---
apiVersion: apps/v1
items:
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:42:21Z"
    generation: 3
    labels:
      component: cinder-api
      service: cinder
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"95a2817b-31de-4019-b383-780380c58131"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"cinder-86971-api-log"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/log/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"cinder-api"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/log/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:42:23Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:42:40Z"
    name: cinder-86971-api
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: CinderAPI
      name: cinder-86971-api
      uid: 95a2817b-31de-4019-b383-780380c58131
    resourceVersion: "31255"
    uid: 76ba5ebf-7330-42b2-b983-e3b3d5f397ef
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: cinder-api
        service: cinder
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          component: cinder-api
          service: cinder
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: component
                    operator: In
                    values:
                    - cinder-api
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - --single-child
          - --
          - /bin/sh
          - -c
          - /usr/bin/tail -n+1 -F /var/log/cinder/cinder-api.log 2>/dev/null
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n7fh75h68dh654h7dh78h668hfh5dh576hfbhcfh646h65fhb9hf8hb9h55ch5d6h665h565hf9h686h5dch5bfh58h59ch68hb8h5ffh5dfhf4q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-cinder-api@sha256:44ed1ca84e17bd0f004cfbdc3c0827d767daba52abb8e83e076bfd0e6c02f838
          imagePullPolicy: IfNotPresent
          name: cinder-86971-api-log
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/log/cinder
            name: logs
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n7fh75h68dh654h7dh78h668hfh5dh576hfbhcfh646h65fhb9hf8hb9h55ch5d6h665h565hf9h686h5dch5bfh58h59ch68hb8h5ffh5dfhf4q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-cinder-api@sha256:44ed1ca84e17bd0f004cfbdc3c0827d767daba52abb8e83e076bfd0e6c02f838
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 8776
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: cinder-api
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 8776
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42407
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-api-config.json
          - mountPath: /var/log/cinder
            name: logs
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-86971
        serviceAccountName: cinder-cinder-86971
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-86971-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-86971-config-data
        - name: config-data-custom
          secret:
            defaultMode: 420
            secretName: cinder-86971-api-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-cinder-internal-svc
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-cinder-public-svc
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: cinder-86971-api-777f6c78bb
    observedGeneration: 3
    readyReplicas: 1
    replicas: 1
    updateRevision: cinder-86971-api-777f6c78bb
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:42:21Z"
    generation: 2
    labels:
      component: cinder-backup
      service: cinder
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"51d17aef-2d02-4ef8-825e-00d995df6e3f"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"cinder-backup"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MALLOC_ARENA_MAX"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MALLOC_MMAP_THRESHOLD_"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MALLOC_TRIM_THRESHOLD_"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:privileged: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/dev"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/iscsi"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/nvme"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/lib/modules"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/run"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/sys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/locks/openstack/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/locks/openstack/os-brick"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"probe"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/dev"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/iscsi"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/nvme"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/lib/modules"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/run"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/sys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/locks/openstack/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/locks/openstack/os-brick"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:hostPID: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"dev"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-iscsi"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-nvme"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"lib-modules"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"run"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"sys"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"var-lib-cinder"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"var-locks-brick"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"var-locks-cinder"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:42:23Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:42:48Z"
    name: cinder-86971-backup
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: CinderBackup
      name: cinder-86971-backup
      uid: 51d17aef-2d02-4ef8-825e-00d995df6e3f
    resourceVersion: "31502"
    uid: 1f5e12a1-135d-4619-b676-a8c89f4832ff
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: OrderedReady
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: cinder-backup
        service: cinder
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"storage","namespace":"openstack","interface":"storage"}]'
        creationTimestamp: null
        labels:
          component: cinder-backup
          service: cinder
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: component
                    operator: In
                    values:
                    - cinder-backup
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n698h5c8h5dfh59h554h677h58fh574h54dh5bdh5cfh94h6dh668h84hb4h75hb7h657h664h67h5b4h64h544h577h669h64bh57fh85h587h6dh5b8q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: MALLOC_ARENA_MAX
            value: "1"
          - name: MALLOC_MMAP_THRESHOLD_
            value: "131072"
          - name: MALLOC_TRIM_THRESHOLD_
            value: "262144"
          image: quay.io/podified-antelope-centos9/openstack-cinder-backup@sha256:b6653696345c9de7573839c805c94401dd032a8d30027218576406bf4654806e
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: cinder-backup
          resources: {}
          securityContext:
            privileged: true
            runAsUser: 42407
          startupProbe:
            failureThreshold: 12
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/cinder
            name: var-lib-cinder
          - mountPath: /etc/nvme
            name: etc-nvme
          - mountPath: /etc/iscsi
            name: etc-iscsi
            readOnly: true
          - mountPath: /dev
            name: dev
          - mountPath: /lib/modules
            name: lib-modules
            readOnly: true
          - mountPath: /run
            name: run
          - mountPath: /sys
            name: sys
          - mountPath: /var/locks/openstack/os-brick
            name: var-locks-brick
          - mountPath: /var/locks/openstack/cinder
            name: var-locks-cinder
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-backup-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/local/bin/container-scripts/healthcheck.py
          - backup
          - /etc/cinder/cinder.conf.d
          image: quay.io/podified-antelope-centos9/openstack-cinder-backup@sha256:b6653696345c9de7573839c805c94401dd032a8d30027218576406bf4654806e
          imagePullPolicy: IfNotPresent
          name: probe
          resources: {}
          securityContext:
            runAsGroup: 42407
            runAsUser: 42407
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/cinder
            name: var-lib-cinder
          - mountPath: /etc/nvme
            name: etc-nvme
          - mountPath: /etc/iscsi
            name: etc-iscsi
            readOnly: true
          - mountPath: /dev
            name: dev
          - mountPath: /lib/modules
            name: lib-modules
            readOnly: true
          - mountPath: /run
            name: run
          - mountPath: /sys
            name: sys
          - mountPath: /var/locks/openstack/os-brick
            name: var-locks-brick
          - mountPath: /var/locks/openstack/cinder
            name: var-locks-cinder
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-backup-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        hostPID: true
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-86971
        serviceAccountName: cinder-cinder-86971
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-86971-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-86971-config-data
        - hostPath:
            path: /var/lib/cinder
            type: DirectoryOrCreate
          name: var-lib-cinder
        - hostPath:
            path: /etc/nvme
            type: DirectoryOrCreate
          name: etc-nvme
        - hostPath:
            path: /etc/iscsi
            type: ""
          name: etc-iscsi
        - hostPath:
            path: /dev
            type: ""
          name: dev
        - hostPath:
            path: /lib/modules
            type: ""
          name: lib-modules
        - hostPath:
            path: /run
            type: ""
          name: run
        - hostPath:
            path: /sys
            type: ""
          name: sys
        - hostPath:
            path: /var/locks/openstack/os-brick
            type: DirectoryOrCreate
          name: var-locks-brick
        - hostPath:
            path: /var/locks/openstack/cinder
            type: DirectoryOrCreate
          name: var-locks-cinder
        - name: config-data-custom
          secret:
            defaultMode: 420
            secretName: cinder-86971-backup-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: cinder-86971-backup-6bcb686595
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updateRevision: cinder-86971-backup-6bcb686595
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:42:20Z"
    generation: 2
    labels:
      component: cinder-scheduler
      service: cinder
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"975de936-4e57-47a7-9124-f50c81b639f3"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"cinder-scheduler"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"probe"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:42:23Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:42:47Z"
    name: cinder-86971-scheduler
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: CinderScheduler
      name: cinder-86971-scheduler
      uid: 975de936-4e57-47a7-9124-f50c81b639f3
    resourceVersion: "31479"
    uid: 048dd7ad-9849-46bc-b378-adf7428066cf
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: OrderedReady
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: cinder-scheduler
        service: cinder
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          component: cinder-scheduler
          service: cinder
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: component
                    operator: In
                    values:
                    - cinder-scheduler
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n5f4h66fh576h599h688h5dh5cfhcbh5b9h678h699h59bh5cbh7dh5ddh666h65fh7bh659hd8hdhdbh54ch57dh56fh655h5f5h548h9ch684h544h85q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-cinder-scheduler@sha256:9b872cb203a96eecc6a17a2d4bb8ff46d1466c7be3000cddd68be89f74016777
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: cinder-scheduler
          resources: {}
          securityContext:
            runAsUser: 42407
          startupProbe:
            failureThreshold: 12
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-scheduler-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/local/bin/container-scripts/healthcheck.py
          - scheduler
          - /etc/cinder/cinder.conf.d
          image: quay.io/podified-antelope-centos9/openstack-cinder-scheduler@sha256:9b872cb203a96eecc6a17a2d4bb8ff46d1466c7be3000cddd68be89f74016777
          imagePullPolicy: IfNotPresent
          name: probe
          resources: {}
          securityContext:
            runAsGroup: 42407
            runAsUser: 42407
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-scheduler-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-86971
        serviceAccountName: cinder-cinder-86971
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-86971-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-86971-config-data
        - name: config-data-custom
          secret:
            defaultMode: 420
            secretName: cinder-86971-scheduler-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: cinder-86971-scheduler-7c78fcf8b5
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updateRevision: cinder-86971-scheduler-7c78fcf8b5
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:42:20Z"
    generation: 2
    labels:
      backend: lvm-iscsi
      component: cinder-volume
      service: cinder
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:backend: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c950ac57-a66a-4067-a9bb-4cb8213c56fa"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:backend: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"cinder-volume"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MALLOC_ARENA_MAX"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MALLOC_MMAP_THRESHOLD_"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MALLOC_TRIM_THRESHOLD_"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:privileged: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/dev"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/iscsi"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/nvme"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/lib/modules"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/run"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/sys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/locks/openstack/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/locks/openstack/os-brick"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"probe"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/dev"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/iscsi"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/nvme"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/lib/modules"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/run"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/sys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/locks/openstack/cinder"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/locks/openstack/os-brick"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:hostPID: {}
              f:nodeSelector: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"dev"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-iscsi"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-nvme"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"lib-modules"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"run"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"sys"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"var-lib-cinder"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"var-locks-brick"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"var-locks-cinder"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:42:23Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:42:46Z"
    name: cinder-86971-volume-lvm-iscsi
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: CinderVolume
      name: cinder-86971-volume-lvm-iscsi
      uid: c950ac57-a66a-4067-a9bb-4cb8213c56fa
    resourceVersion: "31468"
    uid: d1d3d82f-017b-49f2-8b9c-f4f8f2bc97c6
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: OrderedReady
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        backend: lvm-iscsi
        component: cinder-volume
        service: cinder
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          backend: lvm-iscsi
          component: cinder-volume
          service: cinder
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: component
                    operator: In
                    values:
                    - cinder-volume
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n5fdh574h699h574h75h7fh57bhdhcch66bh655h674h55dhddh5dh5d7h587h5bchd7h5cfh65h694hbch58h68fh5f6h5d8h66bh58ch584hb6h58dq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: MALLOC_ARENA_MAX
            value: "1"
          - name: MALLOC_MMAP_THRESHOLD_
            value: "131072"
          - name: MALLOC_TRIM_THRESHOLD_
            value: "262144"
          image: quay.io/podified-antelope-centos9/openstack-cinder-volume@sha256:46e8a618b5c7be7e112d51c61b7a55c4ece540d5a7adc2b1718364a79d3fe60c
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: cinder-volume
          resources: {}
          securityContext:
            privileged: true
            runAsUser: 42407
          startupProbe:
            failureThreshold: 12
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/cinder
            name: var-lib-cinder
          - mountPath: /etc/nvme
            name: etc-nvme
          - mountPath: /etc/iscsi
            name: etc-iscsi
            readOnly: true
          - mountPath: /dev
            name: dev
          - mountPath: /lib/modules
            name: lib-modules
            readOnly: true
          - mountPath: /run
            name: run
          - mountPath: /sys
            name: sys
          - mountPath: /var/locks/openstack/os-brick
