---
apiVersion: batch/v1
items:
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5fch5d8h59fhf9h586h5bbh656h567h9bh554h59bh57bh66ch7h678h54fhcbh55hc9h665hb7hc8h586h698h57fh5c9hfchbbh8ch577h8h9dq
    creationTimestamp: "2026-03-13T13:10:41Z"
    generation: 1
    labels:
      service: cinder
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"4dea0e6e-7423-4773-a8a3-ee191e032e55"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"cinder-ee0a2-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"db-sync-config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:10:41Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:11:40Z"
    name: cinder-ee0a2-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Cinder
      name: cinder-ee0a2
      uid: 4dea0e6e-7423-4773-a8a3-ee191e032e55
    resourceVersion: "32972"
    uid: 271a1778-add6-480c-9027-47a489812826
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 271a1778-add6-480c-9027-47a489812826
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 271a1778-add6-480c-9027-47a489812826
          batch.kubernetes.io/job-name: cinder-ee0a2-db-sync
          controller-uid: 271a1778-add6-480c-9027-47a489812826
          job-name: cinder-ee0a2-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "TRUE"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-cinder-api@sha256:574a17f0877c175128a764f2b37fc02456649c8514689125718ce6ca974bfb6b
          imagePullPolicy: IfNotPresent
          name: cinder-ee0a2-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/cinder/cinder.conf.d
            name: db-sync-config-data
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-ee0a2
        serviceAccountName: cinder-cinder-ee0a2
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-ee0a2-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-ee0a2-config-data
        - name: db-sync-config-data
          secret:
            defaultMode: 420
            items:
            - key: 00-global-defaults.conf
              path: 00-global-defaults.conf
            - key: 02-global-custom.conf
              path: 02-global-custom.conf
            secretName: cinder-ee0a2-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:11:40Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:11:40Z"
      lastTransitionTime: "2026-03-13T13:11:40Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:11:40Z"
      lastTransitionTime: "2026-03-13T13:11:40Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:10:41Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n7h674h55hf7h7bhfh65bh5b6h59h557h56dh5fbhf9hdh99h8fh696h9dh56dh64fh7hfdh647h68bhddhcchd6h596h685h5bfh686h658q
    creationTimestamp: "2026-03-13T13:10:53Z"
    generation: 1
    labels:
      service: ironic
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"cd5ebb5b-dbf3-443d-9fe2-11a6a57aee35"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"ironic-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabaseHost"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DatabaseName"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DeployHTTPURL"}:
                      .: {}
                      f:name: {}
                    k:{"name":"IngressDomain"}:
                      .: {}
                      f:name: {}
                    k:{"name":"IronicPassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"PodName"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PodNamespace"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"ProvisionNetwork"}:
                      .: {}
                      f:name: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-merged"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:10:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:11:51Z"
    name: ironic-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Ironic
      name: ironic
      uid: cd5ebb5b-dbf3-443d-9fe2-11a6a57aee35
    resourceVersion: "33418"
    uid: 4259d00f-c980-4bc5-b03d-99c73e751db1
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 4259d00f-c980-4bc5-b03d-99c73e751db1
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 4259d00f-c980-4bc5-b03d-99c73e751db1
          batch.kubernetes.io/job-name: ironic-db-sync
          controller-uid: 4259d00f-c980-4bc5-b03d-99c73e751db1
          job-name: ironic-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/dbsync.sh
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor@sha256:0312c8ff4b98bfc1e0c9bb717adb3247305749e34533eff91099c88ed9a1ed7f
          imagePullPolicy: IfNotPresent
          name: ironic-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/init.sh
          command:
          - /bin/bash
          env:
          - name: IronicPassword
            valueFrom:
              secretKeyRef:
                key: IronicPassword
                name: osp-secret
          - name: PodName
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: PodNamespace
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: ProvisionNetwork
          - name: DatabaseHost
            value: openstack.openstack.svc
          - name: DatabaseName
            value: ironic
          - name: DeployHTTPURL
          - name: IngressDomain
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor@sha256:0312c8ff4b98bfc1e0c9bb717adb3247305749e34533eff91099c88ed9a1ed7f
          imagePullPolicy: IfNotPresent
          name: init
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: ironic-config-data
        - emptyDir: {}
          name: config-data-merged
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:11:51Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:11:51Z"
      lastTransitionTime: "2026-03-13T13:11:51Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:11:51Z"
      lastTransitionTime: "2026-03-13T13:11:51Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:10:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5d7h656h554h7bh554h57dhc7h647h5dfh55h5fdh68fh579h666hdch5cfhc8h56fh549h64ch56dh8fh546h654h658h679h545h5c6hb9h6fh54bh57dq
