apiVersion: v1 kind: Pod metadata: annotations: configmap-bin-hash: 04e1b9642add0d55fe22bc32643118b3adce4b04300394c3b5d23f6a77c73227 configmap-etc-hash: 007914fb1ae8c4225c65208fa55bb64263c3e415153f0ed63f25db3556ef0c75 openstackhelm.openstack.org/release_uuid: "" creationTimestamp: "2026-10-13T15:26:31Z" generateName: libvirt-libvirt-default- labels: application: libvirt component: libvirt controller-revision-hash: 8f7bf56dd pod-template-generation: "1" release_group: libvirt name: libvirt-libvirt-default-tqpqr namespace: openstack ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: DaemonSet name: libvirt-libvirt-default uid: fe1328bf-7d6d-4900-96c2-1bfaea295831 resourceVersion: "18242" uid: 8c7b4153-fcd1-4b89-8ae6-4c6626f15ffb spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchFields: - key: metadata.name operator: In values: - instance containers: - env: - name: API_ISSUER_KIND value: Issuer - name: API_ISSUER_NAME value: libvirt-api - name: VNC_ISSUER_KIND value: Issuer - name: VNC_ISSUER_NAME value: libvirt-vnc - name: POD_UID valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.uid - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: POD_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP image: harbor.atmosphere.dev/ghcr.io/vexxhost/libvirt-tls-sidecar:v1.0.2@sha256:c994bf3302a9ae9d8e356ed1e192d4e2f8f9d290e89499d30bb75f285eb55074 imagePullPolicy: IfNotPresent name: tls-sidecar resources: {} terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/pki/qemu name: etc-pki-qemu - mountPath: /etc/pki/CA name: etc-pki-ca - mountPath: /etc/pki/libvirt name: etc-pki-libvirt - mountPath: /etc/pki/libvirt-vnc name: etc-pki-libvirt-vnc - mountPath: /run/libvirt name: run-libvirt - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-bg9p2 readOnly: true - command: - /tmp/libvirt.sh env: - name: CEPH_CINDER_USER value: cinder - name: LIBVIRT_CEPH_CINDER_SECRET_UUID value: 457eb676-33da-42ec-9a8c-9293d545c337 image: harbor.atmosphere.dev/ghcr.io/vexxhost/libvirtd:2023.1@sha256:9ec8a98d50ad169aec94a0be7607eae41cb56ba377a1c0a767f3f7b346a3ebf9 imagePullPolicy: IfNotPresent lifecycle: postStart: exec: command: - /tmp/wait-for-libvirt.sh preStop: exec: command: - bash - -c - kill $(cat /var/run/libvirtd.pid) livenessProbe: exec: command: - bash - -c - /usr/bin/virsh connect failureThreshold: 3 initialDelaySeconds: 30 periodSeconds: 60 successThreshold: 1 timeoutSeconds: 5 name: libvirt readinessProbe: exec: command: - bash - -c - /usr/bin/virsh connect failureThreshold: 3 initialDelaySeconds: 15 periodSeconds: 60 successThreshold: 1 timeoutSeconds: 5 resources: {} securityContext: privileged: true readOnlyRootFilesystem: false terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/pki/qemu name: etc-pki-qemu - mountPath: /etc/pki/CA name: etc-pki-ca - mountPath: /etc/pki/libvirt name: etc-pki-libvirt - mountPath: /etc/pki/libvirt-vnc name: etc-pki-libvirt-vnc - mountPath: /tmp name: pod-tmp - mountPath: /tmp/libvirt.sh name: libvirt-bin readOnly: true subPath: libvirt.sh - mountPath: /tmp/wait-for-libvirt.sh name: libvirt-bin readOnly: true subPath: wait-for-libvirt.sh - mountPath: /etc/libvirt/libvirtd.conf name: pod-shared readOnly: true subPath: libvirtd.conf - mountPath: /etc/libvirt/qemu.conf name: libvirt-etc readOnly: true subPath: qemu.conf - mountPath: /etc/libvirt/qemu name: etc-libvirt-qemu - mountPath: /lib/modules name: libmodules