
        startupProbe:
          exec:
            command:
            - /bin/bash
            - /var/lib/operator-scripts/mysql_probe.sh
            - startup
            - "240"
          failureThreshold: 1
          periodSeconds: 10
          successThreshold: 1
          timeoutSeconds: 250
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /var/lib/mysql
          name: mysql-db
          subPath: mysql
        - mountPath: /var/lib/config-data/default
          name: config-data-default
          readOnly: true
        - mountPath: /var/lib/config-data/generated
          name: config-data-generated
        - mountPath: /var/lib/secrets
          name: secrets
          readOnly: true
        - mountPath: /var/lib/operator-scripts
          name: operator-scripts
          readOnly: true
        - mountPath: /var/lib/kolla/config_files
          name: kolla-config
          readOnly: true
        - mountPath: /var/lib/config-data/tls/certs/galera.crt
          name: galera-tls-certs
          readOnly: true
          subPath: tls.crt
        - mountPath: /var/lib/config-data/tls/private/galera.key
          name: galera-tls-certs
          readOnly: true
          subPath: tls.key
        - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
          name: combined-ca-bundle
          readOnly: true
          subPath: tls-ca-bundle.pem
      dnsPolicy: ClusterFirst
      initContainers:
      - command:
        - bash
        - /var/lib/operator-scripts/mysql_bootstrap.sh
        env:
        - name: KOLLA_BOOTSTRAP
          value: "True"
        - name: KOLLA_CONFIG_STRATEGY
          value: COPY_ALWAYS
        - name: DB_ROOT_PASSWORD
          valueFrom:
            secretKeyRef:
              key: DbRootPassword
              name: osp-secret
        image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:56b75d97f4a48c8cf58b3a7c18c43618efb308bf0188124f6301142e61299b0c
        imagePullPolicy: IfNotPresent
        name: mysql-bootstrap
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /var/lib/mysql
          name: mysql-db
          subPath: mysql
        - mountPath: /var/lib/config-data/default
          name: config-data-default
          readOnly: true
        - mountPath: /var/lib/config-data/generated
          name: config-data-generated
        - mountPath: /var/lib/secrets
          name: secrets
          readOnly: true
        - mountPath: /var/lib/operator-scripts
          name: operator-scripts
          readOnly: true
        - mountPath: /var/lib/kolla/config_files
          name: kolla-config
          readOnly: true
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: galera-openstack-cell1
      serviceAccountName: galera-openstack-cell1
      terminationGracePeriodSeconds: 30
      volumes:
      - name: secrets
        secret:
          defaultMode: 420
          items:
          - key: DbRootPassword
            path: dbpassword
          secretName: osp-secret
      - configMap:
          defaultMode: 420
          items:
          - key: config.json
            path: config.json
          name: openstack-cell1-config-data
        name: kolla-config
      - emptyDir: {}
        name: config-data-generated
      - configMap:
          defaultMode: 420
          items:
          - key: galera.cnf.in
            path: galera.cnf.in
          - key: galera_custom.cnf.in
            path: galera_custom.cnf.in
          - key: galera_tls.cnf.in
            path: galera_tls.cnf.in
          name: openstack-cell1-config-data
        name: config-data-default
      - configMap:
          defaultMode: 420
          items:
          - key: mysql_bootstrap.sh
            path: mysql_bootstrap.sh
          - key: mysql_probe.sh
            path: mysql_probe.sh
          - key: mysql_shutdown.sh
            path: mysql_shutdown.sh
          - key: detect_last_commit.sh
            path: detect_last_commit.sh
          - key: detect_gcomm_and_start.sh
            path: detect_gcomm_and_start.sh
          - key: mysql_wsrep_notify.sh
            path: mysql_wsrep_notify.sh
          name: openstack-cell1-scripts
        name: operator-scripts
      - name: galera-tls-certs
        secret:
          defaultMode: 256
          secretName: cert-galera-openstack-cell1-svc
      - name: combined-ca-bundle
        secret:
          defaultMode: 292
          secretName: combined-ca-bundle
  updateStrategy:
    rollingUpdate:
      partition: 0
    type: RollingUpdate
  volumeClaimTemplates:
  - apiVersion: v1
    kind: PersistentVolumeClaim
    metadata:
      creationTimestamp: null
      labels:
        app: galera
        cr: galera-openstack-cell1
        galera/name: openstack-cell1
        galera/namespace: openstack
        galera/uid: 516c0a46-52a4-4f92-abab-35ea5d19a3da
        owner: mariadb-operator
        service: openstack-cell1-galera
      name: mysql-db
    spec:
      accessModes:
      - ReadWriteOnce
      resources:
        requests:
          storage: 5G
      storageClassName: lvms-local-storage
      volumeMode: Filesystem
    status:
      phase: Pending
status:
  availableReplicas: 3
  collisionCount: 0
  currentReplicas: 3
  currentRevision: openstack-cell1-galera-5db89db59c
  observedGeneration: 1
  readyReplicas: 3
  replicas: 3
  updateRevision: openstack-cell1-galera-5db89db59c
  updatedReplicas: 3