    creationTimestamp: "2026-03-13T13:11:53Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_inspector_0a87
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c312ce71-3b4c-4db1-a88c-e5be960dbf18"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:11:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:12:05Z"
    name: ironic-inspector-0a87-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: ironic-inspector
      uid: c312ce71-3b4c-4db1-a88c-e5be960dbf18
    resourceVersion: "34039"
    uid: b493e9ef-a284-426e-8c87-f9f72a44b0a9
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: b493e9ef-a284-426e-8c87-f9f72a44b0a9
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: b493e9ef-a284-426e-8c87-f9f72a44b0a9
          batch.kubernetes.io/job-name: ironic-inspector-0a87-account-create-update
          controller-uid: b493e9ef-a284-426e-8c87-f9f72a44b0a9
          job-name: ironic-inspector-0a87-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "ironic_inspector" ]; then
                GRANT_DATABASE="ironic_inspector"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'ironic_inspector_0a87'@'localhost';
            CREATE USER IF NOT EXISTS 'ironic_inspector_0a87'@'%';

            ALTER USER 'ironic_inspector_0a87'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'ironic_inspector_0a87'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_inspector_0a87'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_inspector_0a87'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "ironic_inspector_0a87" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='ironic_inspector_0a87' and host='localhost';" )

            if [[ ${username} != "ironic_inspector_0a87" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: ironic-inspector-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:12:05Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:12:05Z"
      lastTransitionTime: "2026-03-13T13:12:05Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:12:05Z"
      lastTransitionTime: "2026-03-13T13:12:05Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:11:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n65h5f8h56fh58fh59fh5bh599h65dh5dchcbh658h5cdh554h598h5b8h54h699h5dhb5h5dfh595h55h645h68dh54fh5cdh5ddhcfh54chd4h97h75q
    creationTimestamp: "2026-03-13T13:11:53Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_inspector
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"3c29967f-c04e-411d-b390-1c41980584a5"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:11:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:12:05Z"
    name: ironic-inspector-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: ironic-inspector
      uid: 3c29967f-c04e-411d-b390-1c41980584a5
    resourceVersion: "34025"
    uid: 83161f6b-44e6-4520-a3f8-650ad67ab760
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 83161f6b-44e6-4520-a3f8-650ad67ab760
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 83161f6b-44e6-4520-a3f8-650ad67ab760
          batch.kubernetes.io/job-name: ironic-inspector-db-create
          controller-uid: 83161f6b-44e6-4520-a3f8-650ad67ab760
          job-name: ironic-inspector-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS ironic_inspector; ALTER DATABASE ironic_inspector CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON ironic_inspector.* TO 'ironic_inspector'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON ironic_inspector.* TO 'ironic_inspector'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE ironic_inspector;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:12:05Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:12:05Z"
      lastTransitionTime: "2026-03-13T13:12:05Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:12:05Z"
      lastTransitionTime: "2026-03-13T13:12:05Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:11:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nc4h65fh66ch68ch99h649h67ch5fch584h5b5h665h9bh66ch86h674hf5h88h5bfhdbh559h64bh674hdfh645hc6hf5h599h8fh587h58bh596h678q
    creationTimestamp: "2026-03-13T13:12:18Z"
    generation: 1
    labels:
      component: inspector
      service: ironic
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8183347a-0ec7-45ed-914f-15915a77cc11"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"ironic-inspector-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"var-lib-ironic"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"var-lib-ironic-inspector-dhcp-hostsdir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:12:18Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:13:02Z"
    name: ironic-inspector-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: IronicInspector
      name: ironic-inspector
      uid: 8183347a-0ec7-45ed-914f-15915a77cc11
    resourceVersion: "35190"
    uid: 382c45ba-d154-48af-8d5b-ef8d32cc55e0
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 382c45ba-d154-48af-8d5b-ef8d32cc55e0
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 382c45ba-d154-48af-8d5b-ef8d32cc55e0
          batch.kubernetes.io/job-name: ironic-inspector-db-sync
          controller-uid: 382c45ba-d154-48af-8d5b-ef8d32cc55e0
          job-name: ironic-inspector-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /bin/bash -c 'ironic-inspector-dbsync
            --config-file /etc/ironic-inspector/inspector.conf --config-dir /etc/ironic-inspector/inspector.conf.d
            upgrade'
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector@sha256:ccdc96c8db6368182c0f0d0bc4f482ca2f757ecee75656e2715f2eaeb2662030
          imagePullPolicy: IfNotPresent
          name: ironic-inspector-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-inspector-scripts
        - name: config
          secret:
            defaultMode: 416
            secretName: ironic-inspector-config-data
        - emptyDir: {}