            name: var-locks-brick
          - mountPath: /var/locks/openstack/cinder
            name: var-locks-cinder
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-volume-lvm-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/local/bin/container-scripts/healthcheck.py
          - volume
          - /etc/cinder/cinder.conf.d
          image: quay.io/podified-antelope-centos9/openstack-cinder-volume@sha256:46e8a618b5c7be7e112d51c61b7a55c4ece540d5a7adc2b1718364a79d3fe60c
          imagePullPolicy: IfNotPresent
          name: probe
          resources: {}
          securityContext:
            runAsGroup: 42407
            runAsUser: 42407
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/cinder
            name: var-lib-cinder
          - mountPath: /etc/nvme
            name: etc-nvme
          - mountPath: /etc/iscsi
            name: etc-iscsi
            readOnly: true
          - mountPath: /dev
            name: dev
          - mountPath: /lib/modules
            name: lib-modules
            readOnly: true
          - mountPath: /run
            name: run
          - mountPath: /sys
            name: sys
          - mountPath: /var/locks/openstack/os-brick
            name: var-locks-brick
          - mountPath: /var/locks/openstack/cinder
            name: var-locks-cinder
          - mountPath: /etc/cinder/cinder.conf.d
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: cinder-volume-lvm-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        hostPID: true
        nodeSelector:
          openstack.org/cinder-lvm: ""
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-86971
        serviceAccountName: cinder-cinder-86971
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-86971-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-86971-config-data
        - hostPath:
            path: /var/lib/cinder
            type: DirectoryOrCreate
          name: var-lib-cinder
        - hostPath:
            path: /etc/nvme
            type: DirectoryOrCreate
          name: etc-nvme
        - hostPath:
            path: /etc/iscsi
            type: ""
          name: etc-iscsi
        - hostPath:
            path: /dev
            type: ""
          name: dev
        - hostPath:
            path: /lib/modules
            type: ""
          name: lib-modules
        - hostPath:
            path: /run
            type: ""
          name: run
        - hostPath:
            path: /sys
            type: ""
          name: sys
        - hostPath:
            path: /var/locks/openstack/os-brick
            type: DirectoryOrCreate
          name: var-locks-brick
        - hostPath:
            path: /var/locks/openstack/cinder
            type: DirectoryOrCreate
          name: var-locks-cinder
        - name: config-data-custom
          secret:
            defaultMode: 420
            secretName: cinder-86971-volume-lvm-iscsi-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: cinder-86971-volume-lvm-iscsi-6d7dc8fd6f
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updateRevision: cinder-86971-volume-lvm-iscsi-6d7dc8fd6f
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:41:42Z"
    generation: 3
    labels:
      component: glance-api
      glanceAPI: glance-default-external
      owner: glance-213eb-default-external
      service: glance
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:glanceAPI: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"77b7193b-3d65-418e-bb15-f3bc4958ee2b"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:glanceAPI: {}
                f:owner: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"glance-httpd"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"GLANCE_DOMAIN"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"URISCHEME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:privileged: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/run/httpd"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/glance"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/log/glance"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"glance-log"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"GLANCE_DOMAIN"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"URISCHEME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/log/glance"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"httpd-run"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:43:06Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:43:30Z"
    name: glance-213eb-default-external-api
    namespace: openstack
    ownerReferences:
    - apiVersion: glance.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: GlanceAPI
      name: glance-213eb-default-external
      uid: 77b7193b-3d65-418e-bb15-f3bc4958ee2b
    resourceVersion: "32802"
    uid: 9d6aa288-5a99-46ec-bb22-15f0d8f7e735
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: glance-api
        glanceAPI: glance-default-external
        owner: glance-213eb-default-external
        service: glance
    serviceName: glance-213eb-default-external-api
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"storage","namespace":"openstack","interface":"storage"}]'
        creationTimestamp: null
        labels:
          component: glance-api
          glanceAPI: glance-default-external
          owner: glance-213eb-default-external
          service: glance
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - glance
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - --single-child
          - --
          - /bin/sh
          - -c
          - /usr/bin/tail -n+1 -F /var/log/glance/glance-213eb-default-external.log
            2>/dev/null
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n5f8h4h5c8h589hc6h57bh654h59fh558h9hf8hc5h695h698h88h5c4h5f9h5cfh54dh558h55bh58dh5d5hfbhbfh65fhch94h689h57bhc9hc7q
          - name: GLANCE_DOMAIN
            value: glance-213eb-default-external-api.openstack.svc
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: URISCHEME
            value: HTTPS
          image: quay.io/podified-antelope-centos9/openstack-glance-api@sha256:ed912eee9adeda5c44804688cc7661695a42ab1a40fa46b28bdc819cefa98f07
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: glance-log
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsGroup: 42415
            runAsNonRoot: true
            runAsUser: 42415
            seccompProfile:
              type: RuntimeDefault
          startupProbe:
            exec:
              command:
              - /bin/true
            failureThreshold: 6
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/log/glance
            name: logs
        - args:
          - --single-child
          - --
          - /bin/bash
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n5f8h4h5c8h589hc6h57bh654h59fh558h9hf8hc5h695h698h88h5c4h5f9h5cfh54dh558h55bh58dh5d5hfbhbfh65fhch94h689h57bhc9hc7q
          - name: GLANCE_DOMAIN
            value: glance-213eb-default-external-api.openstack.svc
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: URISCHEME
            value: HTTPS
          image: quay.io/podified-antelope-centos9/openstack-glance-api@sha256:ed912eee9adeda5c44804688cc7661695a42ab1a40fa46b28bdc819cefa98f07
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: glance-httpd
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            allowPrivilegeEscalation: true
            capabilities:
              drop:
              - MKNOD
            privileged: false
            runAsGroup: 42415
            runAsUser: 42415
            seccompProfile:
              type: RuntimeDefault
          startupProbe:
            exec:
              command:
              - /bin/true
            failureThreshold: 6
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: glance-httpd-config.json
          - mountPath: /var/lib/glance
            name: glance
          - mountPath: /var/log/glance
            name: logs
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /run/httpd
            name: httpd-run
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /etc/pki/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 42415
        serviceAccount: glance-glance-213eb
        serviceAccountName: glance-glance-213eb
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 420
            secretName: glance-213eb-default-external-config-data
        - name: config-data-custom
          secret:
            defaultMode: 420
            secretName: glance-213eb-default-external-config-data
        - emptyDir: {}
          name: logs
        - name: scripts
          secret:
            defaultMode: 493
            secretName: glance-scripts
        - emptyDir: {}
          name: httpd-run
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-glance-default-public-svc
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          component: glance-api
          glanceAPI: glance-default-external
          owner: glance-213eb-default-external
          service: glance
        name: glance
        namespace: openstack
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: glance-213eb-default-external-api-74858bfbd7
    observedGeneration: 3
    readyReplicas: 1
    replicas: 1
    updateRevision: glance-213eb-default-external-api-74858bfbd7
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:41:42Z"
    generation: 3
    labels:
      component: glance-api
      glanceAPI: glance-default-internal
      owner: glance-213eb-default-internal
      service: glance
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:glanceAPI: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"f9938d4d-2a2e-414e-9c12-93a8c129c7d3"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:glanceAPI: {}
                f:owner: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"glance-httpd"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"GLANCE_DOMAIN"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"URISCHEME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:privileged: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/run/httpd"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/glance"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/log/glance"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"glance-log"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"GLANCE_DOMAIN"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"URISCHEME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/log/glance"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"httpd-run"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:43:07Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:43:30Z"
    name: glance-213eb-default-internal-api
    namespace: openstack
    ownerReferences:
    - apiVersion: glance.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: GlanceAPI
      name: glance-213eb-default-internal
      uid: f9938d4d-2a2e-414e-9c12-93a8c129c7d3
    resourceVersion: "32813"
    uid: f9fd6eb4-62ce-4fbe-9aad-318d02766f4d
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: glance-api
        glanceAPI: glance-default-internal
        owner: glance-213eb-default-internal
        service: glance
    serviceName: glance-213eb-default-internal-api
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"storage","namespace":"openstack","interface":"storage"}]'
        creationTimestamp: null
        labels:
          component: glance-api
          glanceAPI: glance-default-internal
          owner: glance-213eb-default-internal
          service: glance
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - glance
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - --single-child
          - --
          - /bin/sh
          - -c
          - /usr/bin/tail -n+1 -F /var/log/glance/glance-213eb-default-internal.log
            2>/dev/null
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n5b7h8ch5cdh565h574h555h66ch685h654h87h99h65fh7ch65h5bdh68ch5f5h5bdh5ffh56dh585hbdh64bh66bh5d4h55bh697h5c7h8ch54ch68dh684q
          - name: GLANCE_DOMAIN
            value: glance-213eb-default-internal-api.openstack.svc
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: URISCHEME
            value: HTTPS
          image: quay.io/podified-antelope-centos9/openstack-glance-api@sha256:ed912eee9adeda5c44804688cc7661695a42ab1a40fa46b28bdc819cefa98f07
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: glance-log
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsGroup: 42415
            runAsNonRoot: true
            runAsUser: 42415
            seccompProfile:
              type: RuntimeDefault
          startupProbe:
            exec:
              command:
              - /bin/true
            failureThreshold: 6
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/log/glance
            name: logs
        - args:
          - --single-child
          - --
          - /bin/bash
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n5b7h8ch5cdh565h574h555h66ch685h654h87h99h65fh7ch65h5bdh68ch5f5h5bdh5ffh56dh585hbdh64bh66bh5d4h55bh697h5c7h8ch54ch68dh684q
          - name: GLANCE_DOMAIN
            value: glance-213eb-default-internal-api.openstack.svc
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: URISCHEME
            value: HTTPS
          image: quay.io/podified-antelope-centos9/openstack-glance-api@sha256:ed912eee9adeda5c44804688cc7661695a42ab1a40fa46b28bdc819cefa98f07
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: glance-httpd
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthcheck
              port: 9292
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            allowPrivilegeEscalation: true
            capabilities:
              drop:
              - MKNOD
            privileged: false
            runAsGroup: 42415
            runAsUser: 42415
            seccompProfile:
              type: RuntimeDefault
          startupProbe:
            exec:
              command:
              - /bin/true
            failureThreshold: 6
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: glance-httpd-config.json
          - mountPath: /var/lib/glance
            name: glance
          - mountPath: /var/log/glance
            name: logs
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /run/httpd
            name: httpd-run
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /etc/pki/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 42415
        serviceAccount: glance-glance-213eb
        serviceAccountName: glance-glance-213eb
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 420
            secretName: glance-213eb-default-internal-config-data
        - name: config-data-custom
          secret:
            defaultMode: 420
            secretName: glance-213eb-default-internal-config-data
        - emptyDir: {}
          name: logs
        - name: scripts
          secret:
            defaultMode: 493
            secretName: glance-scripts
        - emptyDir: {}
          name: httpd-run
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-glance-default-internal-svc
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          component: glance-api
          glanceAPI: glance-default-internal
          owner: glance-213eb-default-internal
          service: glance
        name: glance
        namespace: openstack
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: glance-213eb-default-internal-api-685dcd8587
    observedGeneration: 3
    readyReplicas: 1
    replicas: 1
    updateRevision: glance-213eb-default-internal-api-685dcd8587
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:42:32Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"378546ae-d4d5-435a-b2b5-beb6a76e95c7"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:conductorGroup: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"dnsmasq"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:add: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"httpboot"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"ironic-conductor"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabaseHost"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DatabaseName"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DeployHTTPURL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"IngressDomain"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"IronicPassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"PodName"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PodNamespace"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"ProvisionNetwork"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"QuorumQueues"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"TransportURL"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"ironic-python-agent-init"}:
                  .: {}
                  f:env:
                    .: {}
                    k:{"name":"DEST_DIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:privileged: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"pxe-init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabaseHost"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DatabaseName"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DeployHTTPURL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"IngressDomain"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"IronicPassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"PodName"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PodNamespace"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"ProvisionNetwork"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"QuorumQueues"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"TransportURL"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:privileged: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/custom"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-custom"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-merged"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:42:32Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:44:17Z"
    name: ironic-conductor
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: IronicConductor
      name: ironic-conductor
      uid: 378546ae-d4d5-435a-b2b5-beb6a76e95c7
    resourceVersion: "33691"
    uid: da62803d-de64-488b-9882-d4b63e082864
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: OrderedReady
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: conductor
