apiVersion: v1
kind: Pod
metadata:
  annotations:
    checksum/configmap: b81b16640a9b5cbcb42967e8334504c7943f51bad7074c22d15064cee2e51dff
    checksum/health: 79d0887a02454a7768ac61449ae806fe7c108024d5bbfdfb5f1ee21c2a80fa04
    checksum/scripts: 795a40c778dbb4fd18ec228b23fa7810c0c80454b10a08e4c051ca02583789d7
    checksum/secret: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
    prometheus.io/port: "9121"
    prometheus.io/scrape: "true"
  creationTimestamp: "2026-04-14T13:08:21Z"
  generateName: valkey-node-
  labels:
    app.kubernetes.io/component: node
    app.kubernetes.io/instance: valkey
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: valkey
    app.kubernetes.io/version: 8.0.2
    apps.kubernetes.io/pod-index: "0"
    controller-revision-hash: valkey-node-85677d7b7f
    helm.sh/chart: valkey-2.4.6
    statefulset.kubernetes.io/pod-name: valkey-node-0
  name: valkey-node-0
  namespace: openstack
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: StatefulSet
    name: valkey-node
    uid: 2c26499b-4dc8-42ff-abe9-cb4ed9cedb9b
  resourceVersion: "3896"
  uid: c53bf9ed-2d2e-430f-a57f-3ccda62af76e
spec:
  affinity:
    podAntiAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
      - labelSelector:
          matchLabels:
            app.kubernetes.io/component: node
            app.kubernetes.io/instance: valkey
            app.kubernetes.io/name: valkey
        topologyKey: kubernetes.io/hostname
  automountServiceAccountToken: false
  containers:
  - args:
    - -c
    - /opt/bitnami/scripts/start-scripts/start-node.sh
    command:
    - /bin/bash
    env:
    - name: BITNAMI_DEBUG
      value: "false"
    - name: VALKEY_PRIMARY_PORT_NUMBER
      value: "6379"
    - name: ALLOW_EMPTY_PASSWORD
      value: "yes"
    - name: VALKEY_TLS_ENABLED
      value: "yes"
    - name: VALKEY_TLS_PORT
      value: "6379"
    - name: VALKEY_TLS_AUTH_CLIENTS
      value: "yes"
    - name: VALKEY_TLS_CERT_FILE
      value: /opt/bitnami/valkey/certs/tls.crt
    - name: VALKEY_TLS_KEY_FILE
      value: /opt/bitnami/valkey/certs/tls.key
    - name: VALKEY_TLS_CA_FILE
      value: /opt/bitnami/valkey/certs/ca.crt
    - name: VALKEY_SENTINEL_TLS_ENABLED
      value: "yes"
    - name: VALKEY_SENTINEL_TLS_PORT_NUMBER
      value: "26379"
    - name: VALKEY_SENTINEL_TLS_AUTH_CLIENTS
      value: "yes"
    - name: VALKEY_SENTINEL_TLS_CERT_FILE
      value: /opt/bitnami/valkey/certs/tls.crt
    - name: VALKEY_SENTINEL_TLS_KEY_FILE
      value: /opt/bitnami/valkey/certs/tls.key
    - name: VALKEY_SENTINEL_TLS_CA_FILE
      value: /opt/bitnami/valkey/certs/ca.crt
    - name: VALKEY_DATA_DIR
      value: /data
    image: harbor.atmosphere.dev/docker.io/bitnamilegacy/valkey:8.0.2-debian-12-r4
    imagePullPolicy: IfNotPresent
    lifecycle:
      preStop:
        exec:
          command:
          - /bin/bash
          - -c
          - /opt/bitnami/scripts/start-scripts/prestop-valkey.sh
    livenessProbe:
      exec:
        command:
        - sh
        - -c
        - /health/ping_liveness_local.sh 5
      failureThreshold: 5
      initialDelaySeconds: 20
      periodSeconds: 5
      successThreshold: 1
      timeoutSeconds: 5
    name: valkey
    ports:
    - containerPort: 6379
      name: valkey
      protocol: TCP
    readinessProbe:
      exec:
        command:
        - sh
        - -c
        - /health/ping_readiness_local.sh 1
      failureThreshold: 5
      initialDelaySeconds: 20
      periodSeconds: 5
      successThreshold: 1
      timeoutSeconds: 1
    resources:
      limits:
        cpu: "1"
        memory: 1Gi
      requests:
        cpu: 500m
        memory: 512Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      readOnlyRootFilesystem: true
      runAsGroup: 1001
      runAsNonRoot: true
      runAsUser: 1001
      seLinuxOptions: {}
      seccompProfile:
        type: RuntimeDefault
    startupProbe:
      exec:
        command:
        - sh
        - -c
        - /health/ping_liveness_local.sh 5