          name: var-lib-ironic
        - emptyDir: {}
          name: var-lib-ironic-inspector-dhcp-hostsdir
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:13:02Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:13:02Z"
      lastTransitionTime: "2026-03-13T13:13:02Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:13:02Z"
      lastTransitionTime: "2026-03-13T13:13:02Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:12:18Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n566h649h65h5b5h59fhffh67fh5f9h56fhf9h559h5ch57ch5c6h5f6h58fh556h549h5b8h547h5c9hbdh65h54fh54h5f5h566h688h5hd9h548h697q
    creationTimestamp: "2026-03-13T13:10:56Z"
    generation: 1
    labels:
      owner: keystone
      service: keystone
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"966b0001-cea8-404b-a381-7f87211db604"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"keystone-bootstrap"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_INTERNAL_URL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_PASSWORD"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"OS_BOOTSTRAP_PROJECT_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_PUBLIC_URL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_REGION_ID"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_SERVICE_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_USERNAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/keystone/credential-keys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/keystone/fernet-keys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"credential-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"fernet-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:10:56Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:11:19Z"
    name: keystone-bootstrap
    namespace: openstack
    ownerReferences:
    - apiVersion: keystone.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: KeystoneAPI
      name: keystone
      uid: 966b0001-cea8-404b-a381-7f87211db604
    resourceVersion: "32382"
    uid: 15446b10-2827-4628-9baf-c963c6d0b8d9
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 15446b10-2827-4628-9baf-c963c6d0b8d9
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 15446b10-2827-4628-9baf-c963c6d0b8d9
          batch.kubernetes.io/job-name: keystone-bootstrap
          controller-uid: 15446b10-2827-4628-9baf-c963c6d0b8d9
          job-name: keystone-bootstrap
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && keystone-manage bootstrap
          command:
          - /bin/bash
          env:
          - name: OS_BOOTSTRAP_PASSWORD
            valueFrom:
              secretKeyRef:
                key: AdminPassword
                name: osp-secret
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: OS_BOOTSTRAP_INTERNAL_URL
            value: https://keystone-internal.openstack.svc:5000
          - name: OS_BOOTSTRAP_PROJECT_NAME
            value: admin
          - name: OS_BOOTSTRAP_PUBLIC_URL
            value: https://keystone-public-openstack.apps.sno.openstack.lab
          - name: OS_BOOTSTRAP_REGION_ID
            value: regionOne
          - name: OS_BOOTSTRAP_SERVICE_NAME
            value: keystone
          - name: OS_BOOTSTRAP_USERNAME
            value: admin
          image: quay.io/podified-antelope-centos9/openstack-keystone@sha256:3a148c87899d4cbbb6bbe1203ad6c237fb295b5f42abda425dc0329305723414
          imagePullPolicy: IfNotPresent
          name: keystone-bootstrap
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: keystone-api-config.json
          - mountPath: /etc/keystone/fernet-keys
            name: fernet-keys
            readOnly: true
          - mountPath: /etc/keystone/credential-keys
            name: credential-keys
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: keystone-keystone
        serviceAccountName: keystone-keystone
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: keystone-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: keystone-config-data
        - name: fernet-keys
          secret:
            defaultMode: 420
            items:
            - key: FernetKeys0
              path: "0"
            - key: FernetKeys1
              path: "1"
            - key: FernetKeys2
              path: "2"
            - key: FernetKeys3
              path: "3"
            - key: FernetKeys4
              path: "4"
            secretName: keystone
        - name: credential-keys
          secret:
            defaultMode: 420
            items:
            - key: CredentialKeys0
              path: "0"
            - key: CredentialKeys1
              path: "1"
            secretName: keystone
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:11:19Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:11:19Z"
      lastTransitionTime: "2026-03-13T13:11:19Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:11:19Z"
      lastTransitionTime: "2026-03-13T13:11:19Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:10:56Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n557h548h685h68bh5d9h79h9h74h555h67fh664h68dhf7h66dh5d9h5c9h668h59fh5b6h7fh5b4h5bch66ch67bh586hb8h656hd9h65dh7fhb5h64bq
      k8s.v1.cni.cncf.io/networks: '[{"name":"internalapi","namespace":"openstack","interface":"internalapi"}]'
    creationTimestamp: "2026-03-13T13:10:42Z"
    generation: 1
    labels:
      service: neutron
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8f6385ef-96b3-4a71-8594-5ebeffe2409c"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"neutron-db-sync"}:
                  .: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"httpd-config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:10:42Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:11:29Z"
    name: neutron-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: neutron.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NeutronAPI
      name: neutron
