apiVersion: v1
kind: Pod
metadata:
  creationTimestamp: "2026-05-27T06:04:48Z"
  generateName: ceph-csi-rbd-provisioner-69cb97fb6-
  labels:
    app: ceph-csi-rbd
    chart: ceph-csi-rbd-3.11.0
    component: provisioner
    heritage: Helm
    pod-template-hash: 69cb97fb6
    release: ceph-csi-rbd
  name: ceph-csi-rbd-provisioner-69cb97fb6-fm25s
  namespace: kube-system
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: ReplicaSet
    name: ceph-csi-rbd-provisioner-69cb97fb6
    uid: 5bed348f-368b-4b5c-9f4e-1dc45e1c420d
  resourceVersion: "1286"
  uid: 6105f9a2-e7dc-4286-a6d5-1b05e852c02e
spec:
  containers:
  - args:
    - --nodeid=$(NODE_ID)
    - --type=rbd
    - --controllerserver=true
    - --pidlimit=-1
    - --endpoint=$(CSI_ENDPOINT)
    - --csi-addons-endpoint=$(CSI_ADDONS_ENDPOINT)
    - --v=5
    - --drivername=$(DRIVER_NAME)
    - --rbdhardmaxclonedepth=8
    - --rbdsoftmaxclonedepth=4
    - --maxsnapshotsonimage=450
    - --minsnapshotsonimage=250
    - --setmetadata=true
    env:
    - name: POD_IP
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: status.podIP
    - name: DRIVER_NAME
      value: rbd.csi.ceph.com
    - name: NODE_ID
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: spec.nodeName
    - name: CSI_ENDPOINT
      value: unix:///csi/csi-provisioner.sock
    - name: CSI_ADDONS_ENDPOINT
      value: unix:///csi/csi-addons.sock
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: csi-rbdplugin
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /dev
      name: host-dev
    - mountPath: /sys
      name: host-sys
    - mountPath: /lib/modules
      name: lib-modules
      readOnly: true
    - mountPath: /etc/ceph-csi-config/
      name: ceph-csi-config
    - mountPath: /etc/ceph/
      name: ceph-config
    - mountPath: /etc/ceph-csi-encryption-kms-config/
      name: ceph-csi-encryption-kms-config
    - mountPath: /tmp/csi/keys
      name: keys-tmp-dir
    - mountPath: /run/secrets/tokens
      name: oidc-token
      readOnly: true
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-gbtvs
      readOnly: true
  - args:
    - --csi-address=$(ADDRESS)
    - --v=1
    - --timeout=60s
    - --leader-election=true
    - --retry-interval-start=500ms
    - --default-fstype=ext4
    - --extra-create-metadata=true
    - --feature-gates=HonorPVReclaimPolicy=true
    - --prevent-volume-mode-conversion=true
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
    imagePullPolicy: IfNotPresent
    name: csi-provisioner
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-gbtvs
      readOnly: true
  - args:
    - --v=1
    - --csi-address=$(ADDRESS)
    - --timeout=60s
    - --leader-election
    - --retry-interval-start=500ms
    - --handle-volume-inuse-error=false
    - --feature-gates=RecoverVolumeExpansionFailure=true
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer:v1.10.0
    imagePullPolicy: IfNotPresent
    name: csi-resizer
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-gbtvs
      readOnly: true
  - args:
    - --csi-address=$(ADDRESS)
    - --v=1
    - --timeout=60s
    - --leader-election=true
    - --extra-create-metadata=true
    - --enable-volume-group-snapshots=false
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter:v7.0.0
    imagePullPolicy: IfNotPresent
    name: csi-snapshotter
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-gbtvs
      readOnly: true
  - args:
    - --v=1
    - --csi-address=$(ADDRESS)
    - --leader-election=true
    - --retry-interval-start=500ms
    - --default-fstype=ext4
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher:v4.5.0
    imagePullPolicy: IfNotPresent
    name: csi-attacher
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-gbtvs
      readOnly: true
  - args:
    - --type=controller
    - --v=5
    - --drivername=$(DRIVER_NAME)
    - --drivernamespace=$(DRIVER_NAMESPACE)
    - --setmetadata=true
    env:
    - name: DRIVER_NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
    - name: DRIVER_NAME
      value: rbd.csi.ceph.com
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: csi-rbdplugin-controller
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /etc/ceph-csi-config/
      name: ceph-csi-config
    - mountPath: /tmp/csi/keys
      name: keys-tmp-dir
    - mountPath: /etc/ceph/
      name: ceph-config
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-gbtvs
      readOnly: true
  - args:
    - --type=liveness
    - --endpoint=$(CSI_ENDPOINT)