        conductorGroup: null_conductor_group_null
        service: ironic
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"ironic","namespace":"openstack","interface":"ironic"}]'
        creationTimestamp: null
        labels:
          component: conductor
          conductorGroup: null_conductor_group_null
          service: ironic
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - ironic
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n565h64dh5ffh5d6h6ch6bh557h5c4h5f9h5c7h666h9ch555h58bh66ch676h696h5ch659hb6h54chf6h676h5c5h559h57ch654hfbh55fh9fhb9h696q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor@sha256:7dc1464a072b28d5bc1e10127f898f61e85cffb63a67a51a15fd01322da295fa
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /usr/local/bin/container-scripts/live_check_conductor
            failureThreshold: 3
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 5
          name: ironic-conductor
          resources: {}
          securityContext:
            runAsUser: 0
          startupProbe:
            exec:
              command:
              - /usr/local/bin/container-scripts/live_check_conductor
            failureThreshold: 30
            periodSeconds: 2
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: ironic-conductor-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n565h64dh5ffh5d6h6ch6bh557h5c4h5f9h5c7h666h9ch555h58bh66ch676h696h5ch659hb6h54chf6h676h5c5h559h57ch654hfbh55fh9fhb9h696q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-pxe@sha256:5ebcf9bc3c064a788777232f143300a64def982588dbcff6a82e779cfacc28c4
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            tcpSocket:
              port: 8088
            timeoutSeconds: 10
          name: httpboot
          readinessProbe:
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            tcpSocket:
              port: 8088
            timeoutSeconds: 10
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: httpboot-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n565h64dh5ffh5d6h6ch6bh557h5c4h5f9h5c7h666h9ch555h58bh66ch676h696h5ch659hb6h54chf6h676h5c5h559h57ch654hfbh55fh9fhb9h696q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-pxe@sha256:5ebcf9bc3c064a788777232f143300a64def982588dbcff6a82e779cfacc28c4
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - sh
              - -c
              - ss -lun | grep :69
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 10
          name: dnsmasq
          readinessProbe:
            exec:
              command:
              - sh
              - -c
              - ss -lun | grep :69
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 10
          resources: {}
          securityContext:
            capabilities:
              add:
              - NET_ADMIN
              - NET_RAW
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: dnsmasq-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/init.sh
          command:
          - /bin/bash
          env:
          - name: IronicPassword
            valueFrom:
              secretKeyRef:
                key: IronicPassword
                name: osp-secret
          - name: PodName
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: PodNamespace
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: ProvisionNetwork
            value: ironic
          - name: TransportURL
            valueFrom:
              secretKeyRef:
                key: transport_url
                name: rabbitmq-transport-url-ironic-transport
          - name: QuorumQueues
            valueFrom:
              secretKeyRef:
                key: quorumqueues
                name: rabbitmq-transport-url-ironic-transport
                optional: true
          - name: DatabaseHost
            value: openstack.openstack.svc
          - name: DatabaseName
            value: ironic
          - name: DeployHTTPURL
            value: http://%(ProvisionNetworkIP)s:8088/
          - name: IngressDomain
            value: apps.sno.openstack.lab
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor@sha256:7dc1464a072b28d5bc1e10127f898f61e85cffb63a67a51a15fd01322da295fa
          imagePullPolicy: IfNotPresent
          name: init
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - env:
          - name: DEST_DIR
            value: /var/lib/ironic/httpboot
          image: quay.io/podified-antelope-centos9/ironic-python-agent@sha256:0dea7fa3ede253c003e819495c9c017380d89d6827460d7d98ec4d6447440797
          imagePullPolicy: IfNotPresent
          name: ironic-python-agent-init
          resources: {}
          securityContext:
            privileged: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/container-scripts/pxe-init.sh
          command:
          - /bin/bash
          env:
          - name: IronicPassword
            valueFrom:
              secretKeyRef:
                key: IronicPassword
                name: osp-secret
          - name: PodName
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: PodNamespace
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: ProvisionNetwork
            value: ironic
          - name: TransportURL
            valueFrom:
              secretKeyRef:
                key: transport_url
                name: rabbitmq-transport-url-ironic-transport
          - name: QuorumQueues
            valueFrom:
              secretKeyRef:
                key: quorumqueues
                name: rabbitmq-transport-url-ironic-transport
                optional: true
          - name: DatabaseHost
            value: openstack.openstack.svc
          - name: DatabaseName
            value: ironic
          - name: DeployHTTPURL
            value: http://%(ProvisionNetworkIP)s:8088/
          - name: IngressDomain
            value: apps.sno.openstack.lab
          image: quay.io/podified-antelope-centos9/openstack-ironic-pxe@sha256:5ebcf9bc3c064a788777232f143300a64def982588dbcff6a82e779cfacc28c4
          imagePullPolicy: IfNotPresent
          name: pxe-init
          resources: {}
          securityContext:
            privileged: true
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/config-data/custom
            name: config-data-custom
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 120
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-conductor-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: ironic-conductor-config-data
        - emptyDir: {}
          name: config-data-merged
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: config-data-custom
          secret:
            defaultMode: 416
            secretName: ironic-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          component: conductor
          conductorGroup: null_conductor_group_null
          service: ironic
        name: var-lib-ironic
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: ironic-conductor-86d576d778
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: ironic-conductor-86d576d778
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:42:59Z"
    generation: 2
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"099ffa6b-aa20-4ed7-b9fe-ef5bae558436"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"inspector-dnsmasq"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:add: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"inspector-httpboot"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"ironic-inspector"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"ironic-inspector-httpd"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                k:{"name":"ramdisk-logs"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"inspector-pxe-init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabaseHost"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DatabaseName"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"IngressDomain"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"InspectionNetwork"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"InspectorHTTPURL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"IronicInspectorPassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"PodName"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PodNamespace"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"QuorumQueues"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"TransportURL"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:add: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"ironic-python-agent-init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DEST_DIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:privileged: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"var-lib-ironic"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"var-lib-ironic-inspector-dhcp-hostsdir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:43:03Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:43:38Z"
    name: ironic-inspector
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: IronicInspector
      name: ironic-inspector
      uid: 099ffa6b-aa20-4ed7-b9fe-ef5bae558436
    resourceVersion: "32909"
    uid: 03ed7835-5e1a-460d-80fd-87b1c25eaeb1
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: inspector
        service: ironic
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"ironic","namespace":"openstack","interface":"ironic"}]'
        creationTimestamp: null
        labels:
          component: inspector
          service: ironic
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - ironic
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n84h58fh588h5cdh56fh58dh5bfh578h7ch5f9h54hc9h54fh68chch679h5c8h547h68ch57bh56fh6fh67dh56h64hf4h577h55h6dh97h8hb7q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector@sha256:ca987f85e8c33f1a9dd33dd0e8422facaf1f38aa1fa48ce8357ff541645e74db
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /v1
              port: 5050
              scheme: HTTPS
            initialDelaySeconds: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          name: ironic-inspector-httpd
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /v1
              port: 5050
              scheme: HTTPS
            initialDelaySeconds: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 0
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /v1
              port: 5050
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: httpd-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n84h58fh588h5cdh56fh58dh5bfh578h7ch5f9h54hc9h54fh68chch679h5c8h547h68ch57bh56fh6fh67dh56h64hf4h577h55h6dh97h8hb7q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector@sha256:ca987f85e8c33f1a9dd33dd0e8422facaf1f38aa1fa48ce8357ff541645e74db
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /v1
              port: 5050
              scheme: HTTPS
            initialDelaySeconds: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          name: ironic-inspector
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /v1
              port: 5050
              scheme: HTTPS
            initialDelaySeconds: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 0
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /v1
              port: 5050
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: ironic-inspector-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n84h58fh588h5cdh56fh58dh5bfh578h7ch5f9h54hc9h54fh68chch679h5c8h547h68ch57bh56fh6fh67dh56h64hf4h577h55h6dh97h8hb7q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-pxe@sha256:5ebcf9bc3c064a788777232f143300a64def982588dbcff6a82e779cfacc28c4
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            tcpSocket:
              port: 8088
            timeoutSeconds: 10
          name: inspector-httpboot
          readinessProbe:
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 30
            successThreshold: 1
            tcpSocket:
              port: 8088
            timeoutSeconds: 10
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: httpboot-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n84h58fh588h5cdh56fh58dh5bfh578h7ch5f9h54hc9h54fh68chch679h5c8h547h68ch57bh56fh6fh67dh56h64hf4h577h55h6dh97h8hb7q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector@sha256:ca987f85e8c33f1a9dd33dd0e8422facaf1f38aa1fa48ce8357ff541645e74db
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /usr/bin/pkill
                - inotifywait
          name: ramdisk-logs
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: ramdisk-logs-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n84h58fh588h5cdh56fh58dh5bfh578h7ch5f9h54hc9h54fh68chch679h5c8h547h68ch57bh56fh6fh67dh56h64hf4h577h55h6dh97h8hb7q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector@sha256:ca987f85e8c33f1a9dd33dd0e8422facaf1f38aa1fa48ce8357ff541645e74db
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - sh
              - -c
              - ss -lun | grep :69
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 10
          name: inspector-dnsmasq
          readinessProbe:
            exec:
              command:
              - sh
              - -c
              - ss -lun | grep :69
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 10
          resources: {}
          securityContext:
            capabilities:
              add:
              - NET_ADMIN
              - NET_RAW
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: dnsmasq-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - args:
          - -c
          - mkdir -p /var/lib/ironic/httpboot /var/lib/ironic/ramdisk-logs
          command:
          - /bin/bash
          env:
          - name: DEST_DIR
            value: /var/lib/ironic/httpboot
          image: quay.io/podified-antelope-centos9/ironic-python-agent@sha256:0dea7fa3ede253c003e819495c9c017380d89d6827460d7d98ec4d6447440797
          imagePullPolicy: IfNotPresent
          name: ironic-python-agent-init
          resources: {}
          securityContext:
            privileged: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - args:
          - -c
          - /usr/local/bin/container-scripts/inspector-pxe-init.sh
          command:
          - /bin/bash
          env:
          - name: IronicInspectorPassword
            valueFrom:
              secretKeyRef:
                key: IronicInspectorPassword
                name: osp-secret
          - name: PodName
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: PodNamespace
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: TransportURL
            valueFrom:
              secretKeyRef:
                key: transport_url
                name: rabbitmq-transport-url-ironic-inspector-transport
          - name: QuorumQueues
            valueFrom:
              secretKeyRef:
                key: quorumqueues
                name: rabbitmq-transport-url-ironic-inspector-transport
                optional: true
          - name: DatabaseHost
            value: openstack.openstack.svc
          - name: DatabaseName
            value: ironic_inspector
          - name: IngressDomain
            value: apps.sno.openstack.lab
          - name: InspectionNetwork
            value: ironic
          - name: InspectorHTTPURL
            value: http://%(InspectorNetworkIP)s:8088/
          image: quay.io/podified-antelope-centos9/openstack-ironic-pxe@sha256:5ebcf9bc3c064a788777232f143300a64def982588dbcff6a82e779cfacc28c4
          imagePullPolicy: IfNotPresent
          name: inspector-pxe-init
          resources: {}
          securityContext:
            capabilities:
              add:
              - SYS_CHROOT
              - SETFCAP
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 60
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-inspector-scripts
        - name: config
          secret:
            defaultMode: 416
            secretName: ironic-inspector-config-data
        - emptyDir: {}
          name: var-lib-ironic
        - emptyDir: {}
          name: var-lib-ironic-inspector-dhcp-hostsdir
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ironic-inspector-internal-svc
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ironic-inspector-public-svc
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: ironic-inspector-85445c4d5
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updateRevision: ironic-inspector-85445c4d5
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:40:03Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"df2c930a-c281-40bf-a3c9-2eda3d45fd55"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app: {}
                f:cr: {}
                f:memcached/name: {}
                f:memcached/namespace: {}
                f:memcached/uid: {}
                f:owner: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"memcached"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"POD_IPS"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":11211,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":11212,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/memcached.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/memcached.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/src"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"kolla-config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"memcached-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:40:03Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:40:44Z"
    name: memcached
    namespace: openstack
    ownerReferences:
    - apiVersion: memcached.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Memcached
      name: memcached
      uid: df2c930a-c281-40bf-a3c9-2eda3d45fd55
    resourceVersion: "27302"
    uid: 6fba6010-02c3-45e2-9517-355ea3824cee
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: OrderedReady
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: memcached
        cr: memcached
        owner: infra-operator
        service: memcached
    serviceName: memcached
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: memcached
          cr: memcached
          memcached/name: memcached
          memcached/namespace: openstack
          memcached/uid: df2c930a-c281-40bf-a3c9-2eda3d45fd55
          owner: infra-operator
          service: memcached
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - memcached
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - command:
          - /usr/bin/dumb-init
          - --