      uid: 8f6385ef-96b3-4a71-8594-5ebeffe2409c
    resourceVersion: "32632"
    uid: 428a07b0-34ca-41ee-b6a2-6c21b80d362e
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 428a07b0-34ca-41ee-b6a2-6c21b80d362e
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 428a07b0-34ca-41ee-b6a2-6c21b80d362e
          batch.kubernetes.io/job-name: neutron-db-sync
          controller-uid: 428a07b0-34ca-41ee-b6a2-6c21b80d362e
          job-name: neutron-db-sync
      spec:
        containers:
        - env:
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-neutron-server@sha256:fbb5be29e9e4fa11f0743e7f74f2e80dcc7445d24770709ea0e038147f752c51
          imagePullPolicy: IfNotPresent
          name: neutron-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42435
            runAsNonRoot: true
            runAsUser: 42435
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: neutron-neutron
        serviceAccountName: neutron-neutron
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config
          secret:
            defaultMode: 420
            secretName: neutron-config
        - name: httpd-config
          secret:
            defaultMode: 420
            secretName: neutron-httpd-config
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:11:29Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:11:29Z"
      lastTransitionTime: "2026-03-13T13:11:29Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:11:29Z"
      lastTransitionTime: "2026-03-13T13:11:29Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:10:42Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nbch59h646h677h555h694h677h67dh599h5bh68bh7h675h5fch665h87h64fh67fh66ch677h5d4h65bh58dh57ch594h65fh9h65ch64h567h5d5hf4q
    creationTimestamp: "2026-03-13T13:12:28Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_api_924b
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"2765ab9b-4ed9-4d31-a820-4dc5c2cbe307"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:12:28Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:12:58Z"
    name: nova-api-924b-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-api
      uid: 2765ab9b-4ed9-4d31-a820-4dc5c2cbe307
    resourceVersion: "35078"
    uid: ee9d0518-9a20-49c5-b81e-4fd5890ee55f
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: ee9d0518-9a20-49c5-b81e-4fd5890ee55f
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: ee9d0518-9a20-49c5-b81e-4fd5890ee55f
          batch.kubernetes.io/job-name: nova-api-924b-account-create-update
          controller-uid: ee9d0518-9a20-49c5-b81e-4fd5890ee55f
          job-name: nova-api-924b-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "nova_api" ]; then
                GRANT_DATABASE="nova_api"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_api_924b'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_api_924b'@'%';

            ALTER USER 'nova_api_924b'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_api_924b'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_api_924b'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_api_924b'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_api_924b" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_api_924b' and host='localhost';" )

            if [[ ${username} != "nova_api_924b" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-api-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:12:58Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:12:58Z"
      lastTransitionTime: "2026-03-13T13:12:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:12:58Z"
      lastTransitionTime: "2026-03-13T13:12:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:12:28Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5c7hf7hf4h565h55bh95h59dhf9h696hd9h5d6h7h57bh684h5h584h648h546h5cch56fh5c5h55fhddhbbh587h5d5h559h689h5fdh5f9h544hf8q
    creationTimestamp: "2026-03-13T13:12:28Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_api
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e67eab53-5c2a-453a-8bd1-07824a8810a8"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:12:28Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:12:58Z"
    name: nova-api-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-api
      uid: e67eab53-5c2a-453a-8bd1-07824a8810a8
    resourceVersion: "35069"
    uid: 06a34a5c-0f94-437b-9956-5918140c8fbe
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 06a34a5c-0f94-437b-9956-5918140c8fbe
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 06a34a5c-0f94-437b-9956-5918140c8fbe
          batch.kubernetes.io/job-name: nova-api-db-create
          controller-uid: 06a34a5c-0f94-437b-9956-5918140c8fbe
          job-name: nova-api-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_api; ALTER DATABASE nova_api CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova_api'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_api.* TO 'nova_api'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_api;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:12:58Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:12:58Z"
      lastTransitionTime: "2026-03-13T13:12:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:12:58Z"
      lastTransitionTime: "2026-03-13T13:12:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:12:28Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n59bhb4hf7h544h5cch55fhfbh5h8ch5cbh78h669h5f5hf9h66dh5f8h67h77h575hc9h56h65h6h654h689h79h576h56fh655hd7h5f5h599q
    creationTimestamp: "2026-03-13T13:12:29Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell0_68ee
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"137396cd-420d-4ef0-acb5-4ece482d19fa"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:12:29Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:12:58Z"
    name: nova-cell0-68ee-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-cell0
      uid: 137396cd-420d-4ef0-acb5-4ece482d19fa
    resourceVersion: "35074"