    - --metricsport=8080
    - --metricspath=/metrics
    - --polltime=60s
    - --timeout=3s
    env:
    - name: CSI_ENDPOINT
      value: unix:///csi/csi-provisioner.sock
    - name: POD_IP
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: status.podIP
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: liveness-prometheus
    ports:
    - containerPort: 8080
      name: metrics
      protocol: TCP
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-gbtvs
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  nodeName: instance
  nodeSelector:
    openstack-control-plane: enabled
  preemptionPolicy: PreemptLowerPriority
  priority: 2000000000
  priorityClassName: system-cluster-critical
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext: {}
  serviceAccount: ceph-csi-rbd-provisioner
  serviceAccountName: ceph-csi-rbd-provisioner
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  volumes:
  - emptyDir:
      medium: Memory
    name: socket-dir
  - hostPath:
      path: /dev
      type: ""
    name: host-dev
  - hostPath:
      path: /sys
      type: ""
    name: host-sys
  - hostPath:
      path: /lib/modules
      type: ""
    name: lib-modules
  - configMap:
      defaultMode: 420
      name: ceph-config
    name: ceph-config
  - configMap:
      defaultMode: 420
      name: ceph-csi-config
    name: ceph-csi-config
  - configMap:
      defaultMode: 420
      name: ceph-csi-encryption-kms-config
    name: ceph-csi-encryption-kms-config
  - emptyDir:
      medium: Memory
    name: keys-tmp-dir
  - name: oidc-token
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          audience: ceph-csi-kms
          expirationSeconds: 3600
          path: oidc-token
  - name: kube-api-access-gbtvs
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2026-05-27T06:04:48Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2026-05-27T06:05:14Z"
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2026-05-27T06:05:14Z"
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2026-05-27T06:04:48Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: containerd://cecd616a13e7d3308d323a57421c6a8b610dd6b00b8ddd9d1eff185a56456b17
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher:v4.5.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher@sha256:d69cc72025f7c40dae112ff989e920a3331583497c8dfb1600c5ae0e37184a29
    lastState: {}
    name: csi-attacher
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-05-27T06:05:13Z"
  - containerID: containerd://d1491ae76e16807b272f6ee6ae380c7592deb4e63845dbda0442c8a939d7d939
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner@sha256:de79c8bbc271622eb94d2ee8689f189ea7c1cb6adac260a421980fe5eed66708
    lastState: {}
    name: csi-provisioner
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-05-27T06:05:08Z"
  - containerID: containerd://b6f44aea165351d5240b62f6ec1bb168afa6752262166cac11eafbc9b8202f84
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: csi-rbdplugin
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-05-27T06:05:06Z"
  - containerID: containerd://497df0e35b87654707831a8f64c7fb5198b15c465066962fd4d9a90bdfc5890f
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: csi-rbdplugin-controller
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-05-27T06:05:14Z"
  - containerID: containerd://d6b6c86b9bd2ac0a34b91a280e19206c3a3575e8a94c4b770820933b36dfae41
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer:v1.10.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer@sha256:4c148bbdf883153bc72d321be4dc55c33774a6d98b2b3e0c2da6ae389149a9b7
    lastState: {}
    name: csi-resizer
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-05-27T06:05:11Z"
  - containerID: containerd://df2a877bd9f2b20a839ddbd6e98874aae633d35482a5d94aeded5ab27927b1bc
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter:v7.0.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter@sha256:682d5015146de0f922def125a3be1e2a29c43a3eb45700600e4e0733ec3f5752
    lastState: {}
    name: csi-snapshotter
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-05-27T06:05:12Z"
  - containerID: containerd://b95704fef5bcd43a501b17e496d3ed21fee49868a735a0705dc50677274666c6
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: liveness-prometheus
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-05-27T06:05:14Z"
  hostIP: 199.19.213.54
  phase: Running
  podIP: 10.0.0.254
  podIPs:
  - ip: 10.0.0.254
  qosClass: BestEffort
  startTime: "2026-05-27T06:04:48Z"