apiVersion: apps/v1 kind: Deployment metadata: annotations: banzaicloud.com/last-applied: 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 deployment.kubernetes.io/revision: "1" creationTimestamp: "2026-06-28T20:15:04Z" generation: 1 labels: app: rook-ceph-rgw app.kubernetes.io/component: cephobjectstores.ceph.rook.io app.kubernetes.io/created-by: rook-ceph-operator app.kubernetes.io/instance: ceph app.kubernetes.io/managed-by: rook-ceph-operator app.kubernetes.io/name: ceph-rgw app.kubernetes.io/part-of: ceph ceph-version: 18.2.8-0 ceph_daemon_id: ceph ceph_daemon_type: rgw rgw: ceph rook-version: v1.10.10 rook.io/operator-namespace: rook-ceph rook_cluster: openstack rook_object_store: ceph name: rook-ceph-rgw-ceph-a namespace: openstack ownerReferences: - apiVersion: ceph.rook.io/v1 blockOwnerDeletion: true controller: true kind: CephObjectStore name: ceph uid: 4ed07889-5e27-4c80-9dde-24238d879070 resourceVersion: "9966" uid: df6a52fe-e56d-48f7-a069-331f8e1bf44b spec: progressDeadlineSeconds: 600 replicas: 1 revisionHistoryLimit: 10 selector: matchLabels: app: rook-ceph-rgw ceph_daemon_id: ceph rgw: ceph rook_cluster: openstack rook_object_store: ceph strategy: rollingUpdate: maxSurge: 0 maxUnavailable: 1 type: RollingUpdate template: metadata: creationTimestamp: null labels: app: rook-ceph-rgw app.kubernetes.io/component: cephobjectstores.ceph.rook.io app.kubernetes.io/created-by: rook-ceph-operator app.kubernetes.io/instance: ceph app.kubernetes.io/managed-by: rook-ceph-operator app.kubernetes.io/name: ceph-rgw app.kubernetes.io/part-of: ceph ceph_daemon_id: ceph ceph_daemon_type: rgw rgw: ceph rook.io/operator-namespace: rook-ceph rook_cluster: openstack rook_object_store: ceph name: rook-ceph-rgw-ceph-a spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - key: openstack-control-plane operator: In values: - enabled podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchLabels: app: rook-ceph-rgw ceph_daemon_id: ceph rgw: ceph rook_cluster: openstack rook_object_store: ceph topologyKey: kubernetes.io/hostname weight: 50 containers: - args: - --fsid=4837cbf8-4f90-4300-b3f6-726c9b9f89b4 - --keyring=/etc/ceph/keyring-store/keyring - --log-to-stderr=true - --err-to-stderr=true - --mon-cluster-log-to-stderr=true - '--log-stderr-prefix=debug ' - --default-log-to-file=false - --default-mon-cluster-log-to-file=false - --mon-host=$(ROOK_CEPH_MON_HOST) - --mon-initial-members=$(ROOK_CEPH_MON_INITIAL_MEMBERS) - --id=rgw.ceph.a - --setuser=ceph - --setgroup=ceph - --foreground - --rgw-frontends=beast port=8080 - --host=$(POD_NAME) - --rgw-mime-types-file=/etc/ceph/rgw/mime.types - --rgw-realm=ceph - --rgw-zonegroup=ceph - --rgw-zone=ceph command: - radosgw env: - name: CONTAINER_IMAGE value: harbor.atmosphere.dev/quay.io/ceph/ceph:v18.2.1 - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName - name: POD_MEMORY_LIMIT valueFrom: resourceFieldRef: divisor: "0" resource: limits.memory - name: POD_MEMORY_REQUEST valueFrom: resourceFieldRef: divisor: "0" resource: requests.memory - name: POD_CPU_LIMIT valueFrom: resourceFieldRef: divisor: "1" resource: limits.cpu - name: POD_CPU_REQUEST valueFrom: resourceFieldRef: divisor: "0" resource: requests.cpu - name: CEPH_USE_RANDOM_NONCE value: "true" - name: ROOK_CEPH_MON_HOST valueFrom: secretKeyRef: key: mon_host name: rook-ceph-config - name: ROOK_CEPH_MON_INITIAL_MEMBERS valueFrom: secretKeyRef: key: mon_initial_members name: rook-ceph-config image: harbor.atmosphere.dev/quay.io/ceph/ceph:v18.2.