apiVersion: apps/v1 kind: Deployment metadata: annotations: banzaicloud.com/last-applied: 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 deployment.kubernetes.io/revision: "1" creationTimestamp: "2026-03-19T18:08:13Z" generation: 1 labels: app: rook-ceph-rgw app.kubernetes.io/component: cephobjectstores.ceph.rook.io app.kubernetes.io/created-by: rook-ceph-operator app.kubernetes.io/instance: ceph app.kubernetes.io/managed-by: rook-ceph-operator app.kubernetes.io/name: ceph-rgw app.kubernetes.io/part-of: ceph ceph-version: 18.2.7-0 ceph_daemon_id: ceph ceph_daemon_type: rgw rgw: ceph rook-version: v1.10.10 rook.io/operator-namespace: rook-ceph rook_cluster: openstack rook_object_store: ceph name: rook-ceph-rgw-ceph-a namespace: openstack ownerReferences: - apiVersion: ceph.rook.io/v1 blockOwnerDeletion: true controller: true kind: CephObjectStore name: ceph uid: 77a4538d-ff85-4549-afbb-0f87a3140ae4 resourceVersion: "9409" uid: 91725f18-2a38-49d8-9f20-2ba9dfe97058 spec: progressDeadlineSeconds: 600 replicas: 1 revisionHistoryLimit: 10 selector: matchLabels: app: rook-ceph-rgw ceph_daemon_id: ceph rgw: ceph rook_cluster: openstack rook_object_store: ceph strategy: rollingUpdate: maxSurge: 0 maxUnavailable: 1 type: RollingUpdate template: metadata: creationTimestamp: null labels: app: rook-ceph-rgw app.kubernetes.io/component: cephobjectstores.ceph.rook.io app.kubernetes.io/created-by: rook-ceph-operator app.kubernetes.io/instance: ceph app.kubernetes.io/managed-by: rook-ceph-operator app.kubernetes.io/name: ceph-rgw app.kubernetes.io/part-of: ceph ceph_daemon_id: ceph ceph_daemon_type: rgw rgw: ceph rook.io/operator-namespace: rook-ceph rook_cluster: openstack rook_object_store: ceph name: rook-ceph-rgw-ceph-a spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - key: openstack-control-plane operator: In values: - enabled podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchLabels: app: rook-ceph-rgw ceph_daemon_id: ceph rgw: ceph rook_cluster: openstack rook_object_store: ceph topologyKey: kubernetes.io/hostname weight: 50 containers: - args: - --fsid=4837cbf8-4f90-4300-b3f6-726c9b9f89b4 - --keyring=/etc/ceph/keyring-store/keyring - --log-to-stderr=true - --err-to-stderr=true - --mon-cluster-log-to-stderr=true - '--log-stderr-prefix=debug ' - --default-log-to-file=false - --default-mon-cluster-log-to-file=false - --mon-host=$(ROOK_CEPH_MON_HOST) - --mon-initial-members=$(ROOK_CEPH_MON_INITIAL_MEMBERS) - --id=rgw.ceph.a - --setuser=ceph - --setgroup=ceph - --foreground - --rgw-frontends=beast port=8080 - --host=$(POD_NAME) - --rgw-mime-types-file=/etc/ceph/rgw/mime.types - --rgw-realm=ceph - --rgw-zonegroup=ceph - --rgw-zone=ceph command: - radosgw env: - name: CONTAINER_IMAGE value: harbor.atmosphere.dev/quay.io/ceph/ceph:v18.2.1 - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName - name: POD_MEMORY_LIMIT valueFrom: resourceFieldRef: divisor: "0" resource: limits.memory - name: POD_MEMORY_REQUEST valueFrom: resourceFieldRef: divisor: "0" resource: requests.memory - name: POD_CPU_LIMIT valueFrom: resourceFieldRef: divisor: "1" resource: limits.cpu - name: POD_CPU_REQUEST valueFrom: resourceFieldRef: divisor: "0" resource: requests.cpu - name: CEPH_USE_RANDOM_NONCE value: "true" - name: ROOK_CEPH_MON_HOST valueFrom: secretKeyRef: key: mon_host name: rook-ceph-config - name: ROOK_CEPH_MON_INITIAL_MEMBERS valueFrom: secretKeyRef: key: mon_initial_members name: rook-ceph-config image: harbor.atmosphere.dev/quay.io/ceph/ceph:v18.2.