apiVersion: v1
kind: Pod
metadata:
  creationTimestamp: "2026-03-14T07:00:31Z"
  generateName: ceph-csi-rbd-provisioner-69cb97fb6-
  labels:
    app: ceph-csi-rbd
    chart: ceph-csi-rbd-3.11.0
    component: provisioner
    heritage: Helm
    pod-template-hash: 69cb97fb6
    release: ceph-csi-rbd
  name: ceph-csi-rbd-provisioner-69cb97fb6-xjxz2
  namespace: kube-system
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: ReplicaSet
    name: ceph-csi-rbd-provisioner-69cb97fb6
    uid: a1e29609-c955-449e-97cd-79f14133ec5f
  resourceVersion: "976"
  uid: b4f7a5e2-4d59-40da-b8ea-7f9916e36346
spec:
  containers:
  - args:
    - --nodeid=$(NODE_ID)
    - --type=rbd
    - --controllerserver=true
    - --pidlimit=-1
    - --endpoint=$(CSI_ENDPOINT)
    - --csi-addons-endpoint=$(CSI_ADDONS_ENDPOINT)
    - --v=5
    - --drivername=$(DRIVER_NAME)
    - --rbdhardmaxclonedepth=8
    - --rbdsoftmaxclonedepth=4
    - --maxsnapshotsonimage=450
    - --minsnapshotsonimage=250
    - --setmetadata=true
    env:
    - name: POD_IP
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: status.podIP
    - name: DRIVER_NAME
      value: rbd.csi.ceph.com
    - name: NODE_ID
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: spec.nodeName
    - name: CSI_ENDPOINT
      value: unix:///csi/csi-provisioner.sock
    - name: CSI_ADDONS_ENDPOINT
      value: unix:///csi/csi-addons.sock
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: csi-rbdplugin
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /dev
      name: host-dev
    - mountPath: /sys
      name: host-sys
    - mountPath: /lib/modules
      name: lib-modules
      readOnly: true
    - mountPath: /etc/ceph-csi-config/
      name: ceph-csi-config
    - mountPath: /etc/ceph/
      name: ceph-config
    - mountPath: /etc/ceph-csi-encryption-kms-config/
      name: ceph-csi-encryption-kms-config
    - mountPath: /tmp/csi/keys
      name: keys-tmp-dir
    - mountPath: /run/secrets/tokens
      name: oidc-token
      readOnly: true
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-bzkvc
      readOnly: true
  - args:
    - --csi-address=$(ADDRESS)
    - --v=1
    - --timeout=60s
    - --leader-election=true
    - --retry-interval-start=500ms
    - --default-fstype=ext4
    - --extra-create-metadata=true
    - --feature-gates=HonorPVReclaimPolicy=true
    - --prevent-volume-mode-conversion=true
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
    imagePullPolicy: IfNotPresent
    name: csi-provisioner
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-bzkvc
      readOnly: true
  - args:
    - --v=1
    - --csi-address=$(ADDRESS)
    - --timeout=60s
    - --leader-election
    - --retry-interval-start=500ms
    - --handle-volume-inuse-error=false
    - --feature-gates=RecoverVolumeExpansionFailure=true
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer:v1.10.0
    imagePullPolicy: IfNotPresent
    name: csi-resizer
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-bzkvc
      readOnly: true
  - args:
    - --csi-address=$(ADDRESS)
    - --v=1
    - --timeout=60s
    - --leader-election=true
    - --extra-create-metadata=true
    - --enable-volume-group-snapshots=false
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter:v7.0.0
    imagePullPolicy: IfNotPresent
    name: csi-snapshotter
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-bzkvc
      readOnly: true
  - args:
    - --v=1
    - --csi-address=$(ADDRESS)
    - --leader-election=true
    - --retry-interval-start=500ms
    - --default-fstype=ext4
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher:v4.5.0
    imagePullPolicy: IfNotPresent
    name: csi-attacher
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-bzkvc
      readOnly: true
  - args:
    - --type=controller
    - --v=5
    - --drivername=$(DRIVER_NAME)
    - --drivernamespace=$(DRIVER_NAMESPACE)
    - --setmetadata=true
    env:
    - name: DRIVER_NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
    - name: DRIVER_NAME
      value: rbd.csi.ceph.com
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: csi-rbdplugin-controller
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /etc/ceph-csi-config/
      name: ceph-csi-config
    - mountPath: /tmp/csi/keys
      name: keys-tmp-dir
    - mountPath: /etc/ceph/
      name: ceph-config
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-bzkvc
      readOnly: true
  - args:
    - --type=liveness
    - --endpoint=$(CSI_ENDPOINT)