    uid: 143a6a17-23c5-44fa-a821-f13452876f76
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 143a6a17-23c5-44fa-a821-f13452876f76
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 143a6a17-23c5-44fa-a821-f13452876f76
          batch.kubernetes.io/job-name: nova-cell0-68ee-account-create-update
          controller-uid: 143a6a17-23c5-44fa-a821-f13452876f76
          job-name: nova-cell0-68ee-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "nova_cell0" ]; then
                GRANT_DATABASE="nova_cell0"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_cell0_68ee'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_cell0_68ee'@'%';

            ALTER USER 'nova_cell0_68ee'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_cell0_68ee'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell0_68ee'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell0_68ee'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_cell0_68ee" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_cell0_68ee' and host='localhost';" )

            if [[ ${username} != "nova_cell0_68ee" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-cell0-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:12:58Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:12:58Z"
      lastTransitionTime: "2026-03-13T13:12:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:12:58Z"
      lastTransitionTime: "2026-03-13T13:12:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:12:29Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n578h7hb9hfbhf9h579h8dh5bh56bhd9h7h695h59bh646h684h649h8fh55ch66h66bh656h5c5hf6h64fh68fh5b9h5dch6hf8h679hbch695q
    creationTimestamp: "2026-03-13T13:14:01Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"5741e1da-76fe-4965-8f5c-18e560e5f43a"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:14:01Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:14:29Z"
    name: nova-cell0-cell-mapping
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: 5741e1da-76fe-4965-8f5c-18e560e5f43a
    resourceVersion: "36791"
    uid: ef8be34a-f844-4b85-b1db-4ee24d39b7aa
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: ef8be34a-f844-4b85-b1db-4ee24d39b7aa
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: ef8be34a-f844-4b85-b1db-4ee24d39b7aa
          batch.kubernetes.io/job-name: nova-cell0-cell-mapping
          controller-uid: ef8be34a-f844-4b85-b1db-4ee24d39b7aa
          job-name: nova-cell0-cell-mapping
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell0
          - name: INPUT_HASH
            value: n5d9h559h5f9hddh668h58dhc8h5fchbdh5dh5d8hcdhfdh59fhd4hf9hd8hb9hfch5c9h68ch667h68bh5dhd4hch5h554hbchb7h679h684q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: cell-mapping-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell0-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell0-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:14:29Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:14:29Z"
      lastTransitionTime: "2026-03-13T13:14:29Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:14:29Z"
      lastTransitionTime: "2026-03-13T13:14:29Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:14:01Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n688h68fhdh59dh79h5c5h65h697h645h75h5b7h558hd7h658h595h94h54ch78h59fh697h59fhc7h594hf7hdbh54ch547h656h566h5f9h54chfdq
      k8s.v1.cni.cncf.io/networks: '[]'
    creationTimestamp: "2026-03-13T13:13:01Z"
    generation: 1
    labels:
      service: nova-conductor
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"092c2f05-763e-44b9-ab78-b9a3fac05425"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-cell0-conductor-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:13:01Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:13:50Z"
    name: nova-cell0-conductor-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell0-conductor
      uid: 092c2f05-763e-44b9-ab78-b9a3fac05425
    resourceVersion: "36020"
    uid: f9a49571-a6a8-4b49-bb0b-21c521350659
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: f9a49571-a6a8-4b49-bb0b-21c521350659
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: f9a49571-a6a8-4b49-bb0b-21c521350659
          batch.kubernetes.io/job-name: nova-cell0-conductor-db-sync
          controller-uid: f9a49571-a6a8-4b49-bb0b-21c521350659
          job-name: nova-cell0-conductor-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell0
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-cell0-conductor-db-sync
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell0-conductor-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell0-conductor-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:13:50Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:13:50Z"
      lastTransitionTime: "2026-03-13T13:13:50Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:13:50Z"
      lastTransitionTime: "2026-03-13T13:13:50Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:13:01Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n64fh684h7h566h578h56bh5bh5d5h568h565h644h7dhb5h5d4hbbh99h68ch98h5c4h64h69hb8h7fh98h699h647hbh85h685h6bh5bdh695q
    creationTimestamp: "2026-03-13T13:12:28Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell0
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"ac89b6e9-0ab6-4175-9d0e-333120e1e269"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:12:28Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:12:58Z"
    name: nova-cell0-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-cell0
      uid: ac89b6e9-0ab6-4175-9d0e-333120e1e269
    resourceVersion: "35060"
    uid: 1210b22e-ef6e-4da0-974e-ddcc280d3df2
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 1210b22e-ef6e-4da0-974e-ddcc280d3df2
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 1210b22e-ef6e-4da0-974e-ddcc280d3df2
          batch.kubernetes.io/job-name: nova-cell0-db-create