          - /usr/local/bin/kolla_start
          env:
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: POD_IPS
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: status.podIPs
          - name: CONFIG_HASH
            value: n7dh7ch577h57h597h56hd4h547h5d5hfch667h74h6h5b9h5ddh89h5b4h5dfh66fhb9h67dh68dhd6h567h8ch587h645h5c7h678h555h89hf4q
          image: quay.io/podified-antelope-centos9/openstack-memcached@sha256:f434d78bf81ef3a2087c435011ff995697fc8e53555ba27c2b8d2425e38bda44
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            tcpSocket:
              port: 11211
            timeoutSeconds: 5
          name: memcached
          ports:
          - containerPort: 11211
            name: memcached
            protocol: TCP
          - containerPort: 11212
            name: memcached-tls
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            tcpSocket:
              port: 11211
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsGroup: 42457
            runAsUser: 42457
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/kolla/config_files/src
            name: config-data
            readOnly: true
          - mountPath: /var/lib/kolla/config_files
            name: kolla-config
            readOnly: true
          - mountPath: /var/lib/config-data/tls/certs/memcached.crt
            name: memcached-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/memcached.key
            name: memcached-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: memcached-memcached
        serviceAccountName: memcached-memcached
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: config.json
              path: config.json
            name: memcached-config-data
          name: kolla-config
        - configMap:
            defaultMode: 420
            items:
            - key: memcached
              path: etc/sysconfig/memcached
            name: memcached-config-data
          name: config-data
        - name: memcached-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-memcached-svc
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: memcached-5c456dbfb6
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: memcached-5c456dbfb6
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:44:06Z"
    generation: 4
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"8a205dbf-ca75-48e9-b938-f7b6cdafe7e5"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-api-api"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/internal.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/public.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/internal.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/public.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/log/nova"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"nova-api-log"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/log/nova"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"internal-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"public-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:45:04Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:45:27Z"
    name: nova-api
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaAPI
      name: nova-api
      uid: 8a205dbf-ca75-48e9-b938-f7b6cdafe7e5
    resourceVersion: "34892"
    uid: fd28cbf2-52d3-4527-92ce-486855152515
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: nova-api
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          service: nova-api
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-api
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - --single-child
          - --
          - /bin/sh
          - -c
          - /usr/bin/tail -n+1 -F /var/log/nova/nova-api.log 2>/dev/null
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: ncbh68h5cdh5c6h687h85h55bh546hf7hf5h68bh64h68bh596h5b9h6fhb6h5f7h95h85h687h658h56dh574h57bh597h6fhcbhc5h6h66fh554q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-api@sha256:c7906ad2cf5a1467684690a7612c36700d2c98ac2398ac588cb297b33a7f609c
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8774
              scheme: HTTPS
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: nova-api-log
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8774
              scheme: HTTPS
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            runAsUser: 42436
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /
              port: 8774
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/log/nova
            name: logs
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: ncbh68h5cdh5c6h687h85h55bh546hf7hf5h68bh64h68bh596h5b9h6fhb6h5f7h95h85h687h658h56dh574h57bh597h6fhcbhc5h6h66fh554q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-api@sha256:c7906ad2cf5a1467684690a7612c36700d2c98ac2398ac588cb297b33a7f609c
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8774
              scheme: HTTPS
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          name: nova-api-api
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8774
              scheme: HTTPS
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 30
          resources: {}
          securityContext:
            runAsUser: 42436
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /
              port: 8774
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/log/nova
            name: logs
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-api-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/internal.crt
            name: internal-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/internal.key
            name: internal-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/public.crt
            name: public-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/public.key
            name: public-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-api-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: internal-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-nova-internal-svc
        - name: public-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-nova-public-svc
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-api-86dd498cfb
    observedGeneration: 4
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-api-86dd498cfb
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:43:55Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"a3d2f96a-1d5c-4541-aba5-58d85b9014a4"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:cell: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-cell0-conductor-conductor"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:43:55Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:44:05Z"
    name: nova-cell0-conductor
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell0-conductor
      uid: a3d2f96a-1d5c-4541-aba5-58d85b9014a4
    resourceVersion: "33175"
    uid: eb311114-b266-479d-9c6d-7cd5b865c849
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        cell: cell0
        service: nova-conductor
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          cell: cell0
          service: nova-conductor
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-cell0-conductor
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n5d6h5d6h54bh66h5ffh98h684h56h89hcchd7h5cch59h575h79h56hd4hddh5c7h5ch97h549h8dhcch644h56fh65ch5h568h64hf9h5d6q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:3eef424a6a774edf70efa63eb6b5c669b23d9cc047c1dd9d18636b549206459e
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-conductor
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: nova-cell0-conductor-conductor
          readinessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-conductor
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell0-conductor-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-cell0-conductor-66947ccf7f
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-cell0-conductor-66947ccf7f
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:44:06Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"f87841dc-fccf-45f5-bd29-a3c1eefeb0c1"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:cell: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-cell1-compute-ironic-compute-compute"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:44:06Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:44:25Z"
    name: nova-cell1-compute-ironic-compute
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaCompute
      name: nova-cell1-compute-ironic-compute
      uid: f87841dc-fccf-45f5-bd29-a3c1eefeb0c1
    resourceVersion: "33813"
    uid: 0bad8d17-bcb7-4ded-a2a2-9f1f5ec45743
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        cell: cell1
        service: nova-compute
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          cell: cell1
          service: nova-compute
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-cell1-compute-ironic-compute
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n5fdh5ffh54chd4h5bfhd8hf9h58bh675h584hdbh5cch5dbhc7h698h5b9h64chcbh54fh64h567h6ch5bdh5b8h574h64h79hc6h5bbh58bh5bfh594q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-compute@sha256:c37f1275cfc51fc2227bf56a2be6262158f62fb30ca651f154bed25112d6d355
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-compute
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: nova-cell1-compute-ironic-compute-compute
          readinessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-compute
            failureThreshold: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-compute-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-compute-ironic-compute-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-cell1-compute-ironic-compute-c65f5f674
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-cell1-compute-ironic-compute-c65f5f674
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:44:25Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"aad5fce6-91d0-4257-96e4-b91ededd4f74"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:cell: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-cell1-conductor-conductor"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:44:25Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:44:36Z"
    name: nova-cell1-conductor
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell1-conductor
      uid: aad5fce6-91d0-4257-96e4-b91ededd4f74
    resourceVersion: "34001"
    uid: d9189699-82b1-43ce-b7f7-70fc9e261484
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        cell: cell1
        service: nova-conductor
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          cell: cell1
          service: nova-conductor
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-cell1-conductor
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n588h665h5fch544h698h584h58dh59bh5bdh59h669hf5h55fh57chffh5d4hb8h66h556h5b6hb6h69h596h55ch86hbch5fdh8bh5b8h59dh688h5c4q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor@sha256:3eef424a6a774edf70efa63eb6b5c669b23d9cc047c1dd9d18636b549206459e
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-conductor
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: nova-cell1-conductor-conductor
          readinessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-conductor
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-conductor-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-cell1-conductor-68b48745d5
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-cell1-conductor-68b48745d5
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:44:06Z"
    generation: 2
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"297662b1-92ac-4721-830f-5e06a996ec62"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:cell: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-cell1-novncproxy-novncproxy"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/nova-novncproxy.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/vencrypt.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/nova-novncproxy.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/vencrypt.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"nova-novncproxy-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"vencrypt-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:44:10Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:44:54Z"
    name: nova-cell1-novncproxy
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaNoVNCProxy
      name: nova-cell1-novncproxy
      uid: 297662b1-92ac-4721-830f-5e06a996ec62
    resourceVersion: "34363"
    uid: 9928b2ae-250b-4135-995e-321535b683f3
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        cell: cell1
        service: nova-novncproxy
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          cell: cell1
          service: nova-novncproxy
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-cell1-novncproxy
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n568hcdh667h684h647h66bh8h69h576h5f9h84h65fh6bh686h589h679h574h8fh5dfh88h579h656h9h56fhc5h5cch5bdh587h5ffh59bhf7hdfq
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-novncproxy@sha256:8962932efdb727ae0430f64b608878a1b93179b46dc26fd4f5d38c8eccc00f5d
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /vnc_lite.html
              port: 6080
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: nova-cell1-novncproxy-novncproxy
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /vnc_lite.html
              port: 6080
              scheme: HTTPS
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /vnc_lite.html
              port: 6080
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-novncproxy-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/nova-novncproxy.crt
            name: nova-novncproxy-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/nova-novncproxy.key
            name: nova-novncproxy-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /var/lib/config-data/tls/certs/vencrypt.crt
            name: vencrypt-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/vencrypt.key
            name: vencrypt-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-novncproxy-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: nova-novncproxy-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-nova-novncproxy-cell1-public-svc
        - name: vencrypt-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-nova-novncproxy-cell1-vencrypt
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-cell1-novncproxy-84794967cf
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-cell1-novncproxy-84794967cf
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:44:06Z"
    generation: 4
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"dd6578b5-2f3f-4136-a472-13117a4c68d5"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-metadata-log"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/log/nova"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"nova-metadata-metadata"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/nova-metadata.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/nova-metadata.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/log/nova"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"nova-metadata-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:45:04Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:45:30Z"
    name: nova-metadata
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaMetadata
      name: nova-metadata
      uid: dd6578b5-2f3f-4136-a472-13117a4c68d5
    resourceVersion: "34939"
    uid: 9d9dba85-1876-4ddf-b9b1-0344ce15b0f6
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: nova-metadata
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          service: nova-metadata
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-metadata
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - --single-child
          - --
          - /bin/sh
          - -c
          - /usr/bin/tail -n+1 -F /var/log/nova/nova-metadata.log 2>/dev/null
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n655h668h7ch598h5c6h5f8h6bh5b4h644hddh7ch59ch5dbhbdh569h666h5b7h7ch88h566h5h577h5d7h6hc8h675h5f7hcdh64ch5d6h8ch5f9q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-api@sha256:c7906ad2cf5a1467684690a7612c36700d2c98ac2398ac588cb297b33a7f609c
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8775
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: nova-metadata-log
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8775
              scheme: HTTPS
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /
              port: 8775
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/log/nova
            name: logs
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n655h668h7ch598h5c6h5f8h6bh5b4h644hddh7ch59ch5dbhbdh569h666h5b7h7ch88h566h5h577h5d7h6hc8h675h5f7hcdh64ch5d6h8ch5f9q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-api@sha256:c7906ad2cf5a1467684690a7612c36700d2c98ac2398ac588cb297b33a7f609c
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8775
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: nova-metadata-metadata
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8775
              scheme: HTTPS
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          startupProbe:
            failureThreshold: 6
            httpGet:
              path: /
              port: 8775
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/log/nova
            name: logs
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-metadata-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /var/lib/config-data/tls/certs/nova-metadata.crt
            name: nova-metadata-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/nova-metadata.key
            name: nova-metadata-tls-certs
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-metadata-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: nova-metadata-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-nova-metadata-internal-svc
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-metadata-9484b646c
    observedGeneration: 4
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-metadata-9484b646c
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:44:06Z"
    generation: 3
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"7ea2e8f3-0422-4400-961d-3ce968c28c61"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"nova-scheduler-scheduler"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:45:04Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:45:22Z"
