apiVersion: batch/v1
kind: Job
metadata:
  annotations:
    helm.sh/hook: post-install,post-upgrade
    helm.sh/hook-weight: "-2"
  creationTimestamp: "2026-03-29T02:08:19Z"
  generation: 1
  labels:
    application: barbican
    component: ks-endpoints
    release_group: barbican
  name: barbican-ks-endpoints
  namespace: openstack
  resourceVersion: "7811"
  uid: f39c975b-5bb0-4fd5-933e-8c2391f52ff3
spec:
  backoffLimit: 1000
  completionMode: NonIndexed
  completions: 1
  parallelism: 1
  selector:
    matchLabels:
      batch.kubernetes.io/controller-uid: f39c975b-5bb0-4fd5-933e-8c2391f52ff3
  suspend: false
  template:
    metadata:
      annotations:
        openstackhelm.openstack.org/release_uuid: ""
      creationTimestamp: null
      labels:
        application: barbican
        batch.kubernetes.io/controller-uid: f39c975b-5bb0-4fd5-933e-8c2391f52ff3
        batch.kubernetes.io/job-name: barbican-ks-endpoints
        component: ks-endpoints
        controller-uid: f39c975b-5bb0-4fd5-933e-8c2391f52ff3
        job-name: barbican-ks-endpoints
        release_group: barbican
    spec:
      containers:
      - command:
        - /bin/bash
        - -c
        - /tmp/ks-endpoints.sh
        env:
        - name: OS_IDENTITY_API_VERSION
          value: "3"
        - name: OS_AUTH_URL
          valueFrom:
            secretKeyRef:
              key: OS_AUTH_URL
              name: barbican-keystone-admin
        - name: OS_REGION_NAME
          valueFrom:
            secretKeyRef:
              key: OS_REGION_NAME
              name: barbican-keystone-admin
        - name: OS_INTERFACE
          valueFrom:
            secretKeyRef:
              key: OS_INTERFACE
              name: barbican-keystone-admin
        - name: OS_ENDPOINT_TYPE
          valueFrom:
            secretKeyRef:
              key: OS_INTERFACE
              name: barbican-keystone-admin
        - name: OS_PROJECT_DOMAIN_NAME
          valueFrom:
            secretKeyRef:
              key: OS_PROJECT_DOMAIN_NAME
              name: barbican-keystone-admin
        - name: OS_PROJECT_NAME
          valueFrom:
            secretKeyRef:
              key: OS_PROJECT_NAME
              name: barbican-keystone-admin
        - name: OS_USER_DOMAIN_NAME
          valueFrom:
            secretKeyRef:
              key: OS_USER_DOMAIN_NAME
              name: barbican-keystone-admin
        - name: OS_USERNAME
          valueFrom:
            secretKeyRef:
              key: OS_USERNAME
              name: barbican-keystone-admin
        - name: OS_PASSWORD
          valueFrom:
            secretKeyRef:
              key: OS_PASSWORD
              name: barbican-keystone-admin
        - name: OS_DEFAULT_DOMAIN
          valueFrom:
            secretKeyRef:
              key: OS_DEFAULT_DOMAIN
              name: barbican-keystone-admin
        - name: OS_SVC_ENDPOINT
          value: admin
        - name: OS_SERVICE_NAME
          value: barbican
        - name: OS_SERVICE_TYPE
          value: key-manager
        - name: OS_SERVICE_ENDPOINT
          value: http://barbican-api.openstack.svc.cluster.local:9311/
        image: harbor.atmosphere.dev/ghcr.io/vexxhost/heat:2025.1@sha256:bc1e7dca4e19cebfab2f9028a0aa5023f1c72e409ecfbf8af5a71ae07d18af4d
        imagePullPolicy: IfNotPresent
        name: key-manager-ks-endpoints-admin
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /tmp
          name: pod-tmp
        - mountPath: /tmp/ks-endpoints.sh
          name: ks-endpoints-sh
          readOnly: true
          subPath: ks-endpoints.sh
      - command:
        - /bin/bash
        - -c
        - /tmp/ks-endpoints.sh
        env:
        - name: OS_IDENTITY_API_VERSION
          value: "3"
        - name: OS_AUTH_URL
          valueFrom:
            secretKeyRef:
              key: OS_AUTH_URL
              name: barbican-keystone-admin
        - name: OS_REGION_NAME
          valueFrom:
            secretKeyRef:
              key: OS_REGION_NAME
              name: barbican-keystone-admin
        - name: OS_INTERFACE
          valueFrom:
            secretKeyRef:
              key: OS_INTERFACE
              name: barbican-keystone-admin
        - name: OS_ENDPOINT_TYPE
          valueFrom:
            secretKeyRef:
              key: OS_INTERFACE
              name: barbican-keystone-admin
        - name: OS_PROJECT_DOMAIN_NAME
          valueFrom:
            secretKeyRef:
              key: OS_PROJECT_DOMAIN_NAME
              name: barbican-keystone-admin
        - name: OS_PROJECT_NAME
          valueFrom:
            secretKeyRef:
              key: OS_PROJECT_NAME
              name: barbican-keystone-admin
        - name: OS_USER_DOMAIN_NAME
          valueFrom:
            secretKeyRef:
              key: OS_USER_DOMAIN_NAME
              name: barbican-keystone-admin
        - name: OS_USERNAME
          valueFrom:
            secretKeyRef:
              key: OS_USERNAME
              name: barbican-keystone-admin
        - name: OS_PASSWORD
          valueFrom:
            secretKeyRef:
              key: OS_PASSWORD
              name: barbican-keystone-admin