          controller-uid: 1210b22e-ef6e-4da0-974e-ddcc280d3df2
          job-name: nova-cell0-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_cell0; ALTER DATABASE nova_cell0 CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova_cell0'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova_cell0'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_cell0;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:12:58Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:12:58Z"
      lastTransitionTime: "2026-03-13T13:12:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:12:58Z"
      lastTransitionTime: "2026-03-13T13:12:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:12:28Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n574h56bh695hbbh67fhb6h558hfch669h57dh98h58ch64chb7h64fhc8hch596h668h4h5c9h9dhffh58fh7dh684hf7h59ch594hfch5cbh77q
    creationTimestamp: "2026-03-13T13:12:29Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell1_9f84
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"26e5f6ce-8362-4383-9a46-d8a37d870a61"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:12:29Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:12:58Z"
    name: nova-cell1-9f84-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-cell1
      uid: 26e5f6ce-8362-4383-9a46-d8a37d870a61
    resourceVersion: "35070"
    uid: 1e3f9080-0597-40b0-9159-30844a6e815e
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 1e3f9080-0597-40b0-9159-30844a6e815e
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 1e3f9080-0597-40b0-9159-30844a6e815e
          batch.kubernetes.io/job-name: nova-cell1-9f84-account-create-update
          controller-uid: 1e3f9080-0597-40b0-9159-30844a6e815e
          job-name: nova-cell1-9f84-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -P 3306"

            if [ -n "nova_cell1" ]; then
                GRANT_DATABASE="nova_cell1"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_cell1_9f84'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_cell1_9f84'@'%';

            ALTER USER 'nova_cell1_9f84'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_cell1_9f84'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell1_9f84'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell1_9f84'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_cell1_9f84" = "root" ]; then
                MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_cell1_9f84' and host='localhost';" )

            if [[ ${username} != "nova_cell1_9f84" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-cell1-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:12:58Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:12:58Z"
      lastTransitionTime: "2026-03-13T13:12:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:12:58Z"
      lastTransitionTime: "2026-03-13T13:12:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:12:29Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5b6h5b7h55dh645h596h64fhd4h688h559h55ch588hf9h6bh97h87hf5hc6h599h6h5c7hd9h68fhcfh695h667hc8hc6hd4h57bh669hdbh58dq
    creationTimestamp: "2026-03-13T13:14:59Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"5741e1da-76fe-4965-8f5c-18e560e5f43a"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:14:59Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:15:17Z"
    name: nova-cell1-cell-mapping
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: 5741e1da-76fe-4965-8f5c-18e560e5f43a
    resourceVersion: "37662"
    uid: 94134f5f-913a-4149-855a-1d87d9bf74b6
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 94134f5f-913a-4149-855a-1d87d9bf74b6
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 94134f5f-913a-4149-855a-1d87d9bf74b6
          batch.kubernetes.io/job-name: nova-cell1-cell-mapping
          controller-uid: 94134f5f-913a-4149-855a-1d87d9bf74b6
          job-name: nova-cell1-cell-mapping
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell1
          - name: INPUT_HASH
            value: n5dh675h544h656h54dh658h6ch695h85h5f6hbfh7bh567h66ch544h5f5h5bch54dhfh698h66dh54bhc9h8bh698h688h77h598h569h76h74h5b5q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: cell-mapping-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:15:17Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:15:17Z"
      lastTransitionTime: "2026-03-13T13:15:17Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:15:17Z"
      lastTransitionTime: "2026-03-13T13:15:17Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:14:59Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: ndbh568h69h5d7h564hc5h589h586hfdh7ch544hb5h557hc4hb5h684h699h684h7h84h58fh598h586h584hb6hf9h697h667h54bh576h56h659q
      k8s.v1.cni.cncf.io/networks: '[]'
    creationTimestamp: "2026-03-13T13:14:04Z"
    generation: 1
    labels:
      service: nova-conductor
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"85c63211-4ade-4fb3-81a2-25f153bd4102"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-cell1-conductor-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:14:04Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:14:29Z"
    name: nova-cell1-conductor-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell1-conductor
      uid: 85c63211-4ade-4fb3-81a2-25f153bd4102
    resourceVersion: "36794"
    uid: 01d9baa9-32b1-4c9b-adc2-c106af538721
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 01d9baa9-32b1-4c9b-adc2-c106af538721
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 01d9baa9-32b1-4c9b-adc2-c106af538721
          batch.kubernetes.io/job-name: nova-cell1-conductor-db-sync
          controller-uid: 01d9baa9-32b1-4c9b-adc2-c106af538721
          job-name: nova-cell1-conductor-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell1
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-cell1-conductor-db-sync
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-conductor-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-conductor-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:14:29Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:14:29Z"