    name: nova-scheduler
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaScheduler
      name: nova-scheduler
      uid: 7ea2e8f3-0422-4400-961d-3ce968c28c61
    resourceVersion: "34846"
    uid: b11bcb08-4116-452c-a875-2c3bd037387a
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: nova-scheduler
    serviceName: ""
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          service: nova-scheduler
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - nova-scheduler
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CONFIG_HASH
            value: n5fh55bh675hf9h556h659h6h599h656h657h5bdh598h54h9bh64bh5fhch87h55hbhc6h58ch5dh58ch5f4h5c9h595h65bh5dh5bdh65ch8q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-scheduler@sha256:c9b4945c93b9e450adbdb035f59d0f911b9e9c22b2ad694c58e37c43e3e8d697
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-scheduler
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: nova-scheduler-scheduler
          readinessProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-scheduler
            failureThreshold: 3
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          securityContext:
            runAsUser: 42436
          startupProbe:
            exec:
              command:
              - /usr/bin/pgrep
              - -r
              - DRST
              - nova-scheduler
            failureThreshold: 6
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-scheduler-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-scheduler-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: nova-scheduler-798dcb8d75
    observedGeneration: 3
    readyReplicas: 1
    replicas: 1
    updateRevision: nova-scheduler-798dcb8d75
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:40:02Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"c144a939-ca63-459e-b324-96921f4d5725"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app: {}
                f:cr: {}
                f:galera/name: {}
                f:galera/namespace: {}
                f:galera/uid: {}
                f:owner: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"galera"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CR_CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":3306,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":4567,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/generated"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/galera.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/galera.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/mysql"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"mysql-bootstrap"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/generated"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/mysql"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-default"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"config-data-generated"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"galera-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"kolla-config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:40:02Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:40:50Z"
    name: openstack-cell1-galera
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Galera
      name: openstack-cell1
      uid: c144a939-ca63-459e-b324-96921f4d5725
    resourceVersion: "27600"
    uid: 0ecdfb08-2872-4b14-8f4b-3960eb0e6219
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: galera
        cr: galera-openstack-cell1
        galera/name: openstack-cell1
        galera/namespace: openstack
        galera/uid: c144a939-ca63-459e-b324-96921f4d5725
        owner: mariadb-operator
        service: openstack-cell1-galera
    serviceName: openstack-cell1-galera
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: galera
          cr: galera-openstack-cell1
          galera/name: openstack-cell1
          galera/namespace: openstack
          galera/uid: c144a939-ca63-459e-b324-96921f4d5725
          owner: mariadb-operator
          service: openstack-cell1-galera
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - openstack-cell1-galera
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - command:
          - /usr/bin/dumb-init
          - --
          - /usr/local/bin/kolla_start
          env:
          - name: CR_CONFIG_HASH
            value: ndh66h5dch56ch5b9h594h675h96h75h5f8h659h57dh8ch657h54h696h568h59ch568h5ddh64fh94hb5h594h645h695hc9h65ch55dh5d7h579h4q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:763d1f1e8a1cf877c151c59609960fd2fa29e7e50001f8818122a2d51878befa
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /bin/bash
                - /var/lib/operator-scripts/mysql_shutdown.sh
          livenessProbe:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_probe.sh
              - liveness
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          name: galera
          ports:
          - containerPort: 3306
            name: mysql
            protocol: TCP
          - containerPort: 4567
            name: galera
            protocol: TCP
          readinessProbe:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_probe.sh
              - readiness
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources: {}
          startupProbe:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_probe.sh
              - startup
              - "240"
            failureThreshold: 1
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 250
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/mysql
            name: mysql-db
            subPath: mysql
          - mountPath: /var/lib/config-data/default
            name: config-data-default
            readOnly: true
          - mountPath: /var/lib/config-data/generated
            name: config-data-generated
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
          - mountPath: /var/lib/kolla/config_files
            name: kolla-config
            readOnly: true
          - mountPath: /var/lib/config-data/tls/certs/galera.crt
            name: galera-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/galera.key
            name: galera-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - command:
          - bash
          - /var/lib/operator-scripts/mysql_bootstrap.sh
          env:
          - name: KOLLA_BOOTSTRAP
            value: "True"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:763d1f1e8a1cf877c151c59609960fd2fa29e7e50001f8818122a2d51878befa
          imagePullPolicy: IfNotPresent
          name: mysql-bootstrap
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/mysql
            name: mysql-db
            subPath: mysql
          - mountPath: /var/lib/config-data/default
            name: config-data-default
            readOnly: true
          - mountPath: /var/lib/config-data/generated
            name: config-data-generated
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
          - mountPath: /var/lib/kolla/config_files
            name: kolla-config
            readOnly: true
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: config.json
              path: config.json
            name: openstack-cell1-config-data
          name: kolla-config
        - emptyDir: {}
          name: config-data-generated
        - configMap:
            defaultMode: 420
            items:
            - key: galera.cnf.in
              path: galera.cnf.in
            - key: galera_custom.cnf.in
              path: galera_custom.cnf.in
            - key: galera_tls.cnf.in
              path: galera_tls.cnf.in
            name: openstack-cell1-config-data
          name: config-data-default
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_bootstrap.sh
              path: mysql_bootstrap.sh
            - key: mysql_probe.sh
              path: mysql_probe.sh
            - key: mysql_shutdown.sh
              path: mysql_shutdown.sh
            - key: detect_last_commit.sh
              path: detect_last_commit.sh
            - key: detect_gcomm_and_start.sh
              path: detect_gcomm_and_start.sh
            - key: mysql_wsrep_notify.sh
              path: mysql_wsrep_notify.sh
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
        - name: galera-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-galera-openstack-cell1-svc
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          app: galera
          cr: galera-openstack-cell1
          galera/name: openstack-cell1
          galera/namespace: openstack
          galera/uid: c144a939-ca63-459e-b324-96921f4d5725
          owner: mariadb-operator
          service: openstack-cell1-galera
        name: mysql-db
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 5G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: openstack-cell1-galera-8465b8796c
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: openstack-cell1-galera-8465b8796c
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:40:00Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"80d974ea-6a5b-49d2-a1a2-0ef30df7c42c"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app: {}
                f:cr: {}
                f:galera/name: {}
                f:galera/namespace: {}
                f:galera/uid: {}
                f:owner: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"galera"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CR_CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":3306,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":4567,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/generated"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/config-data/tls/certs/galera.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/tls/private/galera.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/mysql"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"mysql-bootstrap"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/generated"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/mysql"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-default"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"config-data-generated"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"galera-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"kolla-config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:40:00Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:40:49Z"
    name: openstack-galera
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Galera
      name: openstack
      uid: 80d974ea-6a5b-49d2-a1a2-0ef30df7c42c
    resourceVersion: "27581"
    uid: 88f84a52-d03e-4427-94fc-30771835be9f
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: galera
        cr: galera-openstack
        galera/name: openstack
        galera/namespace: openstack
        galera/uid: 80d974ea-6a5b-49d2-a1a2-0ef30df7c42c
        owner: mariadb-operator
        service: openstack-galera
    serviceName: openstack-galera
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: galera
          cr: galera-openstack
          galera/name: openstack
          galera/namespace: openstack
          galera/uid: 80d974ea-6a5b-49d2-a1a2-0ef30df7c42c
          owner: mariadb-operator
          service: openstack-galera
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - openstack-galera
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - command:
          - /usr/bin/dumb-init
          - --
          - /usr/local/bin/kolla_start
          env:
          - name: CR_CONFIG_HASH
            value: n696hfh669h647h695h78h556hbh586h56dhbchdfhb7h658h65fh659h67dh686h576h96h5d8hcdh97h659h95h695h589h545h5b4hd6h8h685q
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:763d1f1e8a1cf877c151c59609960fd2fa29e7e50001f8818122a2d51878befa
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /bin/bash
                - /var/lib/operator-scripts/mysql_shutdown.sh
          livenessProbe:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_probe.sh
              - liveness
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          name: galera
          ports:
          - containerPort: 3306
            name: mysql
            protocol: TCP
          - containerPort: 4567
            name: galera
            protocol: TCP
          readinessProbe:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_probe.sh
              - readiness
            failureThreshold: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources: {}
          startupProbe:
            exec:
              command:
              - /bin/bash
              - /var/lib/operator-scripts/mysql_probe.sh
              - startup
              - "240"
            failureThreshold: 1
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 250
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/mysql
            name: mysql-db
            subPath: mysql
          - mountPath: /var/lib/config-data/default
            name: config-data-default
            readOnly: true
          - mountPath: /var/lib/config-data/generated
            name: config-data-generated
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
          - mountPath: /var/lib/kolla/config_files
            name: kolla-config
            readOnly: true
          - mountPath: /var/lib/config-data/tls/certs/galera.crt
            name: galera-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /var/lib/config-data/tls/private/galera.key
            name: galera-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - command:
          - bash
          - /var/lib/operator-scripts/mysql_bootstrap.sh
          env:
          - name: KOLLA_BOOTSTRAP
            value: "True"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-mariadb@sha256:763d1f1e8a1cf877c151c59609960fd2fa29e7e50001f8818122a2d51878befa
          imagePullPolicy: IfNotPresent
          name: mysql-bootstrap
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/mysql
            name: mysql-db
            subPath: mysql
          - mountPath: /var/lib/config-data/default
            name: config-data-default
            readOnly: true
          - mountPath: /var/lib/config-data/generated
            name: config-data-generated
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
          - mountPath: /var/lib/kolla/config_files
            name: kolla-config
            readOnly: true
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: config.json
              path: config.json
            name: openstack-config-data
          name: kolla-config
        - emptyDir: {}
          name: config-data-generated
        - configMap:
            defaultMode: 420
            items:
            - key: galera.cnf.in
              path: galera.cnf.in
            - key: galera_custom.cnf.in
              path: galera_custom.cnf.in
            - key: galera_tls.cnf.in
              path: galera_tls.cnf.in
            name: openstack-config-data
          name: config-data-default
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_bootstrap.sh
              path: mysql_bootstrap.sh
            - key: mysql_probe.sh
              path: mysql_probe.sh
            - key: mysql_shutdown.sh
              path: mysql_shutdown.sh
            - key: detect_last_commit.sh
              path: detect_last_commit.sh
            - key: detect_gcomm_and_start.sh
              path: detect_gcomm_and_start.sh
            - key: mysql_wsrep_notify.sh
              path: mysql_wsrep_notify.sh
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
        - name: galera-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-galera-openstack-svc
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          app: galera
          cr: galera-openstack
          galera/name: openstack
          galera/namespace: openstack
          galera/uid: 80d974ea-6a5b-49d2-a1a2-0ef30df7c42c
          owner: mariadb-operator
          service: openstack-galera
        name: mysql-db
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 5G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: openstack-galera-7fcfd49b
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: openstack-galera-7fcfd49b
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:40:40Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"58c2fc70-c732-42bf-b037-c2b8ce474b5c"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"openstack-network-exporter"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OPENSTACK_NETWORK_EXPORTER_YAML"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovnmetrics.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/ovnmetrics.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"ovn-northd"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OVN_RUNDIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"certs"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"certs_metrics"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"ovnnorthd-config"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"ovnnorthd-scripts"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"tls-ca-bundle.pem"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndb.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/ovndb.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"metrics-certs-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"ovn-northd-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"ovn-rundir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:40:40Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:41:00Z"
    name: ovn-northd
    namespace: openstack
    ownerReferences:
    - apiVersion: ovn.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: OVNNorthd
      name: ovnnorthd
      uid: 58c2fc70-c732-42bf-b037-c2b8ce474b5c
    resourceVersion: "27893"
    uid: 4b4b31ee-80d1-4491-917a-93a5f73e5027
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: ovn-northd
    serviceName: ovn-northd
    template:
      metadata:
        creationTimestamp: null
        labels:
          service: ovn-northd
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - ovn-northd
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - -vfile:off
          - -vconsole:info
          - --n-threads=1
          - --ovnnb-db=ssl:ovsdbserver-nb-0.openstack.svc.cluster.local:6641
          - --ovnsb-db=ssl:ovsdbserver-sb-0.openstack.svc.cluster.local:6642