readOnly: true - mountPath: /var/lib/libvirt mountPropagation: Bidirectional name: var-lib-libvirt - mountPath: /var/lib/nova mountPropagation: Bidirectional name: var-lib-nova - mountPath: /run name: run - mountPath: /dev name: dev - mountPath: /sys/fs/cgroup name: cgroup - mountPath: /var/log/libvirt name: logs - mountPath: /etc/machine-id name: machine-id readOnly: true - mountPath: /etc/ceph name: etcceph - mountPath: /tmp/client-keyring name: ceph-keyring readOnly: true subPath: key - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-bg9p2 readOnly: true - args: - --libvirt.uri - /run/libvirt/libvirt-sock-ro image: harbor.atmosphere.dev/ghcr.io/inovex/prometheus-libvirt-exporter:2.2.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: / port: metrics scheme: HTTP initialDelaySeconds: 30 periodSeconds: 60 successThreshold: 1 timeoutSeconds: 5 name: libvirt-exporter ports: - containerPort: 9177 hostPort: 9177 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: / port: metrics scheme: HTTP initialDelaySeconds: 15 periodSeconds: 60 successThreshold: 1 timeoutSeconds: 5 resources: {} securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /run mountPropagation: Bidirectional name: run - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-bg9p2 readOnly: true dnsPolicy: ClusterFirstWithHostNet enableServiceLinks: true hostIPC: true hostNetwork: true hostPID: true initContainers: - command: - kubernetes-entrypoint env: - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: INTERFACE_NAME value: eth0 - name: PATH value: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/ - name: DEPENDENCY_SERVICE - name: DEPENDENCY_DAEMONSET - name: DEPENDENCY_CONTAINER - name: DEPENDENCY_POD_JSON value: '[{"labels":{"application":"neutron","component":"neutron-ovs-agent"},"requireSameNode":true}]' - name: DEPENDENCY_CUSTOM_RESOURCE image: harbor.atmosphere.dev/ghcr.io/vexxhost/kubernetes-entrypoint:edge@sha256:8921b64b87af184a1421dd856b2703bcf3cff9f50863cd0d18371cf964a87bd3 imagePullPolicy: IfNotPresent name: init resources: {} securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true runAsUser: 65534 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-bg9p2 readOnly: true - command: - /tmp/init-dynamic-options.sh image: harbor.atmosphere.dev/ghcr.io/vexxhost/libvirtd:2023.1@sha256:9ec8a98d50ad169aec94a0be7607eae41cb56ba377a1c0a767f3f7b346a3ebf9 imagePullPolicy: IfNotPresent name: init-dynamic-options resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 65534 terminationMessagePath: /var/log/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: pod-tmp - mountPath: /tmp/pod-shared name: pod-shared - mountPath: /tmp/init-dynamic-options.sh name: libvirt-bin readOnly: true subPath: init-dynamic-options.sh - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-bg9p2 readOnly: true - command: - /tmp/ceph-admin-keyring.sh image: harbor.atmosphere.dev/ghcr.io/vexxhost/libvirtd:2023.1@sha256:9ec8a98d50ad169aec94a0be7607eae41cb56ba377a1c0a767f3f7b346a3ebf9 imagePullPolicy: IfNotPresent name: ceph-admin-keyring-placement resources: {} securityContext: readOnlyRootFilesystem: false terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: pod-tmp - mountPath: /etc/ceph name: etcceph - mountPath: /tmp/ceph-admin-keyring.sh name: libvirt-bin readOnly: true subPath: ceph-admin-keyring.sh - mountPath: /tmp/client-keyring name: ceph-keyring readOnly: true subPath: key - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-bg9p2 readOnly: true - command: - /tmp/ceph-keyring.sh env: - name: CEPH_CINDER_USER value: cinder - name: LIBVIRT_CEPH_CINDER_SECRET_UUID value: 457eb676-33da-42ec-9a8c-9293d545c337 image: harbor.atmosphere.dev/ghcr.io/vexxhost/libvirtd:2023.1@sha256:9ec8a98d50ad169aec94a0be7607eae41cb56ba377a1c0a767f3f7b346a3ebf9 imagePullPolicy: IfNotPresent name: ceph-keyring-placement resources: {} securityContext: readOnlyRootFilesystem: false terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: pod-tmp - mountPath: /etc/ceph name: etcceph - mountPath: /tmp/ceph-keyring.sh name: libvirt-bin readOnly: true subPath: ceph-keyring.sh - mountPath: /etc/ceph/ceph.conf.template name: ceph-etc readOnly: true subPath: ceph.conf - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-bg9p2 readOnly: true nodeName: instance nodeSelector: openstack-compute-node: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: runAsUser: 0 serviceAccount: libvirt serviceAccountName: libvirt terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists - effect: NoSchedule key: node.kubernetes.io/disk-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/pid-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/unschedulable operator: Exists - effect: NoSchedule key: node.kubernetes.io/network-unavailable operator: Exists volumes: - hostPath: path: /etc/pki/qemu type: "" name: etc-pki-qemu - emptyDir: {} name: etc-pki-ca - emptyDir: {} name: etc-pki-libvirt - hostPath: path: /etc/pki/libvirt-vnc type: "" name: etc-pki-libvirt-vnc - emptyDir: {} name: pod-tmp - configMap: defaultMode: 365 name: libvirt-libvirt-default-bin name: libvirt-bin - name: libvirt-etc secret: defaultMode: 292 secretName: libvirt-libvirt-default-etc - emptyDir: {} name: etcceph - configMap: defaultMode: 292 name: ceph-etc name: ceph-etc - name: ceph-keyring secret: defaultMode: 420 secretName: pvc-ceph-client-key - hostPath: path: /lib/modules type: "" name: libmodules - hostPath: path: /var/lib/libvirt type: "" name: var-lib-libvirt - hostPath: path: /var/lib/nova type: "" name: var-lib-nova - hostPath: path: /run type: "" name: run - hostPath: path: /run/libvirt type: "" name: run-libvirt - hostPath: path: /dev type: "" name: dev - hostPath: path: /var/log/libvirt type: "" name: logs - hostPath: path: /sys/fs/cgroup type: "" name: cgroup - hostPath: path: /etc/machine-id type: "" name: machine-id - hostPath: path: /etc/libvirt/qemu type: "" name: etc-libvirt-qemu - hostPath: path: /etc/modprobe.d type: "" name: etc-modprobe-d - hostPath: path: / type: Directory name: host-rootfs - emptyDir: {} name: pod-shared - name: kube-api-access-bg9p2 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-10-13T15:33:43Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-10-13T15:34:32Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-10-13T15:34:32Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-10-13T15:26:31Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://1eb4806cc6c0f6574cf206abb5f6d18e21f36055c2092ac7cac678e6f5f45386 image: sha256:d6ee461ff75e4e197cd7ea6f375df76e97998e815a428781d8d7e1c6c5242482 imageID: harbor.atmosphere.dev/ghcr.io/vexxhost/libvirtd@sha256:9ec8a98d50ad169aec94a0be7607eae41cb56ba377a1c0a767f3f7b346a3ebf9 lastState: {} name: libvirt ready: true restartCount: 0 started: true state: running: startedAt: "2026-10-13T15:33:47Z" - containerID: containerd://8041c6aaf21b0bdd3ba68f525102f3dc455087b87f01d4b5340b306a8b38047b image: harbor.atmosphere.dev/ghcr.io/inovex/prometheus-libvirt-exporter:2.2.0 imageID: harbor.atmosphere.dev/ghcr.io/inovex/prometheus-libvirt-exporter@sha256:91bb180945199d7443bf271552be8e85a7519a065b6e49f634f78e3d4272de5b lastState: {} name: libvirt-exporter ready: true restartCount: 0 started: true state: running: startedAt: "2026-10-13T15:33:53Z" - containerID: containerd://7bb7f368c2ed550e67d3bfec06b9407c4b9a82a1fd5f3ce8753177148014beb3 image: sha256:5f00520dedae4876b0e676f5c543395943cf0637fe3b8a34e05c16bb0a717edb imageID: harbor.atmosphere.dev/ghcr.io/vexxhost/libvirt-tls-sidecar@sha256:c994bf3302a9ae9d8e356ed1e192d4e2f8f9d290e89499d30bb75f285eb55074 lastState: {} name: tls-sidecar ready: true restartCount: 0 started: true state: running: startedAt: "2026-10-13T15:33:47Z" hostIP: 162.253.55.4 initContainerStatuses: - containerID: containerd://2b2f18a76b74c0b34ba50e2e90ac5c5fe6a1f2e7d5f13411a103f8a595d7f5bc image: sha256:d656bd5737950b86b0ecff4b0206024769c78ea55e2f9f4c840c3cc2a10caaf8 imageID: harbor.atmosphere.dev/ghcr.io/vexxhost/kubernetes-entrypoint@sha256:8921b64b87af184a1421dd856b2703bcf3cff9f50863cd0d18371cf964a87bd3 lastState: {} name: init ready: true restartCount: 0 started: false state: terminated: containerID: containerd://2b2f18a76b74c0b34ba50e2e90ac5c5fe6a1f2e7d5f13411a103f8a595d7f5bc exitCode: 0 finishedAt: "2026-10-13T15:33:31Z" reason: Completed startedAt: "2026-10-13T15:26:32Z" - containerID: containerd://6c258989d2468c393d7da0b5e8d3acecf20faf311bdc9a7740682537cfb68144 image: sha256:d6ee461ff75e4e197cd7ea6f375df76e97998e815a428781d8d7e1c6c5242482 imageID: harbor.atmosphere.dev/ghcr.io/vexxhost/libvirtd@sha256:9ec8a98d50ad169aec94a0be7607eae41cb56ba377a1c0a767f3f7b346a3ebf9 lastState: {} name: init-dynamic-options ready: true restartCount: 0 started: false state: terminated: containerID: containerd://6c258989d2468c393d7da0b5e8d3acecf20faf311bdc9a7740682537cfb68144 exitCode: 0 finishedAt: "2026-10-13T15:33:38Z" reason: Completed startedAt: "2026-10-13T15:33:38Z" - containerID: containerd://f1a5d2588c617e2b24d5218022b98df5ab248e0273d6f011389a4a87675423a2 image: sha256:d6ee461ff75e4e197cd7ea6f375df76e97998e815a428781d8d7e1c6c5242482 imageID: harbor.atmosphere.dev/ghcr.io/vexxhost/libvirtd@sha256:9ec8a98d50ad169aec94a0be7607eae41cb56ba377a1c0a767f3f7b346a3ebf9 lastState: {} name: ceph-admin-keyring-placement ready: true restartCount: 0 started: false state: terminated: containerID: containerd://f1a5d2588c617e2b24d5218022b98df5ab248e0273d6f011389a4a87675423a2 exitCode: 0 finishedAt: "2026-10-13T15:33:40Z" reason: Completed startedAt: "2026-10-13T15:33:40Z" - containerID: containerd://7b629bc2da3319300c13f0d43ece753ebfaccb16c871f301d51afcf43a498671 image: sha256:d6ee461ff75e4e197cd7ea6f375df76e97998e815a428781d8d7e1c6c5242482 imageID: harbor.atmosphere.dev/ghcr.io/vexxhost/libvirtd@sha256:9ec8a98d50ad169aec94a0be7607eae41cb56ba377a1c0a767f3f7b346a3ebf9 lastState: {} name: ceph-keyring-placement ready: true restartCount: 0 started: false state: terminated: containerID: containerd://7b629bc2da3319300c13f0d43ece753ebfaccb16c871f301d51afcf43a498671 exitCode: 0 finishedAt: "2026-10-13T15:33:42Z" reason: Completed startedAt: "2026-10-13T15:33:41Z" phase: Running podIP: 162.253.55.4 podIPs: - ip: 162.253.55.4 qosClass: BestEffort startTime: "2026-10-13T15:26:31Z"