apiVersion: v1
kind: Pod
metadata:
  creationTimestamp: "2026-03-13T09:55:51Z"
  generateName: ceph-csi-rbd-provisioner-69cb97fb6-
  labels:
    app: ceph-csi-rbd
    chart: ceph-csi-rbd-3.11.0
    component: provisioner
    heritage: Helm
    pod-template-hash: 69cb97fb6
    release: ceph-csi-rbd
  name: ceph-csi-rbd-provisioner-69cb97fb6-f8wvj
  namespace: kube-system
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: ReplicaSet
    name: ceph-csi-rbd-provisioner-69cb97fb6
    uid: 4e7ecded-c57d-438e-8331-637ec3850b35
  resourceVersion: "1098"
  uid: fcd6c9ae-6410-45b6-a6ea-01631c4fad02
spec:
  containers:
  - args:
    - --nodeid=$(NODE_ID)
    - --type=rbd
    - --controllerserver=true
    - --pidlimit=-1
    - --endpoint=$(CSI_ENDPOINT)
    - --csi-addons-endpoint=$(CSI_ADDONS_ENDPOINT)
    - --v=5
    - --drivername=$(DRIVER_NAME)
    - --rbdhardmaxclonedepth=8
    - --rbdsoftmaxclonedepth=4
    - --maxsnapshotsonimage=450
    - --minsnapshotsonimage=250
    - --setmetadata=true
    env:
    - name: POD_IP
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: status.podIP
    - name: DRIVER_NAME
      value: rbd.csi.ceph.com
    - name: NODE_ID
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: spec.nodeName
    - name: CSI_ENDPOINT
      value: unix:///csi/csi-provisioner.sock
    - name: CSI_ADDONS_ENDPOINT
      value: unix:///csi/csi-addons.sock
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: csi-rbdplugin
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /dev
      name: host-dev
    - mountPath: /sys
      name: host-sys
    - mountPath: /lib/modules
      name: lib-modules
      readOnly: true
    - mountPath: /etc/ceph-csi-config/
      name: ceph-csi-config
    - mountPath: /etc/ceph/
      name: ceph-config
    - mountPath: /etc/ceph-csi-encryption-kms-config/
      name: ceph-csi-encryption-kms-config
    - mountPath: /tmp/csi/keys
      name: keys-tmp-dir
    - mountPath: /run/secrets/tokens
      name: oidc-token
      readOnly: true
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-p2td5
      readOnly: true
  - args:
    - --csi-address=$(ADDRESS)
    - --v=1
    - --timeout=60s
    - --leader-election=true
    - --retry-interval-start=500ms
    - --default-fstype=ext4
    - --extra-create-metadata=true
    - --feature-gates=HonorPVReclaimPolicy=true
    - --prevent-volume-mode-conversion=true
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
    imagePullPolicy: IfNotPresent
    name: csi-provisioner
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-p2td5
      readOnly: true
  - args:
    - --v=1
    - --csi-address=$(ADDRESS)
    - --timeout=60s
    - --leader-election
    - --retry-interval-start=500ms
    - --handle-volume-inuse-error=false
    - --feature-gates=RecoverVolumeExpansionFailure=true
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer:v1.10.0
    imagePullPolicy: IfNotPresent
    name: csi-resizer
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-p2td5
      readOnly: true
  - args:
    - --csi-address=$(ADDRESS)
    - --v=1
    - --timeout=60s
    - --leader-election=true
    - --extra-create-metadata=true
    - --enable-volume-group-snapshots=false
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter:v7.0.0
    imagePullPolicy: IfNotPresent
    name: csi-snapshotter
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-p2td5
      readOnly: true
  - args:
    - --v=1
    - --csi-address=$(ADDRESS)
    - --leader-election=true
    - --retry-interval-start=500ms
    - --default-fstype=ext4
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher:v4.5.0
    imagePullPolicy: IfNotPresent
    name: csi-attacher
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-p2td5
      readOnly: true
  - args:
    - --type=controller
    - --v=5
    - --drivername=$(DRIVER_NAME)
    - --drivernamespace=$(DRIVER_NAMESPACE)
    - --setmetadata=true
    env:
    - name: DRIVER_NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
    - name: DRIVER_NAME
      value: rbd.csi.ceph.com
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: csi-rbdplugin-controller
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /etc/ceph-csi-config/
      name: ceph-csi-config
    - mountPath: /tmp/csi/keys
      name: keys-tmp-dir
    - mountPath: /etc/ceph/
      name: ceph-config
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-p2td5
      readOnly: true
  - args:
    - --type=liveness
    - --endpoint=$(CSI_ENDPOINT)