          - --certificate=/etc/pki/tls/certs/ovndb.crt
          - --private-key=/etc/pki/tls/private/ovndb.key
          - --ca-cert=/etc/pki/tls/certs/ovndbca.crt
          command:
          - /usr/bin/ovn-northd
          env:
          - name: CONFIG_HASH
            value: n5fhbbh55dh88h5bchbfh576h5fh55ch8ch698h699h55h8h64dh6ch5dchcdh589h58dhdbhd6h699h698h5cdh7ch9fh5cbh6bh589h55fh57q
          - name: OVN_RUNDIR
            value: /tmp
          - name: certs
            value: n6fh655h88h577h6fh5bdh79h85h555h5d4h547h66fh667h548h666h9ch5dh5bh59h5b8h4h59h55h9ch654h574h647h99h59h56ch655hdbq
          - name: certs_metrics
            value: n86h665h556h97h9bh64h6dh697h5b4h585h64ch66bh685h6h56ch5dh556h556h548hc6hf4h568h647h65dh547h6fh66bhbfh5c9hc8h6h5dq
          - name: ovnnorthd-config
            value: n5c8h7ch56bh8dh8hc4h5dch9dh68h6bhb7h598h549h5dbh66fh6bh5b4h5cch5d6h55ch57fhfch588h89h5ddh5d6h65bh65bh8dhc4h67dh569q
          - name: ovnnorthd-scripts
            value: n664hd8h66ch58dh64hc9h66bhd4h558h697h67bh557hdch664h567h669h555h696h556h556h5fh5bh569hbh665h9dh4h9bh564hc8h5b7h5c4q
          - name: tls-ca-bundle.pem
            value: n84h598h58hd6h5f5h594hcfh96hb7h87h5c6h66dh94h57dh568h65chf4hc5hfch59fh565h96h54dh597h59fhb7h584hc9h5c6h659h5b8h5dq
          image: quay.io/podified-antelope-centos9/openstack-ovn-northd@sha256:48da08c4e3dd579112045aaf6840563e42462346fedbcaaef7258caeed2406f0
          imagePullPolicy: IfNotPresent
          livenessProbe:
            exec:
              command:
              - /usr/local/bin/container-scripts/status_check.sh
            failureThreshold: 3
            initialDelaySeconds: 10
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 15
          name: ovn-northd
          readinessProbe:
            exec:
              command:
              - /usr/local/bin/container-scripts/status_check.sh
            failureThreshold: 3
            initialDelaySeconds: 10
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 15
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /tmp
            name: ovn-rundir
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /etc/pki/tls/certs/ovndb.crt
            name: ovn-northd-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/ovndb.key
            name: ovn-northd-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/ovndbca.crt
            name: ovn-northd-tls-certs
            readOnly: true
            subPath: ca.crt
        - command:
          - /app/openstack-network-exporter
          env:
          - name: OPENSTACK_NETWORK_EXPORTER_YAML
            value: /etc/config/openstack-network-exporter.yaml
          - name: CONFIG_HASH
            value: n5fhbbh55dh88h5bchbfh576h5fh55ch8ch698h699h55h8h64dh6ch5dchcdh589h58dhdbhd6h699h698h5cdh7ch9fh5cbh6bh589h55fh57q
          image: quay.io/openstack-k8s-operators/openstack-network-exporter@sha256:156f95f51d0a91422548c574e96ee37f07a200c948e173b22523982f24f1e79c
          imagePullPolicy: IfNotPresent
          name: openstack-network-exporter
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /tmp
            name: ovn-rundir
          - mountPath: /etc/config
            name: config
            readOnly: true
          - mountPath: /etc/pki/tls/certs/ovnmetrics.crt
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/ovnmetrics.key
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/ovndbca.crt
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: ca.crt
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ovnnorthd-ovnnorthd
        serviceAccountName: ovnnorthd-ovnnorthd
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 493
            name: ovnnorthd-scripts
          name: scripts
        - emptyDir: {}
          name: ovn-rundir
        - configMap:
            defaultMode: 493
            name: ovnnorthd-config
          name: config
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: ovn-northd-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ovnnorthd-ovndbs
        - name: metrics-certs-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ovn-metrics
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: ovn-northd-64f4b97856
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: ovn-northd-64f4b97856
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:40:10Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"301a1cae-b364-4f25-aca8-ce4755ac7b03"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"openstack-network-exporter"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OPENSTACK_NETWORK_EXPORTER_YAML"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovnmetrics.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/ovnmetrics.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"ovsdbserver-nb"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OVN_LOGDIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OVN_RUNDIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/ovn"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndb.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/ovndb.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"metrics-certs-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"ovsdb-rundir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"ovsdbserver-nb-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:40:10Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:40:39Z"
    name: ovsdbserver-nb
    namespace: openstack
    ownerReferences:
    - apiVersion: ovn.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: OVNDBCluster
      name: ovndbcluster-nb
      uid: 301a1cae-b364-4f25-aca8-ce4755ac7b03
    resourceVersion: "27208"
    uid: afc9fe2c-1074-462d-9c77-540e8b456806
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: ovsdbserver-nb
    serviceName: ovsdbserver-nb
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"internalapi","namespace":"openstack","interface":"internalapi"}]'
        creationTimestamp: null
        labels:
          service: ovsdbserver-nb
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - ovsdbserver-nb
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - /usr/local/bin/container-scripts/setup.sh
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: nb9h97h669h79h5dfh5c5h694h67h64ch5d4h547hb7h5bdh54bh578h556h5dbh584hf4h5d9h67ch87h57fh54bh56bh697h687h596h58bhf7h559h646q
          - name: OVN_LOGDIR
            value: /tmp
          - name: OVN_RUNDIR
            value: /tmp
          image: quay.io/podified-antelope-centos9/openstack-ovn-nb-db-server@sha256:2f232911af0323066a07ba977e4fe2b28c1a3e78fe7032365517c1297dc71d11
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /usr/local/bin/container-scripts/cleanup.sh
          livenessProbe:
            exec:
              command:
              - /usr/bin/pidof
              - ovsdb-server
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: ovsdbserver-nb
          readinessProbe:
            exec:
              command:
              - /usr/bin/pidof
              - ovsdb-server
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          startupProbe:
            exec:
              command:
              - /usr/bin/pidof
              - ovsdb-server
            failureThreshold: 20
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /etc/ovn
            name: ovndbcluster-nb-etc-ovn
          - mountPath: /tmp
            name: ovsdb-rundir
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /etc/pki/tls/certs/ovndb.crt
            name: ovsdbserver-nb-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/ovndb.key
            name: ovsdbserver-nb-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/ovndbca.crt
            name: ovsdbserver-nb-tls-certs
            readOnly: true
            subPath: ca.crt
        - command:
          - /app/openstack-network-exporter
          env:
          - name: OPENSTACK_NETWORK_EXPORTER_YAML
            value: /etc/config/openstack-network-exporter.yaml
          - name: CONFIG_HASH
            value: nb9h97h669h79h5dfh5c5h694h67h64ch5d4h547hb7h5bdh54bh578h556h5dbh584hf4h5d9h67ch87h57fh54bh56bh697h687h596h58bhf7h559h646q
          image: quay.io/openstack-k8s-operators/openstack-network-exporter@sha256:156f95f51d0a91422548c574e96ee37f07a200c948e173b22523982f24f1e79c
          imagePullPolicy: IfNotPresent
          name: openstack-network-exporter
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /tmp
            name: ovsdb-rundir
          - mountPath: /etc/config
            name: config
            readOnly: true
          - mountPath: /etc/pki/tls/certs/ovnmetrics.crt
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/ovnmetrics.key
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/ovndbca.crt
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: ca.crt
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ovncluster-ovndbcluster-nb
        serviceAccountName: ovncluster-ovndbcluster-nb
        terminationGracePeriodSeconds: 300
        volumes:
        - configMap:
            defaultMode: 493
            name: ovndbcluster-nb-scripts
          name: scripts
        - emptyDir: {}
          name: ovsdb-rundir
        - configMap:
            defaultMode: 493
            name: ovndbcluster-nb-config
          name: config
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: ovsdbserver-nb-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ovndbcluster-nb-ovndbs
        - name: metrics-certs-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ovn-metrics
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          owner: ovndbcluster-nb
          service: ovsdbserver-nb
        name: ovndbcluster-nb-etc-ovn
        namespace: openstack
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: ovsdbserver-nb-69fbdcf778
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: ovsdbserver-nb-69fbdcf778
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:40:11Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"429ca52e-c3e4-453b-90d9-78926fade559"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"openstack-network-exporter"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OPENSTACK_NETWORK_EXPORTER_YAML"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovnmetrics.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/ovnmetrics.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"ovsdbserver-sb"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OVN_LOGDIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OVN_RUNDIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources: {}
                  f:startupProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/ovn"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndb.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/certs/ovndbca.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/tls/private/ovndb.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"metrics-certs-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"ovsdb-rundir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"ovsdbserver-sb-tls-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:40:11Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:40:39Z"
    name: ovsdbserver-sb
    namespace: openstack
    ownerReferences:
    - apiVersion: ovn.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: OVNDBCluster
      name: ovndbcluster-sb
      uid: 429ca52e-c3e4-453b-90d9-78926fade559
    resourceVersion: "27220"
    uid: 93aa41ec-d540-4b9b-960a-0c3188708e7f
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        service: ovsdbserver-sb
    serviceName: ovsdbserver-sb
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"internalapi","namespace":"openstack","interface":"internalapi"}]'
        creationTimestamp: null
        labels:
          service: ovsdbserver-sb
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: service
                    operator: In
                    values:
                    - ovsdbserver-sb
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - args:
          - /usr/local/bin/container-scripts/setup.sh
          command:
          - /usr/bin/dumb-init
          env:
          - name: CONFIG_HASH
            value: n5fch569h57fh559h655h5f5h667h589h7dh5cdh59chf9h59hbdh58bh54h576h65h5b5h56fh558h8dh669h645h67ch64ch579h69h5dch64fh557h5b9q
          - name: OVN_LOGDIR
            value: /tmp
          - name: OVN_RUNDIR
            value: /tmp
          image: quay.io/podified-antelope-centos9/openstack-ovn-sb-db-server@sha256:812985ffe0b6b538838297b37df5bd7a8be92b372465f939f2588b7f54690e63
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /usr/local/bin/container-scripts/cleanup.sh
          livenessProbe:
            exec:
              command:
              - /usr/bin/pidof
              - ovsdb-server
            failureThreshold: 3
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          name: ovsdbserver-sb
          readinessProbe:
            exec:
              command:
              - /usr/bin/pidof
              - ovsdb-server
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          resources: {}
          startupProbe:
            exec:
              command:
              - /usr/bin/pidof
              - ovsdb-server
            failureThreshold: 20
            initialDelaySeconds: 3
            periodSeconds: 3
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /etc/ovn
            name: ovndbcluster-sb-etc-ovn
          - mountPath: /tmp
            name: ovsdb-rundir
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          - mountPath: /etc/pki/tls/certs/ovndb.crt
            name: ovsdbserver-sb-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/ovndb.key
            name: ovsdbserver-sb-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/ovndbca.crt
            name: ovsdbserver-sb-tls-certs
            readOnly: true
            subPath: ca.crt
        - command:
          - /app/openstack-network-exporter
          env:
          - name: OPENSTACK_NETWORK_EXPORTER_YAML
            value: /etc/config/openstack-network-exporter.yaml
          - name: CONFIG_HASH
            value: n5fch569h57fh559h655h5f5h667h589h7dh5cdh59chf9h59hbdh58bh54h576h65h5b5h56fh558h8dh669h645h67ch64ch579h69h5dch64fh557h5b9q
          image: quay.io/openstack-k8s-operators/openstack-network-exporter@sha256:156f95f51d0a91422548c574e96ee37f07a200c948e173b22523982f24f1e79c
          imagePullPolicy: IfNotPresent
          name: openstack-network-exporter
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /tmp
            name: ovsdb-rundir
          - mountPath: /etc/config
            name: config
            readOnly: true
          - mountPath: /etc/pki/tls/certs/ovnmetrics.crt
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/pki/tls/private/ovnmetrics.key
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: tls.key
          - mountPath: /etc/pki/tls/certs/ovndbca.crt
            name: metrics-certs-tls-certs
            readOnly: true
            subPath: ca.crt
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ovncluster-ovndbcluster-sb
        serviceAccountName: ovncluster-ovndbcluster-sb
        terminationGracePeriodSeconds: 300
        volumes:
        - configMap:
            defaultMode: 493
            name: ovndbcluster-sb-scripts
          name: scripts
        - emptyDir: {}
          name: ovsdb-rundir
        - configMap:
            defaultMode: 493
            name: ovndbcluster-sb-config
          name: config
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
        - name: ovsdbserver-sb-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ovndbcluster-sb-ovndbs
        - name: metrics-certs-tls-certs
          secret:
            defaultMode: 256
            secretName: cert-ovn-metrics
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          owner: ovndbcluster-sb
          service: ovsdbserver-sb
        name: ovndbcluster-sb-etc-ovn
        namespace: openstack
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10G
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: ovsdbserver-sb-578b9c975d
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: ovsdbserver-sb-578b9c975d
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:39:59Z"
    generation: 1
    labels:
      app.kubernetes.io/component: rabbitmq
      app.kubernetes.io/name: rabbitmq-cell1
      app.kubernetes.io/part-of: rabbitmq
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"83883244-a1f1-4770-9405-efbf44b4caeb"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app.kubernetes.io/component: {}
                f:app.kubernetes.io/name: {}
                f:app.kubernetes.io/part-of: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:automountServiceAccountToken: {}
              f:containers:
                k:{"name":"rabbitmq"}:
                  .: {}
                  f:args: {}
                  f:env:
                    .: {}
                    k:{"name":"HOME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"K8S_HOSTNAME_SUFFIX"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"K8S_SERVICE_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MY_POD_NAME"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"MY_POD_NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_CTL_ERL_ARGS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_ENABLED_PLUGINS_FILE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_NODENAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_UPGRADE_LOG"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_USE_LONGNAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":4369,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":5671,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":15671,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":15691,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pod-info/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/rabbitmq-tls/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/rabbitmq/advanced.config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/conf.d/10-operatorDefaults.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/conf.d/11-default_user.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/conf.d/90-userDefinedConfiguration.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/erl_inetrc"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/inter-node-tls.config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/operator"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/mnesia/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"setup-container"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/operator"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/tmp/default_user.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp/erlang-cookie-secret/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/tmp/rabbitmq-plugins/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/mnesia/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"erlang-cookie-secret"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"plugins-conf"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"pod-info"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"rabbitmq-confd"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"rabbitmq-erlang-cookie"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"rabbitmq-plugins"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"rabbitmq-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"server-conf"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:39:59Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:41:25Z"