      lastTransitionTime: "2026-03-13T13:14:29Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:14:29Z"
      lastTransitionTime: "2026-03-13T13:14:29Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:14:04Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nd5h585h685h688h7ch6dh56fh664h5bch5h564h5b7h564h568h54dh54h648h645hcdh5b5h555hf9h8dh59ch558h64h574h94hb8hbhb9h677q
    creationTimestamp: "2026-03-13T13:12:29Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell1
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"1437b359-b5df-479f-a567-0b300c9b1654"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:12:29Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:12:58Z"
    name: nova-cell1-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-cell1
      uid: 1437b359-b5df-479f-a567-0b300c9b1654
    resourceVersion: "35082"
    uid: bc71031d-2ec1-4506-8db0-c69d2f8ffd99
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: bc71031d-2ec1-4506-8db0-c69d2f8ffd99
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: bc71031d-2ec1-4506-8db0-c69d2f8ffd99
          batch.kubernetes.io/job-name: nova-cell1-db-create
          controller-uid: bc71031d-2ec1-4506-8db0-c69d2f8ffd99
          job-name: nova-cell1-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack-cell1.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_cell1; ALTER DATABASE nova_cell1 CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack-cell1.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_cell1.* TO 'nova_cell1'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_cell1.* TO 'nova_cell1'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack-cell1.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_cell1;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:4caef2b55e01b9a7ee88a22bc69db1893521a91d95c7ad4c8e593f14f17a5f95
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:12:58Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:12:58Z"
      lastTransitionTime: "2026-03-13T13:12:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:12:58Z"
      lastTransitionTime: "2026-03-13T13:12:58Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:12:29Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nfh98hdch656h5fdh5b5hbfh554h689h599h556h5d7h684hc4h6bhdbhc7hc9h64h64dhb9h595h598h7dh5bch5b7hf8h545h699h545h5f9h64q
    creationTimestamp: "2026-03-13T13:14:59Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"5741e1da-76fe-4965-8f5c-18e560e5f43a"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:14:59Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:15:14Z"
    name: nova-cell1-host-discover
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: 5741e1da-76fe-4965-8f5c-18e560e5f43a
    resourceVersion: "37614"
    uid: 0f300c56-c337-4769-82ac-09d1a0209061
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 0f300c56-c337-4769-82ac-09d1a0209061
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 0f300c56-c337-4769-82ac-09d1a0209061
          batch.kubernetes.io/job-name: nova-cell1-host-discover
          controller-uid: 0f300c56-c337-4769-82ac-09d1a0209061
          job-name: nova-cell1-host-discover
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: INPUT_HASH
            value: nch64bh5fbh68h5c4h598h9h66bh7ch5f9h64bhfhcch567h568h677h5bfh5c7hb5h664h69h58dh655h79hbbh544h57bh6dhd4h95h599h84q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:d347d48e9a8ae4136dd99c5222480ceccb2819beaf80b11048644d4acf0a4305
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: host-discover-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:15:14Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:15:14Z"
      lastTransitionTime: "2026-03-13T13:15:14Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:15:14Z"
      lastTransitionTime: "2026-03-13T13:15:14Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:14:59Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n646h5c7h564h575h56fh64bh8bhc5h6dh5b7h67bh688hd4h54dh6h5bh66ch64bh647h686h5c6h75h5c4h575h598h79h579h655h5h77hb5h66cq
    creationTimestamp: "2026-03-13T13:10:42Z"
    generation: 1
    labels:
      owner: placement
      service: placement
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"bd0b4854-1bf0-4d2d-ae0c-0d4de1d9d7d5"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"placement-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/log/placement"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:10:42Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:11:19Z"
    name: placement-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: placement.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: PlacementAPI
      name: placement
      uid: bd0b4854-1bf0-4d2d-ae0c-0d4de1d9d7d5
    resourceVersion: "32383"
    uid: 3a66bef3-3970-457f-bc70-c83af8bf76df
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 3a66bef3-3970-457f-bc70-c83af8bf76df
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 3a66bef3-3970-457f-bc70-c83af8bf76df
          batch.kubernetes.io/job-name: placement-db-sync
          controller-uid: 3a66bef3-3970-457f-bc70-c83af8bf76df
          job-name: placement-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-placement-api@sha256:b8a5d052890fb9cefa333baf10b607add227ed5d79aa108b576a97b21e89327a
          imagePullPolicy: IfNotPresent
          name: placement-db-sync
          resources: {}
          securityContext:
            runAsUser: 42482
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/log/placement
            name: logs
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: placement-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: placement-placement
        serviceAccountName: placement-placement
