apiVersion: v1
kind: Pod
metadata:
  creationTimestamp: "2026-04-17T18:44:09Z"
  generateName: ceph-csi-rbd-provisioner-69cb97fb6-
  labels:
    app: ceph-csi-rbd
    chart: ceph-csi-rbd-3.11.0
    component: provisioner
    heritage: Helm
    pod-template-hash: 69cb97fb6
    release: ceph-csi-rbd
  name: ceph-csi-rbd-provisioner-69cb97fb6-nqvmg
  namespace: kube-system
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: ReplicaSet
    name: ceph-csi-rbd-provisioner-69cb97fb6
    uid: 6f0e1f6a-1c4a-4025-a890-03f9214e55a9
  resourceVersion: "1267"
  uid: c089cb73-9423-4489-b67a-92c341cc0067
spec:
  containers:
  - args:
    - --nodeid=$(NODE_ID)
    - --type=rbd
    - --controllerserver=true
    - --pidlimit=-1
    - --endpoint=$(CSI_ENDPOINT)
    - --csi-addons-endpoint=$(CSI_ADDONS_ENDPOINT)
    - --v=5
    - --drivername=$(DRIVER_NAME)
    - --rbdhardmaxclonedepth=8
    - --rbdsoftmaxclonedepth=4
    - --maxsnapshotsonimage=450
    - --minsnapshotsonimage=250
    - --setmetadata=true
    env:
    - name: POD_IP
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: status.podIP
    - name: DRIVER_NAME
      value: rbd.csi.ceph.com
    - name: NODE_ID
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: spec.nodeName
    - name: CSI_ENDPOINT
      value: unix:///csi/csi-provisioner.sock
    - name: CSI_ADDONS_ENDPOINT
      value: unix:///csi/csi-addons.sock
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: csi-rbdplugin
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /dev
      name: host-dev
    - mountPath: /sys
      name: host-sys
    - mountPath: /lib/modules
      name: lib-modules
      readOnly: true
    - mountPath: /etc/ceph-csi-config/
      name: ceph-csi-config
    - mountPath: /etc/ceph/
      name: ceph-config
    - mountPath: /etc/ceph-csi-encryption-kms-config/
      name: ceph-csi-encryption-kms-config
    - mountPath: /tmp/csi/keys
      name: keys-tmp-dir
    - mountPath: /run/secrets/tokens
      name: oidc-token
      readOnly: true
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-7bg5d
      readOnly: true
  - args:
    - --csi-address=$(ADDRESS)
    - --v=1
    - --timeout=60s
    - --leader-election=true
    - --retry-interval-start=500ms
    - --default-fstype=ext4
    - --extra-create-metadata=true
    - --feature-gates=HonorPVReclaimPolicy=true
    - --prevent-volume-mode-conversion=true
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
    imagePullPolicy: IfNotPresent
    name: csi-provisioner
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-7bg5d
      readOnly: true
  - args:
    - --v=1
    - --csi-address=$(ADDRESS)
    - --timeout=60s
    - --leader-election
    - --retry-interval-start=500ms
    - --handle-volume-inuse-error=false
    - --feature-gates=RecoverVolumeExpansionFailure=true
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer:v1.10.0
    imagePullPolicy: IfNotPresent
    name: csi-resizer
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-7bg5d
      readOnly: true
  - args:
    - --csi-address=$(ADDRESS)
    - --v=1
    - --timeout=60s
    - --leader-election=true
    - --extra-create-metadata=true
    - --enable-volume-group-snapshots=false
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter:v7.0.0
    imagePullPolicy: IfNotPresent
    name: csi-snapshotter
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-7bg5d
      readOnly: true
  - args:
    - --v=1
    - --csi-address=$(ADDRESS)
    - --leader-election=true
    - --retry-interval-start=500ms
    - --default-fstype=ext4
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher:v4.5.0
    imagePullPolicy: IfNotPresent
    name: csi-attacher
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-7bg5d
      readOnly: true
  - args:
    - --type=controller
    - --v=5
    - --drivername=$(DRIVER_NAME)
    - --drivernamespace=$(DRIVER_NAMESPACE)
    - --setmetadata=true
    env:
    - name: DRIVER_NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
    - name: DRIVER_NAME
      value: rbd.csi.ceph.com
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: csi-rbdplugin-controller
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /etc/ceph-csi-config/
      name: ceph-csi-config
    - mountPath: /tmp/csi/keys
      name: keys-tmp-dir
    - mountPath: /etc/ceph/
      name: ceph-config
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-7bg5d
      readOnly: true
  - args:
    - --type=liveness
    - --endpoint=$(CSI_ENDPOINT)