      failureThreshold: 22
      initialDelaySeconds: 10
      periodSeconds: 10
      successThreshold: 1
      timeoutSeconds: 5
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /opt/bitnami/scripts/start-scripts
      name: start-scripts
    - mountPath: /health
      name: health
    - mountPath: /opt/bitnami/valkey-sentinel/etc
      name: sentinel-data
    - mountPath: /data
      name: valkey-data
    - mountPath: /opt/bitnami/valkey/mounted-etc
      name: config
    - mountPath: /opt/bitnami/valkey/etc
      name: empty-dir
      subPath: app-conf-dir
    - mountPath: /tmp
      name: empty-dir
      subPath: tmp-dir
    - mountPath: /opt/bitnami/valkey/certs
      name: valkey-certificates
      readOnly: true
  - args:
    - -c
    - /opt/bitnami/scripts/start-scripts/start-sentinel.sh
    command:
    - /bin/bash
    env:
    - name: BITNAMI_DEBUG
      value: "false"
    - name: ALLOW_EMPTY_PASSWORD
      value: "yes"
    - name: VALKEY_SENTINEL_TLS_ENABLED
      value: "yes"
    - name: VALKEY_SENTINEL_TLS_PORT_NUMBER
      value: "26379"
    - name: VALKEY_SENTINEL_TLS_AUTH_CLIENTS
      value: "yes"
    - name: VALKEY_SENTINEL_TLS_CERT_FILE
      value: /opt/bitnami/valkey/certs/tls.crt
    - name: VALKEY_SENTINEL_TLS_KEY_FILE
      value: /opt/bitnami/valkey/certs/tls.key
    - name: VALKEY_SENTINEL_TLS_CA_FILE
      value: /opt/bitnami/valkey/certs/ca.crt
    image: harbor.atmosphere.dev/docker.io/bitnamilegacy/valkey-sentinel:8.0.2-debian-12-r4
    imagePullPolicy: IfNotPresent
    lifecycle:
      preStop:
        exec:
          command:
          - /bin/bash
          - -c
          - /opt/bitnami/scripts/start-scripts/prestop-sentinel.sh
    livenessProbe:
      exec:
        command:
        - sh
        - -c
        - /health/ping_sentinel.sh 5
      failureThreshold: 6
      initialDelaySeconds: 20
      periodSeconds: 10
      successThreshold: 1
      timeoutSeconds: 5
    name: sentinel
    ports:
    - containerPort: 26379
      name: valkey-sentinel
      protocol: TCP
    readinessProbe:
      exec:
        command:
        - sh
        - -c
        - /health/ping_sentinel.sh 1
      failureThreshold: 6
      initialDelaySeconds: 20
      periodSeconds: 5
      successThreshold: 1
      timeoutSeconds: 1
    resources:
      limits:
        cpu: 150m
        ephemeral-storage: 2Gi
        memory: 192Mi
      requests:
        cpu: 100m
        ephemeral-storage: 50Mi
        memory: 128Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      readOnlyRootFilesystem: true
      runAsGroup: 1001
      runAsNonRoot: true
      runAsUser: 1001
      seLinuxOptions: {}
      seccompProfile:
        type: RuntimeDefault
    startupProbe:
      exec:
        command:
        - sh
        - -c
        - /health/ping_sentinel.sh 5
      failureThreshold: 22
      initialDelaySeconds: 10
      periodSeconds: 10
      successThreshold: 1
      timeoutSeconds: 5
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /tmp
      name: empty-dir
      subPath: tmp-dir
    - mountPath: /opt/bitnami/scripts/start-scripts
      name: start-scripts
    - mountPath: /health
      name: health
    - mountPath: /opt/bitnami/valkey-sentinel/etc
      name: sentinel-data
    - mountPath: /data
      name: valkey-data
    - mountPath: /opt/bitnami/valkey-sentinel/mounted-etc
      name: config
    - mountPath: /opt/bitnami/valkey/certs
      name: valkey-certificates
      readOnly: true
  - command:
    - /bin/bash
    - -c
    - |
      redis_exporter
    env:
    - name: REDIS_ALIAS
      value: valkey
    - name: REDIS_EXPORTER_WEB_LISTEN_ADDRESS
      value: :9121
    - name: REDIS_ADDR
      value: valkeys://localhost:6379
    - name: REDIS_EXPORTER_TLS_CLIENT_KEY_FILE
      value: /opt/bitnami/valkey/certs/tls.key
    - name: REDIS_EXPORTER_TLS_CLIENT_CERT_FILE
      value: /opt/bitnami/valkey/certs/tls.crt
    - name: REDIS_EXPORTER_TLS_CA_CERT_FILE
      value: /opt/bitnami/valkey/certs/ca.crt