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: placement-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: placement-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-13T13:11:19Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:11:19Z"
      lastTransitionTime: "2026-03-13T13:11:19Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:11:19Z"
      lastTransitionTime: "2026-03-13T13:11:19Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:10:43Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nd9hb4h645h59ch586h5fch575h7dh68dh579h696h55h54dh59h5b4hc5h5cbh5b7h547h5d9h9fh695h8bh56fh548h64ch557h67ch5b7h574h664h584q
    creationTimestamp: "2026-03-13T13:09:42Z"
    generation: 1
    labels:
      job-name: swift-ring-rebalance
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:job-name: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e8730248-b74b-43c4-a3df-7b571a63d288"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"swift-ring-rebalance"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CM_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_APIVERSION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_KIND"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_UID"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_MIN_PART_HOURS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_PART_POWER"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_REPLICAS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/swift/dispersion.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift/swift.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/swift-ring-tool"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/ring-devices"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                  f:workingDir: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"dispersionconf"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"etc-swift"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"ring-data-devices"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"swiftconf"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
      manager: manager
      operation: Update
      time: "2026-03-13T13:09:42Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-13T13:10:05Z"
    name: swift-ring-rebalance
    namespace: openstack
    ownerReferences:
    - apiVersion: swift.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: SwiftRing
      name: swift-ring
      uid: e8730248-b74b-43c4-a3df-7b571a63d288
    resourceVersion: "30506"
    uid: e5a15f3e-8fba-498a-8793-165aaa4789f0
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: e5a15f3e-8fba-498a-8793-165aaa4789f0
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: e5a15f3e-8fba-498a-8793-165aaa4789f0
          batch.kubernetes.io/job-name: swift-ring-rebalance
          controller-uid: e5a15f3e-8fba-498a-8793-165aaa4789f0
          job-name: swift-ring-rebalance
      spec:
        containers:
        - command:
          - /usr/local/bin/swift-ring-tool
          - all
          env:
          - name: CM_NAME
            value: swift-ring-files
          - name: NAMESPACE
            value: openstack
          - name: OWNER_APIVERSION
            value: swift.openstack.org/v1beta1
          - name: OWNER_KIND
            value: SwiftRing
          - name: OWNER_NAME
            value: swift-ring
          - name: OWNER_UID
            value: e8730248-b74b-43c4-a3df-7b571a63d288
          - name: SWIFT_MIN_PART_HOURS
            value: "1"
          - name: SWIFT_PART_POWER
            value: "10"
          - name: SWIFT_REPLICAS
            value: "1"
          image: quay.io/podified-antelope-centos9/openstack-swift-proxy-server@sha256:6c3eb966650a7a98feb4ddb31e1bdba1095b0c62e349196aca6a423681d7e5fb
          imagePullPolicy: IfNotPresent
          name: swift-ring-rebalance
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/swift-ring-tool
            name: scripts
            readOnly: true
            subPath: swift-ring-tool
          - mountPath: /etc/swift/swift.conf
            name: swiftconf
            readOnly: true
            subPath: swift.conf
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/lib/config-data/ring-devices
            name: ring-data-devices
            readOnly: true
          - mountPath: /etc/swift/dispersion.conf
            name: dispersionconf
            readOnly: true
            subPath: dispersion.conf
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          workingDir: /etc/swift
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext:
          seccompProfile:
            type: RuntimeDefault
        serviceAccount: swift-swift
        serviceAccountName: swift-swift
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 493
            items:
            - key: swift-ring-tool
              path: swift-ring-tool
            name: swift-ring-scripts
          name: scripts
        - name: swiftconf
          secret:
            defaultMode: 420
            items:
            - key: swift.conf
              path: swift.conf
            secretName: swift-conf
        - emptyDir: {}
          name: etc-swift
        - configMap:
            defaultMode: 420
            name: swift-ring-config-data
          name: ring-data-devices
        - name: dispersionconf
          secret:
            defaultMode: 420
            items:
            - key: dispersion.conf
              path: dispersion.conf
            optional: true
            secretName: swift-proxy-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
  status:
    completionTime: "2026-03-13T13:10:05Z"
    conditions:
    - lastProbeTime: "2026-03-13T13:10:05Z"
      lastTransitionTime: "2026-03-13T13:10:05Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-13T13:10:05Z"
      lastTransitionTime: "2026-03-13T13:10:05Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-13T13:09:42Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
kind: JobList
metadata:
  resourceVersion: "41030"