apiVersion: v1
kind: Pod
metadata:
  annotations:
    configmap-bin-hash: c409b7b2d3b66c56bb7fa0ff87b762d0d7725211812e5a579a83fa8382c24150
    configmap-etc-hash: e7175004493502b195f3deee76f7344823bd71ee89325fc650d7ccfcc88f23e1
    openstackhelm.openstack.org/release_uuid: ""
  creationTimestamp: "2026-09-11T05:54:41Z"
  generateName: ovn-controller-
  labels:
    application: ovn
    component: ovn-controller
    controller-revision-hash: 9785866dc
    pod-template-generation: "1"
    release_group: ovn
  name: ovn-controller-v7grk
  namespace: openstack
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: DaemonSet
    name: ovn-controller
    uid: 9d363332-1142-4467-9295-d668a76dd9ca
  resourceVersion: "17793"
  uid: de4db536-a7ab-4c2c-8891-41fd4896ed73
spec:
  affinity:
    nodeAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        nodeSelectorTerms:
        - matchFields:
          - key: metadata.name
            operator: In
            values:
            - instance
  containers:
  - command:
    - /root/ovnkube.sh
    - ovn-controller
    env:
    - name: OVN_DAEMONSET_VERSION
      value: "3"
    - name: OVN_LOGLEVEL_CONTROLLER
      value: -vconsole:info -vfile:info
    - name: OVN_KUBERNETES_NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
    - name: OVN_KUBERNETES_NB_STATEFULSET
      value: ovn-ovsdb-nb
    - name: OVN_KUBERNETES_SB_STATEFULSET
      value: ovn-ovsdb-sb
    - name: OVN_SSL_ENABLE
      value: "no"
    image: harbor.atmosphere.dev/ghcr.io/vexxhost/ovn:v24.03.7-3@sha256:deb1966eff94d8da072a3647db63546722094deb3ef34b6b464609bcba61887a
    imagePullPolicy: IfNotPresent
    name: controller
    readinessProbe:
      exec:
        command:
        - /usr/bin/ovn-kube-util
        - readiness-probe
        - -t
        - ovn-controller
      failureThreshold: 3
      initialDelaySeconds: 30
      periodSeconds: 60
      successThreshold: 1
      timeoutSeconds: 30
    resources: {}
    securityContext:
      privileged: true
      readOnlyRootFilesystem: true
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /run/openvswitch
      name: run-openvswitch
    - mountPath: /var/log/ovn
      name: logs
    - mountPath: /run/ovn
      name: run-openvswitch
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-v568b
      readOnly: true
  - command:
    - vector
    - --config
    - /etc/vector/vector.toml
    image: harbor.atmosphere.dev/docker.io/timberio/vector:0.37.1-debian
    imagePullPolicy: IfNotPresent
    name: vector
    resources: {}
    securityContext:
      allowPrivilegeEscalation: false
      readOnlyRootFilesystem: true
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /etc/vector
      name: vector-config
    - mountPath: /logs
      name: logs
    - mountPath: /var/lib/vector
      name: vector-data
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-v568b
      readOnly: true
  - command:
    - /tmp/ovn-network-logging-parser.sh
    - start
    env:
    - name: VECTOR_HTTP_ENDPOINT
      value: http://localhost:5001
    image: harbor.atmosphere.dev/ghcr.io/vexxhost/neutron:2023.1@sha256:5561486b2c5eb637085a36d932096f1b9a726754eb2f6218956923787b45ab02
    imagePullPolicy: IfNotPresent
    name: log-parser
    ports:
    - containerPort: 9697
      hostPort: 9697
      name: http
      protocol: TCP
    resources: {}
    securityContext:
      allowPrivilegeEscalation: false
      readOnlyRootFilesystem: true
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /etc/neutron/neutron.conf
      name: neutron-etc
      readOnly: true
      subPath: neutron.conf
    - mountPath: /tmp/ovn-network-logging-parser.sh
      name: ovn-bin
      readOnly: true
      subPath: ovn-network-logging-parser.sh
    - mountPath: /etc/neutron/neutron-ovn-network-logging-parser-uwsgi.ini
      name: ovn-etc
      readOnly: true
      subPath: neutron-ovn-network-logging-parser-uwsgi.ini
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-v568b
      readOnly: true