    - --metricsport=8080
    - --metricspath=/metrics
    - --polltime=60s
    - --timeout=3s
    env:
    - name: CSI_ENDPOINT
      value: unix:///csi/csi-provisioner.sock
    - name: POD_IP
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: status.podIP
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: liveness-prometheus
    ports:
    - containerPort: 8080
      name: metrics
      protocol: TCP
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-7bg5d
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  nodeName: instance
  nodeSelector:
    openstack-control-plane: enabled
  preemptionPolicy: PreemptLowerPriority
  priority: 2000000000
  priorityClassName: system-cluster-critical
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext: {}
  serviceAccount: ceph-csi-rbd-provisioner
  serviceAccountName: ceph-csi-rbd-provisioner
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  volumes:
  - emptyDir:
      medium: Memory
    name: socket-dir
  - hostPath:
      path: /dev
      type: ""
    name: host-dev
  - hostPath:
      path: /sys
      type: ""
    name: host-sys
  - hostPath:
      path: /lib/modules
      type: ""
    name: lib-modules
  - configMap:
      defaultMode: 420
      name: ceph-config
    name: ceph-config
  - configMap:
      defaultMode: 420
      name: ceph-csi-config
    name: ceph-csi-config
  - configMap:
      defaultMode: 420
      name: ceph-csi-encryption-kms-config
    name: ceph-csi-encryption-kms-config
  - emptyDir:
      medium: Memory
    name: keys-tmp-dir
  - name: oidc-token
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          audience: ceph-csi-kms
          expirationSeconds: 3600
          path: oidc-token
  - name: kube-api-access-7bg5d
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2026-04-17T18:44:09Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2026-04-17T18:44:36Z"
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2026-04-17T18:44:36Z"
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2026-04-17T18:44:09Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: containerd://9fa6ae54f53b58229a54a307b8ab674dd8732c0b8e66f1fc3e95a5b6f8ab5387
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher:v4.5.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher@sha256:d69cc72025f7c40dae112ff989e920a3331583497c8dfb1600c5ae0e37184a29
    lastState: {}
    name: csi-attacher
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-04-17T18:44:36Z"
  - containerID: containerd://30035774db0cf0ceff0610e0fffc108962d6750e90769ce5f46401babe6a222f
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner@sha256:de79c8bbc271622eb94d2ee8689f189ea7c1cb6adac260a421980fe5eed66708
    lastState: {}
    name: csi-provisioner
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-04-17T18:44:28Z"
  - containerID: containerd://c0d3040a5dee85cc9b66d3d24bd691a6254a10d2ba343481c87cacc6afea40d9
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: csi-rbdplugin
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-04-17T18:44:26Z"
  - containerID: containerd://0d14a5d17d32d47eb6ec977e204ec53a550b5637c73feab3e0b941924095da5e
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: csi-rbdplugin-controller
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-04-17T18:44:36Z"
  - containerID: containerd://d979cfb58af72175ca409cdf4ed0fa58b6808899f277781b99efe3d359359054
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer:v1.10.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer@sha256:4c148bbdf883153bc72d321be4dc55c33774a6d98b2b3e0c2da6ae389149a9b7
    lastState: {}
    name: csi-resizer
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-04-17T18:44:32Z"
  - containerID: containerd://0d0373bf674860d00b7b66792cb1ba7727461dc5826d17b9670f41e3e95d9b2a
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter:v7.0.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter@sha256:682d5015146de0f922def125a3be1e2a29c43a3eb45700600e4e0733ec3f5752
    lastState: {}
    name: csi-snapshotter
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-04-17T18:44:34Z"
  - containerID: containerd://5cba28a57335435acd8d5d77a29a202a3174ec8c339872f9ef979654787bd595
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: liveness-prometheus
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-04-17T18:44:36Z"
  hostIP: 199.204.45.222
  phase: Running
  podIP: 10.0.0.55
  podIPs:
  - ip: 10.0.0.55
  qosClass: BestEffort
  startTime: "2026-04-17T18:44:09Z"
