apiVersion: batch/v1
kind: Job
metadata:
  annotations:
    helm.sh/hook: post-install,post-upgrade
    helm.sh/hook-delete-policy: before-hook-creation
    helm.sh/hook-weight: "-5"
    openstackhelm.openstack.org/release_uuid: ""
  creationTimestamp: "2026-04-09T22:41:02Z"
  generation: 1
  labels:
    application: keystone
    component: credential-setup
    release_group: keystone
  name: keystone-credential-setup
  namespace: openstack
  resourceVersion: "6216"
  uid: eb212669-013b-4c7a-83ea-d36c0830a3f2
spec:
  backoffLimit: 6
  completionMode: NonIndexed
  completions: 1
  parallelism: 1
  selector:
    matchLabels:
      batch.kubernetes.io/controller-uid: eb212669-013b-4c7a-83ea-d36c0830a3f2
  suspend: false
  template:
    metadata:
      annotations:
        configmap-bin-hash: 0fa826d4d7a09702781edd1dea99271bec84830f0fb47c323ca6697719e1dc71
        configmap-etc-hash: 42ff275d39a97ac41b264849202c17372eaa7b46199c40ec074906bc0dfd5dc5
        openstackhelm.openstack.org/release_uuid: ""
      creationTimestamp: null
      labels:
        application: keystone
        batch.kubernetes.io/controller-uid: eb212669-013b-4c7a-83ea-d36c0830a3f2
        batch.kubernetes.io/job-name: keystone-credential-setup
        component: credential-setup
        controller-uid: eb212669-013b-4c7a-83ea-d36c0830a3f2
        job-name: keystone-credential-setup
        release_group: keystone
    spec:
      containers:
      - command:
        - python
        - /tmp/fernet-manage.py
        - credential_setup
        env:
        - name: KEYSTONE_USER
          value: keystone
        - name: KEYSTONE_GROUP
          value: keystone
        - name: KUBERNETES_NAMESPACE
          value: openstack
        - name: KEYSTONE_KEYS_REPOSITORY
          value: /etc/keystone/credential-keys/
        image: harbor.atmosphere.dev/ghcr.io/vexxhost/keystone:2025.2@sha256:84a343b069c0ddabb5bb702a4d8bf555165a99c337386690f4a836ed3be814b9
        imagePullPolicy: IfNotPresent
        name: keystone-credential-setup
        resources: {}
        securityContext:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /tmp
          name: pod-tmp
        - mountPath: /etc/keystone
          name: etckeystone
        - mountPath: /etc/keystone/credential-keys/
          name: credential-keys
        - mountPath: /etc/keystone/keystone.conf
          name: keystone-etc
          readOnly: true
          subPath: keystone.conf
        - mountPath: /tmp/fernet-manage.py
          name: keystone-bin
          readOnly: true
          subPath: fernet-manage.py
      dnsPolicy: ClusterFirst
      initContainers:
      - command:
        - kubernetes-entrypoint
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.name
        - name: NAMESPACE
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
        - name: INTERFACE_NAME
          value: eth0
        - name: PATH
          value: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/
        - name: DEPENDENCY_SERVICE
        - name: DEPENDENCY_DAEMONSET
        - name: DEPENDENCY_CONTAINER
        - name: DEPENDENCY_POD_JSON
        - name: DEPENDENCY_CUSTOM_RESOURCE
        image: harbor.atmosphere.dev/ghcr.io/vexxhost/kubernetes-entrypoint:edge@sha256:8921b64b87af184a1421dd856b2703bcf3cff9f50863cd0d18371cf964a87bd3
        imagePullPolicy: IfNotPresent
        name: init
        resources: {}
        securityContext:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
          runAsUser: 65534
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
      nodeSelector:
        openstack-control-plane: enabled
      restartPolicy: OnFailure
      schedulerName: default-scheduler
      securityContext:
        runAsUser: 42424
      serviceAccount: keystone-credential-setup
      serviceAccountName: keystone-credential-setup
      terminationGracePeriodSeconds: 30
      volumes:
      - emptyDir: {}
        name: pod-tmp
      - emptyDir: {}
        name: etckeystone
      - emptyDir: {}
        name: credential-keys
      - name: keystone-etc
        secret:
          defaultMode: 292
          secretName: keystone-etc
      - configMap:
          defaultMode: 365
          name: keystone-bin
        name: keystone-bin
status:
  completionTime: "2026-04-09T22:41:19Z"
  conditions:
  - lastProbeTime: "2026-04-09T22:41:19Z"
    lastTransitionTime: "2026-04-09T22:41:19Z"
    status: "True"
    type: Complete
  ready: 0
  startTime: "2026-04-09T22:41:02Z"
  succeeded: 1
  uncountedTerminatedPods: {}