    - --metricsport=8080
    - --metricspath=/metrics
    - --polltime=60s
    - --timeout=3s
    env:
    - name: CSI_ENDPOINT
      value: unix:///csi/csi-provisioner.sock
    - name: POD_IP
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: status.podIP
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: liveness-prometheus
    ports:
    - containerPort: 8080
      name: metrics
      protocol: TCP
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-bzkvc
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  nodeName: instance
  nodeSelector:
    openstack-control-plane: enabled
  preemptionPolicy: PreemptLowerPriority
  priority: 2000000000
  priorityClassName: system-cluster-critical
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext: {}
  serviceAccount: ceph-csi-rbd-provisioner
  serviceAccountName: ceph-csi-rbd-provisioner
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  volumes:
  - emptyDir:
      medium: Memory
    name: socket-dir
  - hostPath:
      path: /dev
      type: ""
    name: host-dev
  - hostPath:
      path: /sys
      type: ""
    name: host-sys
  - hostPath:
      path: /lib/modules
      type: ""
    name: lib-modules
  - configMap:
      defaultMode: 420
      name: ceph-config
    name: ceph-config
  - configMap:
      defaultMode: 420
      name: ceph-csi-config
    name: ceph-csi-config
  - configMap:
      defaultMode: 420
      name: ceph-csi-encryption-kms-config
    name: ceph-csi-encryption-kms-config
  - emptyDir:
      medium: Memory
    name: keys-tmp-dir
  - name: oidc-token
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          audience: ceph-csi-kms
          expirationSeconds: 3600
          path: oidc-token
  - name: kube-api-access-bzkvc
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2026-03-14T07:00:31Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2026-03-14T07:00:56Z"
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2026-03-14T07:00:56Z"
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2026-03-14T07:00:31Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: containerd://04d475fd5ef2b98937331c2d8e57befeabd263e7ed07791450211c417c2e1555
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher:v4.5.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher@sha256:d69cc72025f7c40dae112ff989e920a3331583497c8dfb1600c5ae0e37184a29
    lastState: {}
    name: csi-attacher
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-14T07:00:56Z"
  - containerID: containerd://d3b99eb977e78ce6545629ba41a7114f3301bcdcc02c5f9abb04f42b771b2a09
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner@sha256:de79c8bbc271622eb94d2ee8689f189ea7c1cb6adac260a421980fe5eed66708
    lastState: {}
    name: csi-provisioner
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-14T07:00:51Z"
  - containerID: containerd://fc1b0a0494cdc79e8ddbeca4afee867979fe31b787b28544eff4f3d584752e82
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: csi-rbdplugin
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-14T07:00:48Z"
  - containerID: containerd://fa473e98853fb14baf4fd637d5d1b4601604b5653a3b8bc5c6462c465284b5a4
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: csi-rbdplugin-controller
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-14T07:00:56Z"
  - containerID: containerd://9fe02800e186cd8f539ee9f88ab7127bdbec21eb2afaf30ecf1d23f5ad4c34bb
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer:v1.10.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer@sha256:4c148bbdf883153bc72d321be4dc55c33774a6d98b2b3e0c2da6ae389149a9b7
    lastState: {}
    name: csi-resizer
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-14T07:00:53Z"
  - containerID: containerd://16e751422e027eae77a73b0a8e21c8265ff157768af4834ece9fd92b3ae4c78b
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter:v7.0.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter@sha256:682d5015146de0f922def125a3be1e2a29c43a3eb45700600e4e0733ec3f5752
    lastState: {}
    name: csi-snapshotter
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-14T07:00:55Z"
  - containerID: containerd://e77c92415ef826349d8e2b47243b0b43bd34d2da5e393826dd852dfe42667e02
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: liveness-prometheus
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-03-14T07:00:56Z"
  hostIP: 162.253.55.74
  phase: Running
  podIP: 10.0.0.58
  podIPs:
  - ip: 10.0.0.58
  qosClass: BestEffort
  startTime: "2026-03-14T07:00:31Z"