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 tcpSocket: port: 8080 timeoutSeconds: 1 name: rgw readinessProbe: failureThreshold: 3 httpGet: path: /swift/healthcheck port: 8080 scheme: HTTP initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: {} securityContext: privileged: false startupProbe: failureThreshold: 18 initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 tcpSocket: port: 8080 timeoutSeconds: 1 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/ceph name: rook-config-override readOnly: true - mountPath: /etc/ceph/keyring-store/ name: rook-ceph-rgw-ceph-a-keyring readOnly: true - mountPath: /var/log/ceph name: rook-ceph-log - mountPath: /var/lib/ceph/crash name: rook-ceph-crash - mountPath: /var/lib/ceph/rgw/ceph-ceph name: ceph-daemon-data - mountPath: /etc/ceph/rgw name: rook-ceph-rgw-ceph-mime-types readOnly: true workingDir: /var/log/ceph - command: - /bin/bash - -x - -e - -m - -c - "\nCEPH_CLIENT_ID=ceph-client.rgw.ceph.a\nPERIODICITY=daily\nLOG_ROTATE_CEPH_FILE=/etc/logrotate.d/ceph\nLOG_MAX_SIZE=500M\n\n# edit the logrotate file to only rotate a specific daemon log\n# otherwise we will logrotate log files without reloading certain daemons\n# this might happen when multiple daemons run on the same machine\nsed -i \"s|*.log|$CEPH_CLIENT_ID.log|\" \"$LOG_ROTATE_CEPH_FILE\"\n\n# replace default daily with given user input\nsed --in-place \"s/daily/$PERIODICITY/g\" \"$LOG_ROTATE_CEPH_FILE\"\n\nif [ \"$LOG_MAX_SIZE\" != \"0\" ]; then\n\t# adding maxsize $LOG_MAX_SIZE at the 4th line of the logrotate config file with 4 spaces to maintain indentation\n\tsed --in-place \"4i \\ \\ \\ \\ maxsize $LOG_MAX_SIZE\" \"$LOG_ROTATE_CEPH_FILE\"\nfi\n\nwhile true; do\n\t# we don't force the logrorate but we let the logrotate binary handle the rotation based on user's input for periodicity and size\n\tlogrotate --verbose \"$LOG_ROTATE_CEPH_FILE\"\n\tsleep 15m\ndone\n" image: harbor.atmosphere.dev/quay.io/ceph/ceph:v18.2.1 imagePullPolicy: IfNotPresent name: log-collector resources: limits: cpu: 500m memory: 1Gi requests: cpu: 100m memory: 100Mi securityContext: privileged: false terminationMessagePath: /dev/termination-log terminationMessagePolicy: File tty: true volumeMounts: - mountPath: /etc/ceph name: rook-config-override readOnly: true - mountPath: /var/log/ceph name: rook-ceph-log - mountPath: /var/lib/ceph/crash name: rook-ceph-crash dnsPolicy: ClusterFirst initContainers: - args: - --verbose - --recursive - ceph:ceph - /var/log/ceph - /var/lib/ceph/crash - /var/lib/ceph/rgw/ceph-ceph command: - chown image: harbor.atmosphere.dev/quay.io/ceph/ceph:v18.2.1 imagePullPolicy: IfNotPresent name: chown-container-data-dir resources: {} securityContext: privileged: false terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/ceph name: rook-config-override readOnly: true - mountPath: /etc/ceph/keyring-store/ name: rook-ceph-rgw-ceph-a-keyring readOnly: true - mountPath: /var/log/ceph name: rook-ceph-log - mountPath: /var/lib/ceph/crash name: rook-ceph-crash - mountPath: /var/lib/ceph/rgw/ceph-ceph name: ceph-daemon-data restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: rook-ceph-rgw serviceAccountName: rook-ceph-rgw shareProcessNamespace: true terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 5 volumes: - name: rook-config-override projected: defaultMode: 420 sources: - configMap: items: - key: config mode: 292 path: ceph.conf name: rook-config-override - name: rook-ceph-rgw-ceph-a-keyring secret: defaultMode: 420 secretName: rook-ceph-rgw-ceph-a-keyring - hostPath: path: /var/lib/rook/openstack/log type: "" name: rook-ceph-log - hostPath: path: /var/lib/rook/openstack/crash type: "" name: rook-ceph-crash - emptyDir: {} name: ceph-daemon-data - configMap: defaultMode: 420 name: rook-ceph-rgw-ceph-mime-types name: rook-ceph-rgw-ceph-mime-types status: availableReplicas: 1 conditions: - lastTransitionTime: "2026-06-28T20:15:04Z" lastUpdateTime: "2026-06-28T20:15:04Z" message: Deployment has minimum availability. reason: MinimumReplicasAvailable status: "True" type: Available - lastTransitionTime: "2026-06-28T20:15:04Z" lastUpdateTime: "2026-06-28T20:15:24Z" message: ReplicaSet "rook-ceph-rgw-ceph-a-67fd8975c6" has successfully progressed. reason: NewReplicaSetAvailable status: "True" type: Progressing observedGeneration: 1 readyReplicas: 1 replicas: 1 updatedReplicas: 1