    name: rabbitmq-cell1-server
    namespace: openstack
    ownerReferences:
    - apiVersion: rabbitmq.com/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: RabbitmqCluster
      name: rabbitmq-cell1
      uid: 83883244-a1f1-4770-9405-efbf44b4caeb
    resourceVersion: "28357"
    uid: f6eda8b0-4286-4d6e-8dd6-67de31222535
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: rabbitmq-cell1
    serviceName: rabbitmq-cell1-nodes
    template:
      metadata:
        creationTimestamp: null
        labels:
          app.kubernetes.io/component: rabbitmq
          app.kubernetes.io/name: rabbitmq-cell1
          app.kubernetes.io/part-of: rabbitmq
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: app.kubernetes.io/name
                    operator: In
                    values:
                    - rabbitmq-cell1
                topologyKey: kubernetes.io/hostname
              weight: 100
        automountServiceAccountToken: true
        containers:
        - args:
          - /usr/lib/rabbitmq/bin/rabbitmq-server
          env:
          - name: MY_POD_NAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: MY_POD_NAMESPACE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: K8S_SERVICE_NAME
            value: rabbitmq-cell1-nodes
          - name: RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS
            value: '-kernel inetrc ''/etc/rabbitmq/erl_inetrc'' -proto_dist inet_tls
              -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config '
          - name: RABBITMQ_CTL_ERL_ARGS
            value: -proto_dist inet_tls -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config
          - name: RABBITMQ_UPGRADE_LOG
            value: /var/lib/rabbitmq/rabbitmq_upgrade.log
          - name: HOME
            value: /var/lib/rabbitmq
          - name: PATH
            value: /usr/lib/rabbitmq/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
          - name: RABBITMQ_ENABLED_PLUGINS_FILE
            value: /operator/enabled_plugins
          - name: RABBITMQ_USE_LONGNAME
            value: "true"
          - name: RABBITMQ_NODENAME
            value: rabbit@$(MY_POD_NAME).$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE)
          - name: K8S_HOSTNAME_SUFFIX
            value: .$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE)
          image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:9e7397d61095b02a8c1deb24bca874bc0032aa18019f12d53e0eda8998b85447
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /bin/bash
                - -c
                - if [ ! -z "$(cat /etc/pod-info/skipPreStopChecks)" ]; then exit
                  0; fi; rabbitmq-upgrade await_online_quorum_plus_one -t 604800 &&
                  rabbitmq-upgrade await_online_synchronized_mirror -t 604800 || true
                  && rabbitmq-upgrade drain -t 604800
          name: rabbitmq
          ports:
          - containerPort: 4369
            name: epmd
            protocol: TCP
          - containerPort: 5671
            name: amqps
            protocol: TCP
          - containerPort: 15671
            name: management-tls
            protocol: TCP
          - containerPort: 15691
            name: prometheus-tls
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            initialDelaySeconds: 10
            periodSeconds: 10
            successThreshold: 1
            tcpSocket:
              port: amqps
            timeoutSeconds: 5
          resources:
            limits:
              cpu: "2"
              memory: 2Gi
            requests:
              cpu: "1"
              memory: 2Gi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/rabbitmq/
            name: rabbitmq-erlang-cookie
          - mountPath: /var/lib/rabbitmq/mnesia/
            name: persistence
          - mountPath: /etc/rabbitmq/inter-node-tls.config
            name: config-data
            readOnly: true
            subPath: inter_node_tls.config
          - mountPath: /operator
            name: rabbitmq-plugins
          - mountPath: /etc/rabbitmq/conf.d/10-operatorDefaults.conf
            name: rabbitmq-confd
            subPath: operatorDefaults.conf
          - mountPath: /etc/rabbitmq/conf.d/90-userDefinedConfiguration.conf
            name: rabbitmq-confd
            subPath: userDefinedConfiguration.conf
          - mountPath: /etc/pod-info/
            name: pod-info
          - mountPath: /etc/rabbitmq/conf.d/11-default_user.conf
            name: rabbitmq-confd
            subPath: default_user.conf
          - mountPath: /etc/rabbitmq/advanced.config
            name: server-conf
            subPath: advanced.config
          - mountPath: /etc/rabbitmq/erl_inetrc
            name: server-conf
            subPath: erl_inetrc
          - mountPath: /etc/rabbitmq-tls/
            name: rabbitmq-tls
            readOnly: true
        dnsPolicy: ClusterFirst
        initContainers:
        - command:
          - sh
          - -c
          - cp /tmp/erlang-cookie-secret/.erlang.cookie /var/lib/rabbitmq/.erlang.cookie
            && chmod 600 /var/lib/rabbitmq/.erlang.cookie ; cp /tmp/rabbitmq-plugins/enabled_plugins
            /operator/enabled_plugins ; echo '[default]' > /var/lib/rabbitmq/.rabbitmqadmin.conf
            && sed -e 's/default_user/username/' -e 's/default_pass/password/' /tmp/default_user.conf
            >> /var/lib/rabbitmq/.rabbitmqadmin.conf && chmod 600 /var/lib/rabbitmq/.rabbitmqadmin.conf
            ; sleep 30
          image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:9e7397d61095b02a8c1deb24bca874bc0032aa18019f12d53e0eda8998b85447
          imagePullPolicy: IfNotPresent
          name: setup-container
          resources:
            limits:
              cpu: 20m
              memory: 64Mi
            requests:
              cpu: 20m
              memory: 64Mi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /tmp/rabbitmq-plugins/
            name: plugins-conf
          - mountPath: /var/lib/rabbitmq/
            name: rabbitmq-erlang-cookie
          - mountPath: /tmp/erlang-cookie-secret/
            name: erlang-cookie-secret
          - mountPath: /operator
            name: rabbitmq-plugins
          - mountPath: /var/lib/rabbitmq/mnesia/
            name: persistence
          - mountPath: /tmp/default_user.conf
            name: rabbitmq-confd
            subPath: default_user.conf
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: rabbitmq-cell1-server
        serviceAccountName: rabbitmq-cell1-server
        terminationGracePeriodSeconds: 604800
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              app.kubernetes.io/name: rabbitmq-cell1
          maxSkew: 1
          topologyKey: topology.kubernetes.io/zone
          whenUnsatisfiable: ScheduleAnyway
        volumes:
        - configMap:
            defaultMode: 272
            items:
            - key: inter_node_tls.config
              path: inter_node_tls.config
            name: rabbitmq-cell1-config-data
          name: config-data
        - configMap:
            defaultMode: 420
            name: rabbitmq-cell1-plugins-conf
          name: plugins-conf
        - name: rabbitmq-confd
          projected:
            defaultMode: 420
            sources:
            - configMap:
                items:
                - key: operatorDefaults.conf
                  path: operatorDefaults.conf
                - key: userDefinedConfiguration.conf
                  path: userDefinedConfiguration.conf
                name: rabbitmq-cell1-server-conf
            - secret:
                items:
                - key: default_user.conf
                  path: default_user.conf
                name: rabbitmq-cell1-default-user
        - emptyDir: {}
          name: rabbitmq-erlang-cookie
        - name: erlang-cookie-secret
          secret:
            defaultMode: 420
            secretName: rabbitmq-cell1-erlang-cookie
        - emptyDir: {}
          name: rabbitmq-plugins
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.labels['skipPreStopChecks']
              path: skipPreStopChecks
          name: pod-info
        - configMap:
            defaultMode: 420
            name: rabbitmq-cell1-server-conf
          name: server-conf
        - name: rabbitmq-tls
          projected:
            defaultMode: 400
            sources:
            - secret:
                items:
                - key: tls.crt
                  path: tls.crt
                - key: tls.key
                  path: tls.key
                name: cert-rabbitmq-cell1-svc
                optional: true
            - secret:
                items:
                - key: ca.crt
                  path: ca.crt
                name: cert-rabbitmq-cell1-svc
                optional: true
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          app.kubernetes.io/component: rabbitmq
          app.kubernetes.io/name: rabbitmq-cell1
          app.kubernetes.io/part-of: rabbitmq
        name: persistence
        namespace: openstack
        ownerReferences:
        - apiVersion: rabbitmq.com/v1beta1
          blockOwnerDeletion: false
          controller: true
          kind: RabbitmqCluster
          name: rabbitmq-cell1
          uid: 83883244-a1f1-4770-9405-efbf44b4caeb
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10Gi
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: rabbitmq-cell1-server-846c5c7966
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: rabbitmq-cell1-server-846c5c7966
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:39:59Z"
    generation: 1
    labels:
      app.kubernetes.io/component: rabbitmq
      app.kubernetes.io/name: rabbitmq
      app.kubernetes.io/part-of: rabbitmq
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"7e8b0806-ab52-42aa-bfc5-9f2e6841c8a2"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app.kubernetes.io/component: {}
                f:app.kubernetes.io/name: {}
                f:app.kubernetes.io/part-of: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:automountServiceAccountToken: {}
              f:containers:
                k:{"name":"rabbitmq"}:
                  .: {}
                  f:args: {}
                  f:env:
                    .: {}
                    k:{"name":"HOME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"K8S_HOSTNAME_SUFFIX"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"K8S_SERVICE_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MY_POD_NAME"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"MY_POD_NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_CTL_ERL_ARGS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_ENABLED_PLUGINS_FILE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_NODENAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_UPGRADE_LOG"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RABBITMQ_USE_LONGNAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":4369,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":5671,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":15671,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":15691,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:tcpSocket:
                      .: {}
                      f:port: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pod-info/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/rabbitmq-tls/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/rabbitmq/advanced.config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/conf.d/10-operatorDefaults.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/conf.d/11-default_user.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/conf.d/90-userDefinedConfiguration.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/erl_inetrc"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/rabbitmq/inter-node-tls.config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/operator"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/mnesia/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"setup-container"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/operator"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/tmp/default_user.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/tmp/erlang-cookie-secret/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/tmp/rabbitmq-plugins/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/rabbitmq/mnesia/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"erlang-cookie-secret"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"plugins-conf"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"pod-info"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"rabbitmq-confd"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"rabbitmq-erlang-cookie"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"rabbitmq-plugins"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"rabbitmq-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"server-conf"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:39:59Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:41:27Z"
    name: rabbitmq-server
    namespace: openstack
    ownerReferences:
    - apiVersion: rabbitmq.com/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: RabbitmqCluster
      name: rabbitmq
      uid: 7e8b0806-ab52-42aa-bfc5-9f2e6841c8a2
    resourceVersion: "28524"
    uid: 5328457f-eccf-4f73-9bd6-cb6124944167
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: rabbitmq
    serviceName: rabbitmq-nodes
    template:
      metadata:
        creationTimestamp: null
        labels:
          app.kubernetes.io/component: rabbitmq
          app.kubernetes.io/name: rabbitmq
          app.kubernetes.io/part-of: rabbitmq
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: app.kubernetes.io/name
                    operator: In
                    values:
                    - rabbitmq
                topologyKey: kubernetes.io/hostname
              weight: 100
        automountServiceAccountToken: true
        containers:
        - args:
          - /usr/lib/rabbitmq/bin/rabbitmq-server
          env:
          - name: MY_POD_NAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: MY_POD_NAMESPACE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: K8S_SERVICE_NAME
            value: rabbitmq-nodes
          - name: RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS
            value: '-kernel inetrc ''/etc/rabbitmq/erl_inetrc'' -proto_dist inet_tls
              -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config '
          - name: RABBITMQ_CTL_ERL_ARGS
            value: -proto_dist inet_tls -ssl_dist_optfile /etc/rabbitmq/inter-node-tls.config
          - name: RABBITMQ_UPGRADE_LOG
            value: /var/lib/rabbitmq/rabbitmq_upgrade.log
          - name: HOME
            value: /var/lib/rabbitmq
          - name: PATH
            value: /usr/lib/rabbitmq/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
          - name: RABBITMQ_ENABLED_PLUGINS_FILE
            value: /operator/enabled_plugins
          - name: RABBITMQ_USE_LONGNAME
            value: "true"
          - name: RABBITMQ_NODENAME
            value: rabbit@$(MY_POD_NAME).$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE)
          - name: K8S_HOSTNAME_SUFFIX
            value: .$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE)
          image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:9e7397d61095b02a8c1deb24bca874bc0032aa18019f12d53e0eda8998b85447
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - /bin/bash
                - -c
                - if [ ! -z "$(cat /etc/pod-info/skipPreStopChecks)" ]; then exit
                  0; fi; rabbitmq-upgrade await_online_quorum_plus_one -t 604800 &&
                  rabbitmq-upgrade await_online_synchronized_mirror -t 604800 || true
                  && rabbitmq-upgrade drain -t 604800
          name: rabbitmq
          ports:
          - containerPort: 4369
            name: epmd
            protocol: TCP
          - containerPort: 5671
            name: amqps
            protocol: TCP
          - containerPort: 15671
            name: management-tls
            protocol: TCP
          - containerPort: 15691
            name: prometheus-tls
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            initialDelaySeconds: 10
            periodSeconds: 10
            successThreshold: 1
            tcpSocket:
              port: amqps
            timeoutSeconds: 5
          resources:
            limits:
              cpu: "2"
              memory: 2Gi
            requests:
              cpu: "1"
              memory: 2Gi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/rabbitmq/
            name: rabbitmq-erlang-cookie
          - mountPath: /var/lib/rabbitmq/mnesia/
            name: persistence
          - mountPath: /etc/rabbitmq/inter-node-tls.config
            name: config-data
            readOnly: true
            subPath: inter_node_tls.config
          - mountPath: /operator
            name: rabbitmq-plugins
          - mountPath: /etc/rabbitmq/conf.d/10-operatorDefaults.conf