        - name: OS_DEFAULT_DOMAIN
          valueFrom:
            secretKeyRef:
              key: OS_DEFAULT_DOMAIN
              name: barbican-keystone-admin
        - name: OS_SVC_ENDPOINT
          value: internal
        - name: OS_SERVICE_NAME
          value: barbican
        - name: OS_SERVICE_TYPE
          value: key-manager
        - name: OS_SERVICE_ENDPOINT
          value: http://barbican-api.openstack.svc.cluster.local:9311/
        image: harbor.atmosphere.dev/ghcr.io/vexxhost/heat:2025.1@sha256:bc1e7dca4e19cebfab2f9028a0aa5023f1c72e409ecfbf8af5a71ae07d18af4d
        imagePullPolicy: IfNotPresent
        name: key-manager-ks-endpoints-internal
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /tmp
          name: pod-tmp
        - mountPath: /tmp/ks-endpoints.sh
          name: ks-endpoints-sh
          readOnly: true
          subPath: ks-endpoints.sh
      - command:
        - /bin/bash
        - -c
        - /tmp/ks-endpoints.sh
        env:
        - name: OS_IDENTITY_API_VERSION
          value: "3"
        - name: OS_AUTH_URL
          valueFrom:
            secretKeyRef:
              key: OS_AUTH_URL
              name: barbican-keystone-admin
        - name: OS_REGION_NAME
          valueFrom:
            secretKeyRef:
              key: OS_REGION_NAME
              name: barbican-keystone-admin
        - name: OS_INTERFACE
          valueFrom:
            secretKeyRef:
              key: OS_INTERFACE
              name: barbican-keystone-admin
        - name: OS_ENDPOINT_TYPE
          valueFrom:
            secretKeyRef:
              key: OS_INTERFACE
              name: barbican-keystone-admin
        - name: OS_PROJECT_DOMAIN_NAME
          valueFrom:
            secretKeyRef:
              key: OS_PROJECT_DOMAIN_NAME
              name: barbican-keystone-admin
        - name: OS_PROJECT_NAME
          valueFrom:
            secretKeyRef:
              key: OS_PROJECT_NAME
              name: barbican-keystone-admin
        - name: OS_USER_DOMAIN_NAME
          valueFrom:
            secretKeyRef:
              key: OS_USER_DOMAIN_NAME
              name: barbican-keystone-admin
        - name: OS_USERNAME
          valueFrom:
            secretKeyRef:
              key: OS_USERNAME
              name: barbican-keystone-admin
        - name: OS_PASSWORD
          valueFrom:
            secretKeyRef:
              key: OS_PASSWORD
              name: barbican-keystone-admin
        - name: OS_DEFAULT_DOMAIN
          valueFrom:
            secretKeyRef:
              key: OS_DEFAULT_DOMAIN
              name: barbican-keystone-admin
        - name: OS_SVC_ENDPOINT
          value: public
        - name: OS_SERVICE_NAME
          value: barbican
        - name: OS_SERVICE_TYPE
          value: key-manager
        - name: OS_SERVICE_ENDPOINT
          value: https://key-manager.162-253-55-62.nip.io/
        image: harbor.atmosphere.dev/ghcr.io/vexxhost/heat:2025.1@sha256:bc1e7dca4e19cebfab2f9028a0aa5023f1c72e409ecfbf8af5a71ae07d18af4d
        imagePullPolicy: IfNotPresent
        name: key-manager-ks-endpoints-public
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /tmp
          name: pod-tmp
        - mountPath: /tmp/ks-endpoints.sh
          name: ks-endpoints-sh
          readOnly: true
          subPath: ks-endpoints.sh
      dnsPolicy: ClusterFirst
      initContainers:
      - command:
        - kubernetes-entrypoint
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.name
        - name: NAMESPACE
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
        - name: INTERFACE_NAME
          value: eth0
        - name: PATH
          value: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/
        - name: DEPENDENCY_SERVICE
          value: openstack:keystone-api
        - name: DEPENDENCY_JOBS
          value: barbican-ks-service
        - name: DEPENDENCY_DAEMONSET
        - name: DEPENDENCY_CONTAINER
        - name: DEPENDENCY_POD_JSON
        - name: DEPENDENCY_CUSTOM_RESOURCE
        image: harbor.atmosphere.dev/ghcr.io/vexxhost/kubernetes-entrypoint:edge@sha256:8921b64b87af184a1421dd856b2703bcf3cff9f50863cd0d18371cf964a87bd3
        imagePullPolicy: IfNotPresent
        name: init
        resources: {}
        securityContext:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
          runAsUser: 65534
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
      nodeSelector:
        openstack-control-plane: enabled
      restartPolicy: OnFailure
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: barbican-ks-endpoints
      serviceAccountName: barbican-ks-endpoints
      terminationGracePeriodSeconds: 30
      volumes:
      - emptyDir: {}
        name: pod-tmp
      - configMap:
          defaultMode: 365
          name: barbican-bin
        name: ks-endpoints-sh
status:
  completionTime: "2026-03-29T02:08:35Z"
  conditions:
  - lastProbeTime: "2026-03-29T02:08:35Z"
    lastTransitionTime: "2026-03-29T02:08:35Z"
    status: "True"
    type: Complete
  ready: 0
  startTime: "2026-03-29T02:08:19Z"
  succeeded: 1
  uncountedTerminatedPods: {}