  dnsPolicy: ClusterFirstWithHostNet
  enableServiceLinks: true
  hostIPC: true
  hostNetwork: true
  hostPID: true
  initContainers:
  - command:
    - kubernetes-entrypoint
    env:
    - name: POD_NAME
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.name
    - name: NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
    - name: INTERFACE_NAME
      value: eth0
    - name: PATH
      value: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/
    - name: DEPENDENCY_SERVICE
      value: openstack:ovn-ovsdb-sb
    - name: DEPENDENCY_DAEMONSET
    - name: DEPENDENCY_CONTAINER
    - name: DEPENDENCY_POD_JSON
      value: '[{"labels":{"application":"openvswitch","component":"server"},"requireSameNode":true}]'
    - name: DEPENDENCY_CUSTOM_RESOURCE
    image: harbor.atmosphere.dev/ghcr.io/vexxhost/kubernetes-entrypoint:edge@sha256:8921b64b87af184a1421dd856b2703bcf3cff9f50863cd0d18371cf964a87bd3
    imagePullPolicy: IfNotPresent
    name: init
    resources: {}
    securityContext:
      allowPrivilegeEscalation: false
      readOnlyRootFilesystem: true
      runAsUser: 65534
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-v568b
      readOnly: true
  - command:
    - /bin/bash
    - -c
    - |
      kubectl get node ${NODENAME} -o jsonpath='{.metadata.labels.openstack-control-plane}' > /tmp/gw-enabled/gw-enabled
    env:
    - name: NODENAME
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: spec.nodeName
    image: harbor.atmosphere.dev/ghcr.io/vexxhost/ovn:v24.03.7-3@sha256:deb1966eff94d8da072a3647db63546722094deb3ef34b6b464609bcba61887a
    imagePullPolicy: IfNotPresent
    name: get-gw-enabled
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /tmp/gw-enabled
      name: gw-enabled
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-v568b
      readOnly: true
  - command:
    - /tmp/ovn-controller-init.sh
    env:
    - name: NODE_NAME
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: spec.nodeName
    image: harbor.atmosphere.dev/ghcr.io/vexxhost/ovn:v24.03.7-3@sha256:deb1966eff94d8da072a3647db63546722094deb3ef34b6b464609bcba61887a
    imagePullPolicy: IfNotPresent
    name: controller-init
    resources: {}
    securityContext:
      privileged: true
      readOnlyRootFilesystem: true
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /tmp/ovn-controller-init.sh
      name: ovn-bin
      readOnly: true
      subPath: ovn-controller-init.sh
    - mountPath: /run/openvswitch
      name: run-openvswitch
    - mountPath: /tmp/auto_bridge_add
      name: ovn-etc
      readOnly: true
      subPath: auto_bridge_add
    - mountPath: /tmp/gw-enabled
      name: gw-enabled
      readOnly: true
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-v568b
      readOnly: true
  nodeName: instance
  nodeSelector:
    openvswitch: enabled
  preemptionPolicy: PreemptLowerPriority
  priority: 0
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext: {}
  serviceAccount: ovn-controller
  serviceAccountName: ovn-controller
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
  - effect: NoSchedule
    key: node.kubernetes.io/disk-pressure
    operator: Exists
  - effect: NoSchedule
    key: node.kubernetes.io/memory-pressure
    operator: Exists
  - effect: NoSchedule
    key: node.kubernetes.io/pid-pressure
    operator: Exists
  - effect: NoSchedule
    key: node.kubernetes.io/unschedulable
    operator: Exists
  - effect: NoSchedule
    key: node.kubernetes.io/network-unavailable
    operator: Exists
  volumes:
  - configMap:
      defaultMode: 511
      name: ovn-bin
    name: ovn-bin
  - hostPath:
      path: /run/openvswitch
      type: DirectoryOrCreate
    name: run-openvswitch
  - name: ovn-etc
    secret:
      defaultMode: 292
      secretName: ovn-etc
  - hostPath:
      path: /var/log/ovn
      type: DirectoryOrCreate
    name: logs
  - hostPath:
      path: /run/ovn
      type: DirectoryOrCreate
    name: run-ovn
  - emptyDir: {}
    name: gw-enabled
  - name: vector-config