    - --metricsport=8080
    - --metricspath=/metrics
    - --polltime=60s
    - --timeout=3s
    env:
    - name: CSI_ENDPOINT
      value: unix:///csi/csi-provisioner.sock
    - name: POD_IP
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: status.podIP
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: liveness-prometheus
    ports:
    - containerPort: 8080
      name: metrics
      protocol: TCP
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-p2td5
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  nodeName: instance
  nodeSelector:
    openstack-control-plane: enabled
  preemptionPolicy: PreemptLowerPriority
  priority: 2000000000
  priorityClassName: system-cluster-critical
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext: {}
  serviceAccount: ceph-csi-rbd-provisioner
  serviceAccountName: ceph-csi-rbd-provisioner
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  volumes:
  - emptyDir:
      medium: Memory
    name: socket-dir
  - hostPath:
      path: /dev
      type: ""
    name: host-dev
  - hostPath:
      path: /sys
      type: ""
    name: host-sys
  - hostPath:
      path: /lib/modules
      type: ""
    name: lib-modules
  - configMap:
      defaultMode: 420
      name: ceph-config
    name: ceph-config
  - configMap:
      defaultMode: 420
      name: ceph-csi-config
    name: ceph-csi-config
  - configMap:
      defaultMode: 420
      name: ceph-csi-encryption-kms-config
    name: ceph-csi-encryption-kms-config
  - emptyDir:
      medium: Memory
    name: keys-tmp-dir
  - name: oidc-token
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          audience: ceph-csi-kms
          expirationSeconds: 3600
          path: oidc-token
  - name: kube-api-access-p2td5
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2026-03-13T09:55:51Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2026-03-13T09:57:01Z"
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2026-03-13T09:57:01Z"
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2026-03-13T09:55:51Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: containerd://bdd208ab01e1ec1a876a3eaac21c90fb9ae3cf0760000e0cb57913227c36bb4c
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher:v4.5.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher@sha256:d69cc72025f7c40dae112ff989e920a3331583497c8dfb1600c5ae0e37184a29
    lastState: {}
    name: csi-attacher
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-13T09:56:59Z"
  - containerID: containerd://b1ad9b225d061783d9b833372f878af6830f1ba8c4bbcf41d4f7c124c2d38fe5
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner@sha256:de79c8bbc271622eb94d2ee8689f189ea7c1cb6adac260a421980fe5eed66708
    lastState: {}
    name: csi-provisioner
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-13T09:56:47Z"
  - containerID: containerd://57320d5c73028296f3ba58b8b56e9990ef7d0719c6825af98a165ecdd954faf1
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: csi-rbdplugin
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-13T09:56:21Z"
  - containerID: containerd://569bb1fb49616036ee8dc5aa512c9ca798a59709bac5a2532e395bd5a0a1c66d
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: csi-rbdplugin-controller
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-13T09:56:59Z"
  - containerID: containerd://a3da0b278eeb6134cdac101752efbe401f93b417e7c47b582ae3bc6f23ee77fe
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer:v1.10.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer@sha256:4c148bbdf883153bc72d321be4dc55c33774a6d98b2b3e0c2da6ae389149a9b7
    lastState: {}
    name: csi-resizer
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-13T09:56:54Z"
  - containerID: containerd://e38b954462832ae84be817dcf6b31849323b1a878534f061f524027eb1558f8b
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter:v7.0.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter@sha256:682d5015146de0f922def125a3be1e2a29c43a3eb45700600e4e0733ec3f5752
    lastState: {}
    name: csi-snapshotter
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-13T09:56:56Z"
  - containerID: containerd://a3fdf99d2a89bae6c607f917ae6ed864d43752817f618f9f3faadbe243dfa27b
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: liveness-prometheus
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-13T09:57:00Z"
  hostIP: 199.19.213.181
  phase: Running
  podIP: 10.0.0.198
  podIPs:
  - ip: 10.0.0.198
  qosClass: BestEffort
  startTime: "2026-03-13T09:55:51Z"