            name: rabbitmq-confd
            subPath: operatorDefaults.conf
          - mountPath: /etc/rabbitmq/conf.d/90-userDefinedConfiguration.conf
            name: rabbitmq-confd
            subPath: userDefinedConfiguration.conf
          - mountPath: /etc/pod-info/
            name: pod-info
          - mountPath: /etc/rabbitmq/conf.d/11-default_user.conf
            name: rabbitmq-confd
            subPath: default_user.conf
          - mountPath: /etc/rabbitmq/advanced.config
            name: server-conf
            subPath: advanced.config
          - mountPath: /etc/rabbitmq/erl_inetrc
            name: server-conf
            subPath: erl_inetrc
          - mountPath: /etc/rabbitmq-tls/
            name: rabbitmq-tls
            readOnly: true
        dnsPolicy: ClusterFirst
        initContainers:
        - command:
          - sh
          - -c
          - cp /tmp/erlang-cookie-secret/.erlang.cookie /var/lib/rabbitmq/.erlang.cookie
            && chmod 600 /var/lib/rabbitmq/.erlang.cookie ; cp /tmp/rabbitmq-plugins/enabled_plugins
            /operator/enabled_plugins ; echo '[default]' > /var/lib/rabbitmq/.rabbitmqadmin.conf
            && sed -e 's/default_user/username/' -e 's/default_pass/password/' /tmp/default_user.conf
            >> /var/lib/rabbitmq/.rabbitmqadmin.conf && chmod 600 /var/lib/rabbitmq/.rabbitmqadmin.conf
            ; sleep 30
          image: quay.io/podified-antelope-centos9/openstack-rabbitmq@sha256:9e7397d61095b02a8c1deb24bca874bc0032aa18019f12d53e0eda8998b85447
          imagePullPolicy: IfNotPresent
          name: setup-container
          resources:
            limits:
              cpu: 20m
              memory: 64Mi
            requests:
              cpu: 20m
              memory: 64Mi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /tmp/rabbitmq-plugins/
            name: plugins-conf
          - mountPath: /var/lib/rabbitmq/
            name: rabbitmq-erlang-cookie
          - mountPath: /tmp/erlang-cookie-secret/
            name: erlang-cookie-secret
          - mountPath: /operator
            name: rabbitmq-plugins
          - mountPath: /var/lib/rabbitmq/mnesia/
            name: persistence
          - mountPath: /tmp/default_user.conf
            name: rabbitmq-confd
            subPath: default_user.conf
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: rabbitmq-server
        serviceAccountName: rabbitmq-server
        terminationGracePeriodSeconds: 604800
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              app.kubernetes.io/name: rabbitmq
          maxSkew: 1
          topologyKey: topology.kubernetes.io/zone
          whenUnsatisfiable: ScheduleAnyway
        volumes:
        - configMap:
            defaultMode: 272
            items:
            - key: inter_node_tls.config
              path: inter_node_tls.config
            name: rabbitmq-config-data
          name: config-data
        - configMap:
            defaultMode: 420
            name: rabbitmq-plugins-conf
          name: plugins-conf
        - name: rabbitmq-confd
          projected:
            defaultMode: 420
            sources:
            - configMap:
                items:
                - key: operatorDefaults.conf
                  path: operatorDefaults.conf
                - key: userDefinedConfiguration.conf
                  path: userDefinedConfiguration.conf
                name: rabbitmq-server-conf
            - secret:
                items:
                - key: default_user.conf
                  path: default_user.conf
                name: rabbitmq-default-user
        - emptyDir: {}
          name: rabbitmq-erlang-cookie
        - name: erlang-cookie-secret
          secret:
            defaultMode: 420
            secretName: rabbitmq-erlang-cookie
        - emptyDir: {}
          name: rabbitmq-plugins
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.labels['skipPreStopChecks']
              path: skipPreStopChecks
          name: pod-info
        - configMap:
            defaultMode: 420
            name: rabbitmq-server-conf
          name: server-conf
        - name: rabbitmq-tls
          projected:
            defaultMode: 400
            sources:
            - secret:
                items:
                - key: tls.crt
                  path: tls.crt
                - key: tls.key
                  path: tls.key
                name: cert-rabbitmq-svc
                optional: true
            - secret:
                items:
                - key: ca.crt
                  path: ca.crt
                name: cert-rabbitmq-svc
                optional: true
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        labels:
          app.kubernetes.io/component: rabbitmq
          app.kubernetes.io/name: rabbitmq
          app.kubernetes.io/part-of: rabbitmq
        name: persistence
        namespace: openstack
        ownerReferences:
        - apiVersion: rabbitmq.com/v1beta1
          blockOwnerDeletion: false
          controller: true
          kind: RabbitmqCluster
          name: rabbitmq
          uid: 7e8b0806-ab52-42aa-bfc5-9f2e6841c8a2
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10Gi
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: rabbitmq-server-596c9875db
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: rabbitmq-server-596c9875db
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    creationTimestamp: "2026-03-07T21:40:46Z"
    generation: 1
    labels:
      component: swift-storage
      service: swift
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"d3f85289-f5b1-42aa-971f-ad9f0f20c934"}: {}
        f:spec:
          f:persistentVolumeClaimRetentionPolicy:
            .: {}
            f:whenDeleted: {}
            f:whenScaled: {}
          f:podManagementPolicy: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:serviceName: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
              f:labels:
                .: {}
                f:component: {}
                f:service: {}
            f:spec:
              f:affinity:
                .: {}
                f:podAntiAffinity:
                  .: {}
                  f:preferredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"account-auditor"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"account-reaper"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"account-replicator"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"account-server"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":6202,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"container-auditor"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"container-replicator"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"container-server"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":6201,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"container-updater"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"object-auditor"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"object-expirer"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"object-replicator"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"object-server"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":6200,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"object-updater"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"rsync"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":873,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"swift-recon-cron"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CONFIG_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/srv/node/pv"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/cache/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lock"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
                f:fsGroupChangePolicy: {}
                f:runAsNonRoot: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
                f:sysctls: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"cache"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-swift"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"lock"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"swift"}:
                  .: {}
                  f:name: {}
                  f:persistentVolumeClaim:
                    .: {}
                    f:claimName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:partition: {}
            f:type: {}
          f:volumeClaimTemplates: {}
      manager: manager
      operation: Update
      time: "2026-03-07T21:40:46Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:collisionCount: {}
          f:currentReplicas: {}
          f:currentRevision: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:updateRevision: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-07T21:41:21Z"
    name: swift-storage
    namespace: openstack
    ownerReferences:
    - apiVersion: swift.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: SwiftStorage
      name: swift-storage
      uid: d3f85289-f5b1-42aa-971f-ad9f0f20c934
    resourceVersion: "28234"
    uid: bee5d6fa-ee4a-4b4b-bf9c-cc65658ff912
  spec:
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Retain
      whenScaled: Retain
    podManagementPolicy: Parallel
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        component: swift-storage
        service: swift
    serviceName: swift-storage
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          component: swift-storage
          service: swift
      spec:
        affinity:
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
            - podAffinityTerm:
                labelSelector:
                  matchExpressions:
                  - key: component
                    operator: In
                    values:
                    - swift-storage
                topologyKey: kubernetes.io/hostname
              weight: 100
        containers:
        - command:
          - /usr/bin/swift-account-server
          - /etc/swift/account-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-account@sha256:6b75226d63980ff4a0dd49f490031ca563324b792940a9e453c9e3bd34456645
          imagePullPolicy: IfNotPresent
          name: account-server
          ports:
          - containerPort: 6202
            name: account
            protocol: TCP
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-account-replicator
          - /etc/swift/account-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-account@sha256:6b75226d63980ff4a0dd49f490031ca563324b792940a9e453c9e3bd34456645
          imagePullPolicy: IfNotPresent
          name: account-replicator
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-account-auditor
          - /etc/swift/account-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-account@sha256:6b75226d63980ff4a0dd49f490031ca563324b792940a9e453c9e3bd34456645
          imagePullPolicy: IfNotPresent
          name: account-auditor
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-account-reaper
          - /etc/swift/account-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-account@sha256:6b75226d63980ff4a0dd49f490031ca563324b792940a9e453c9e3bd34456645
          imagePullPolicy: IfNotPresent
          name: account-reaper
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-container-server
          - /etc/swift/container-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-container@sha256:1af3cfa900bdb14059b01962275ab139988ff3d9056421fc6cea49f366b60c49
          imagePullPolicy: IfNotPresent
          name: container-server
          ports:
          - containerPort: 6201
            name: container
            protocol: TCP
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-container-replicator
          - /etc/swift/container-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-container@sha256:1af3cfa900bdb14059b01962275ab139988ff3d9056421fc6cea49f366b60c49
          imagePullPolicy: IfNotPresent
          name: container-replicator
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-container-auditor
          - /etc/swift/container-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-container@sha256:1af3cfa900bdb14059b01962275ab139988ff3d9056421fc6cea49f366b60c49
          imagePullPolicy: IfNotPresent
          name: container-auditor
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-container-updater
          - /etc/swift/container-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-container@sha256:1af3cfa900bdb14059b01962275ab139988ff3d9056421fc6cea49f366b60c49
          imagePullPolicy: IfNotPresent
          name: container-updater
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-object-server
          - /etc/swift/object-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-object@sha256:aa0a8dc035cb40e854b9a868e55606e79254b7d4cf6d686918380b317aa1d1c3
          imagePullPolicy: IfNotPresent
          name: object-server
          ports:
          - containerPort: 6200
            name: object
            protocol: TCP
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-object-replicator
          - /etc/swift/object-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-object@sha256:aa0a8dc035cb40e854b9a868e55606e79254b7d4cf6d686918380b317aa1d1c3
          imagePullPolicy: IfNotPresent
          name: object-replicator
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-object-auditor
          - /etc/swift/object-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-object@sha256:aa0a8dc035cb40e854b9a868e55606e79254b7d4cf6d686918380b317aa1d1c3
          imagePullPolicy: IfNotPresent
          name: object-auditor
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-object-updater
          - /etc/swift/object-server.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-object@sha256:aa0a8dc035cb40e854b9a868e55606e79254b7d4cf6d686918380b317aa1d1c3
          imagePullPolicy: IfNotPresent
          name: object-updater
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/swift-object-expirer
          - /etc/swift/object-expirer.conf.d
          - -v
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-proxy-server@sha256:4edf7a23d172c4a133480d60844e80fb843a6aaf50a68d8d5fec13ae0c3c03d7
          imagePullPolicy: IfNotPresent
          name: object-expirer
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - /usr/bin/rsync
          - --daemon
          - --no-detach
          - --config=/etc/swift/rsyncd.conf
          - --log-file=/dev/stdout
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-object@sha256:aa0a8dc035cb40e854b9a868e55606e79254b7d4cf6d686918380b317aa1d1c3
          imagePullPolicy: IfNotPresent
          name: rsync
          ports:
          - containerPort: 873
            name: rsync
            protocol: TCP
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        - command:
          - sh
          - -c
          - while true; do /usr/bin/swift-recon-cron /etc/swift/object-server.conf.d
            -v; sleep 300; done
          env:
          - name: CONFIG_HASH
            value: n547h6h8ch677h6fh578h9hdch545h5d5h67dh55h667h695hb5h8h66chbdh5d4hc9h598h5dbh5cbh589hb8h665h79h8dh85h695h5ffh57fq
          image: quay.io/podified-antelope-centos9/openstack-swift-object@sha256:aa0a8dc035cb40e854b9a868e55606e79254b7d4cf6d686918380b317aa1d1c3
          imagePullPolicy: IfNotPresent
          name: swift-recon-cron
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /srv/node/pv
            name: swift
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/cache/swift
            name: cache
          - mountPath: /var/lock
            name: lock
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 42445
          fsGroupChangePolicy: OnRootMismatch
          runAsNonRoot: true
          seccompProfile:
            type: RuntimeDefault
          sysctls:
          - name: net.ipv4.ip_unprivileged_port_start
            value: "873"
        serviceAccount: swift-swift
        serviceAccountName: swift-swift
        terminationGracePeriodSeconds: 30
        volumes:
        - name: swift
          persistentVolumeClaim:
            claimName: swift
        - name: etc-swift
          projected:
            defaultMode: 420
            sources:
            - configMap:
                items:
                - key: 00-account-server.conf
                  path: account-server.conf.d/00-account-server.conf
                - key: 01-account-server.conf
                  path: account-server.conf.d/01-account-server.conf
                - key: 00-container-server.conf
                  path: container-server.conf.d/00-container-server.conf
                - key: 01-container-server.conf
                  path: container-server.conf.d/01-container-server.conf
                - key: 00-object-server.conf
                  path: object-server.conf.d/00-object-server.conf
                - key: 01-object-server.conf
                  path: object-server.conf.d/01-object-server.conf
                - key: 00-object-expirer.conf
                  path: object-expirer.conf.d/00-object-expirer.conf
                - key: 01-object-expirer.conf
                  path: object-expirer.conf.d/01-object-expirer.conf
                - key: internal-client.conf
                  path: internal-client.conf
                - key: rsyncd.conf
                  path: rsyncd.conf
                name: swift-storage-config-data
            - secret:
                name: swift-conf
            - configMap:
                name: swift-ring-files
        - emptyDir: {}
          name: cache
        - emptyDir: {}
          name: lock
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    updateStrategy:
      rollingUpdate:
        partition: 0
      type: RollingUpdate
    volumeClaimTemplates:
    - apiVersion: v1
      kind: PersistentVolumeClaim
      metadata:
        creationTimestamp: null
        name: swift
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 10Gi
        storageClassName: lvms-local-storage
        volumeMode: Filesystem
      status:
        phase: Pending
  status:
    availableReplicas: 1
    collisionCount: 0
    currentReplicas: 1
    currentRevision: swift-storage-f9b4bd5cf
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updateRevision: swift-storage-f9b4bd5cf
    updatedReplicas: 1
kind: StatefulSetList
metadata:
  resourceVersion: "44229"