    secret:
      defaultMode: 420
      secretName: ovn-vector-config
  - emptyDir: {}
    name: vector-data
  - name: neutron-etc
    secret:
      defaultMode: 292
      secretName: neutron-etc
  - name: kube-api-access-v568b
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2026-09-11T06:00:59Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2026-09-11T06:01:54Z"
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2026-09-11T06:01:54Z"
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2026-09-11T05:54:41Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: containerd://34726de95f25782c600d6dda08814d3798c93ddbb175f74d7b3347015886ce80
    image: sha256:f183e9d034a520ebdfadc9ee3e250ce9012a8aa7baf1d41322996382ff01e8f5
    imageID: harbor.atmosphere.dev/ghcr.io/vexxhost/ovn@sha256:deb1966eff94d8da072a3647db63546722094deb3ef34b6b464609bcba61887a
    lastState: {}
    name: controller
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-09-11T06:00:59Z"
  - containerID: containerd://b97e6ba1a580a3e33f34b47807c0fae83e739fdd9f6952453e2d094f5ff44650
    image: sha256:713b33d104551fdfb9cb6bd8aeb6db897acef00aea52cdb7fa05d7415eaa91d3
    imageID: harbor.atmosphere.dev/ghcr.io/vexxhost/neutron@sha256:5561486b2c5eb637085a36d932096f1b9a726754eb2f6218956923787b45ab02
    lastState: {}
    name: log-parser
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-09-11T06:00:59Z"
  - containerID: containerd://034a390e5fbac35a85c867ddd87d3ddac078e3bb75eb74cc5e659480c9c49f16
    image: harbor.atmosphere.dev/docker.io/timberio/vector:0.37.1-debian
    imageID: harbor.atmosphere.dev/docker.io/timberio/vector@sha256:e0d1bc9e61d99a139870f7276a18f36c3365ad76456a2e103fd5cb277a5a1fcb
    lastState: {}
    name: vector
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-09-11T06:00:59Z"
  hostIP: 162.253.55.75
  initContainerStatuses:
  - containerID: containerd://7957128c68e12e9ecf86e7040514fa147ea39ead667c316ea7a7d571ea72bb46
    image: sha256:d656bd5737950b86b0ecff4b0206024769c78ea55e2f9f4c840c3cc2a10caaf8
    imageID: harbor.atmosphere.dev/ghcr.io/vexxhost/kubernetes-entrypoint@sha256:8921b64b87af184a1421dd856b2703bcf3cff9f50863cd0d18371cf964a87bd3
    lastState: {}
    name: init
    ready: true
    restartCount: 0
    started: false
    state:
      terminated:
        containerID: containerd://7957128c68e12e9ecf86e7040514fa147ea39ead667c316ea7a7d571ea72bb46
        exitCode: 0
        finishedAt: "2026-09-11T06:00:56Z"
        reason: Completed
        startedAt: "2026-09-11T06:00:54Z"
  - containerID: containerd://2a7b1e2de6f8e23e6c88303c8bda6aa5eb319101e52a69c9b2b3250e6dbf1606
    image: sha256:f183e9d034a520ebdfadc9ee3e250ce9012a8aa7baf1d41322996382ff01e8f5
    imageID: harbor.atmosphere.dev/ghcr.io/vexxhost/ovn@sha256:deb1966eff94d8da072a3647db63546722094deb3ef34b6b464609bcba61887a
    lastState: {}
    name: get-gw-enabled
    ready: true
    restartCount: 0
    started: false
    state:
      terminated:
        containerID: containerd://2a7b1e2de6f8e23e6c88303c8bda6aa5eb319101e52a69c9b2b3250e6dbf1606
        exitCode: 0
        finishedAt: "2026-09-11T06:00:57Z"
        reason: Completed
        startedAt: "2026-09-11T06:00:57Z"
  - containerID: containerd://7bc87c4c558e8671642cacebc52b333ab7dcdd9a534488f11a6682ac7c2529cc
    image: sha256:f183e9d034a520ebdfadc9ee3e250ce9012a8aa7baf1d41322996382ff01e8f5
    imageID: harbor.atmosphere.dev/ghcr.io/vexxhost/ovn@sha256:deb1966eff94d8da072a3647db63546722094deb3ef34b6b464609bcba61887a
    lastState: {}
    name: controller-init
    ready: true
    restartCount: 0
    started: false
    state:
      terminated:
        containerID: containerd://7bc87c4c558e8671642cacebc52b333ab7dcdd9a534488f11a6682ac7c2529cc
        exitCode: 0
        finishedAt: "2026-09-11T06:00:58Z"
        reason: Completed
        startedAt: "2026-09-11T06:00:58Z"
  phase: Running
  podIP: 162.253.55.75
  podIPs:
  - ip: 162.253.55.75
  qosClass: BestEffort
  startTime: "2026-09-11T05:54:41Z"