    image: harbor.atmosphere.dev/docker.io/bitnamilegacy/redis-exporter:1.67.0-debian-12-r9
    imagePullPolicy: IfNotPresent
    livenessProbe:
      failureThreshold: 5
      initialDelaySeconds: 10
      periodSeconds: 10
      successThreshold: 1
      tcpSocket:
        port: metrics
      timeoutSeconds: 5
    name: metrics
    ports:
    - containerPort: 9121
      name: metrics
      protocol: TCP
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /
        port: metrics
        scheme: HTTP
      initialDelaySeconds: 5
      periodSeconds: 10
      successThreshold: 1
      timeoutSeconds: 1
    resources:
      limits:
        cpu: 150m
        ephemeral-storage: 2Gi
        memory: 192Mi
      requests:
        cpu: 100m
        ephemeral-storage: 50Mi
        memory: 128Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      readOnlyRootFilesystem: true
      runAsGroup: 1001
      runAsNonRoot: true
      runAsUser: 1001
      seLinuxOptions: {}
      seccompProfile:
        type: RuntimeDefault
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /tmp
      name: empty-dir
      subPath: tmp-dir
    - mountPath: /opt/bitnami/valkey/certs
      name: valkey-certificates
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  hostname: valkey-node-0
  nodeName: instance
  nodeSelector:
    openstack-control-plane: enabled
  preemptionPolicy: PreemptLowerPriority
  priority: 0
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext:
    fsGroup: 1001
    fsGroupChangePolicy: Always
  serviceAccount: valkey
  serviceAccountName: valkey
  subdomain: valkey-headless
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  volumes:
  - name: valkey-data
    persistentVolumeClaim:
      claimName: valkey-data-valkey-node-0
  - configMap:
      defaultMode: 493
      name: valkey-scripts
    name: start-scripts
  - configMap:
      defaultMode: 493
      name: valkey-health
    name: health
  - configMap:
      defaultMode: 420
      name: valkey-configuration
    name: config
  - emptyDir: {}
    name: sentinel-data
  - emptyDir: {}
    name: empty-dir
  - name: valkey-certificates
    secret:
      defaultMode: 256
      secretName: valkey-server-certs
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2026-04-14T13:08:26Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2026-04-14T13:11:58Z"
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2026-04-14T13:11:58Z"
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2026-04-14T13:08:26Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: containerd://2863e7c5be7a1f70579893bfd4299c82e0b0cac97509f02ca03a456aef9d5d24
    image: harbor.atmosphere.dev/docker.io/bitnamilegacy/redis-exporter:1.67.0-debian-12-r9
    imageID: harbor.atmosphere.dev/docker.io/bitnamilegacy/redis-exporter@sha256:ed4ce7abc3bb5cd058d4308407fdb0bb1a241a9d09db9a784b92e9edd7288a4c
    lastState: {}
    name: metrics
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-04-14T13:08:43Z"
  - containerID: containerd://958060b66af7034f5d4b9bfbca132f4b0258e17af4b9db054a73b496dbbc8916
    image: harbor.atmosphere.dev/docker.io/bitnamilegacy/valkey-sentinel:8.0.2-debian-12-r4
    imageID: harbor.atmosphere.dev/docker.io/bitnamilegacy/valkey-sentinel@sha256:867272e72712b492b1885129f8167e378283636720176c2cd63df91cc9e080ae
    lastState: {}
    name: sentinel
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-04-14T13:08:39Z"
  - containerID: containerd://69aab726f7154b0ca0d0242239fa2765a28922ba34b56b2a5c21d5975002bb36
    image: harbor.atmosphere.dev/docker.io/bitnamilegacy/valkey:8.0.2-debian-12-r4
    imageID: harbor.atmosphere.dev/docker.io/bitnamilegacy/valkey@sha256:2e2461283571a3e70a784fdab52f6d64f133cb6adff3b0b1644baa10a638666e
    lastState: {}
    name: valkey
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-04-14T13:08:30Z"
  hostIP: 199.19.213.102
  phase: Running
  podIP: 10.0.0.64
  podIPs:
  - ip: 10.0.0.64
  qosClass: Burstable
  startTime: "2026-04-14T13:08:26Z"