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 tcpSocket: port: 8080 timeoutSeconds: 1 name: rgw readinessProbe: failureThreshold: 3 httpGet: path: /swift/healthcheck port: 8080 scheme: HTTP initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: {} securityContext: privileged: false startupProbe: failureThreshold: 18 initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 tcpSocket: port: 8080 timeoutSeconds: 1 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/ceph name: rook-config-override readOnly: true - mountPath: /etc/ceph/keyring-store/ name: rook-ceph-rgw-ceph-a-keyring readOnly: true - mountPath: /var/log/ceph name: rook-ceph-log - mountPath: /var/lib/ceph/crash name: rook-ceph-crash - mountPath: /var/lib/ceph/rgw/ceph-ceph name: ceph-daemon-data - mountPath: /etc/ceph/rgw name: rook-ceph-rgw-ceph-mime-types readOnly: true workingDir: /var/log/ceph - command: - /bin/bash - -x - -e - -m - -c - "\nCEPH_CLIENT_ID=ceph-client.rgw.ceph.a\nPERIODICITY=daily\nLOG_ROTATE_CEPH_FILE=/etc/logrotate.d/ceph\nLOG_MAX_SIZE=500M\n\n# edit the logrotate file to only rotate a specific daemon log\n# otherwise we will logrotate log files without reloading certain daemons\n# this might happen when multiple daemons run on the same machine\nsed -i \"s|*.log|$CEPH_CLIENT_ID.log|\" \"$LOG_ROTATE_CEPH_FILE\"\n\n# replace default daily with given user input\nsed --in-place \"s/daily/$PERIODICITY/g\" \"$LOG_ROTATE_CEPH_FILE\"\n\nif [ \"$LOG_MAX_SIZE\" != \"0\" ]; then\n\t# adding maxsize $LOG_MAX_SIZE at the 4th line of the logrotate config file with 4 spaces to maintain indentation\n\tsed --in-place \"4i \\ \\ \\ \\ maxsize $LOG_MAX_SIZE\" \"$LOG_ROTATE_CEPH_FILE\"\nfi\n\nwhile true; do\n\t# we don't force the logrorate but we let the logrotate binary handle the rotation based on user's input for periodicity and size\n\tlogrotate --verbose \"$LOG_ROTATE_CEPH_FILE\"\n\tsleep 15m\ndone\n" image: harbor.atmosphere.dev/quay.io/ceph/ceph:v18.2.1 imagePullPolicy: IfNotPresent name: log-collector resources: limits: cpu: 500m memory: 1Gi requests: cpu: 100m memory: 100Mi securityContext: privileged: false terminationMessagePath: /dev/termination-log terminationMessagePolicy: File tty: true volumeMounts: - mountPath: /etc/ceph name: rook-config-override readOnly: true - mountPath: /var/log/ceph name: rook-ceph-log - mountPath: /var/lib/ceph/crash name: rook-ceph-crash dnsPolicy: ClusterFirst initContainers: - args: - --verbose - --recursive - ceph:ceph - /var/log/ceph - /var/lib/ceph/crash - /var/lib/ceph/rgw/ceph-ceph command: - chown image: harbor.atmosphere.dev/quay.io/ceph/ceph:v18.2.1 imagePullPolicy: IfNotPresent name: chown-container-data-dir resources: {} securityContext: privileged: false terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/ceph name: rook-config-override readOnly: true - mountPath: /etc/ceph/keyring-store/ name: rook-ceph-rgw-ceph-a-keyring readOnly: true - mountPath: /var/log/ceph name: rook-ceph-log - mountPath: /var/lib/ceph/crash name: rook-ceph-crash - mountPath: /var/lib/ceph/rgw/ceph-ceph name: ceph-daemon-data restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: rook-ceph-rgw serviceAccountName: rook-ceph-rgw shareProcessNamespace: true terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 5 volumes: - name: rook-config-override projected: defaultMode: 420 sources: - configMap: items: - key: config mode: 292 path: ceph.conf name: rook-config-override - name: rook-ceph-rgw-ceph-a-keyring secret: defaultMode: 420 secretName: rook-ceph-rgw-ceph-a-keyring - hostPath: path: /var/lib/rook/openstack/log type: "" name: rook-ceph-log - hostPath: path: /var/lib/rook/openstack/crash type: "" name: rook-ceph-crash - emptyDir: {} name: ceph-daemon-data - configMap: defaultMode: 420 name: rook-ceph-rgw-ceph-mime-types name: rook-ceph-rgw-ceph-mime-types status: availableReplicas: 1 conditions: - lastTransitionTime: "2026-03-19T18:08:13Z" lastUpdateTime: "2026-03-19T18:08:13Z" message: Deployment has minimum availability. reason: MinimumReplicasAvailable status: "True" type: Available - lastTransitionTime: "2026-03-19T18:08:13Z" lastUpdateTime: "2026-03-19T18:08:34Z" message: ReplicaSet "rook-ceph-rgw-ceph-a-67fd8975c6" has successfully progressed. reason: NewReplicaSetAvailable status: "True" type: Progressing observedGeneration: 1 readyReplicas: 1 replicas: 1 updatedReplicas: 1