apiVersion: v1
kind: Pod
metadata:
  creationTimestamp: "2026-06-22T23:06:47Z"
  generateName: ceph-csi-rbd-provisioner-69cb97fb6-
  labels:
    app: ceph-csi-rbd
    chart: ceph-csi-rbd-3.11.0
    component: provisioner
    heritage: Helm
    pod-template-hash: 69cb97fb6
    release: ceph-csi-rbd
  name: ceph-csi-rbd-provisioner-69cb97fb6-lzv5v
  namespace: kube-system
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: ReplicaSet
    name: ceph-csi-rbd-provisioner-69cb97fb6
    uid: 0e1ba5da-4054-4eae-86b6-1c83fa1988c8
  resourceVersion: "1322"
  uid: 9b63c358-ddbb-41e0-b34b-7ba8ebe74426
spec:
  containers:
  - args:
    - --nodeid=$(NODE_ID)
    - --type=rbd
    - --controllerserver=true
    - --pidlimit=-1
    - --endpoint=$(CSI_ENDPOINT)
    - --csi-addons-endpoint=$(CSI_ADDONS_ENDPOINT)
    - --v=5
    - --drivername=$(DRIVER_NAME)
    - --rbdhardmaxclonedepth=8
    - --rbdsoftmaxclonedepth=4
    - --maxsnapshotsonimage=450
    - --minsnapshotsonimage=250
    - --setmetadata=true
    env:
    - name: POD_IP
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: status.podIP
    - name: DRIVER_NAME
      value: rbd.csi.ceph.com
    - name: NODE_ID
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: spec.nodeName
    - name: CSI_ENDPOINT
      value: unix:///csi/csi-provisioner.sock
    - name: CSI_ADDONS_ENDPOINT
      value: unix:///csi/csi-addons.sock
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: csi-rbdplugin
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /dev
      name: host-dev
    - mountPath: /sys
      name: host-sys
    - mountPath: /lib/modules
      name: lib-modules
      readOnly: true
    - mountPath: /etc/ceph-csi-config/
      name: ceph-csi-config
    - mountPath: /etc/ceph/
      name: ceph-config
    - mountPath: /etc/ceph-csi-encryption-kms-config/
      name: ceph-csi-encryption-kms-config
    - mountPath: /tmp/csi/keys
      name: keys-tmp-dir
    - mountPath: /run/secrets/tokens
      name: oidc-token
      readOnly: true
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-pgfsv
      readOnly: true
  - args:
    - --csi-address=$(ADDRESS)
    - --v=1
    - --timeout=60s
    - --leader-election=true
    - --retry-interval-start=500ms
    - --default-fstype=ext4
    - --extra-create-metadata=true
    - --feature-gates=HonorPVReclaimPolicy=true
    - --prevent-volume-mode-conversion=true
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
    imagePullPolicy: IfNotPresent
    name: csi-provisioner
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-pgfsv
      readOnly: true
  - args:
    - --v=1
    - --csi-address=$(ADDRESS)
    - --timeout=60s
    - --leader-election
    - --retry-interval-start=500ms
    - --handle-volume-inuse-error=false
    - --feature-gates=RecoverVolumeExpansionFailure=true
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer:v1.10.0
    imagePullPolicy: IfNotPresent
    name: csi-resizer
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-pgfsv
      readOnly: true
  - args:
    - --csi-address=$(ADDRESS)
    - --v=1
    - --timeout=60s
    - --leader-election=true
    - --extra-create-metadata=true
    - --enable-volume-group-snapshots=false
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter:v7.0.0
    imagePullPolicy: IfNotPresent
    name: csi-snapshotter
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-pgfsv
      readOnly: true
  - args:
    - --v=1
    - --csi-address=$(ADDRESS)
    - --leader-election=true
    - --retry-interval-start=500ms
    - --default-fstype=ext4
    env:
    - name: ADDRESS
      value: unix:///csi/csi-provisioner.sock
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher:v4.5.0
    imagePullPolicy: IfNotPresent
    name: csi-attacher
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-pgfsv
      readOnly: true
  - args:
    - --type=controller
    - --v=5
    - --drivername=$(DRIVER_NAME)
    - --drivernamespace=$(DRIVER_NAMESPACE)
    - --setmetadata=true
    env:
    - name: DRIVER_NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
    - name: DRIVER_NAME
      value: rbd.csi.ceph.com
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: csi-rbdplugin-controller
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /etc/ceph-csi-config/
      name: ceph-csi-config
    - mountPath: /tmp/csi/keys
      name: keys-tmp-dir
    - mountPath: /etc/ceph/
      name: ceph-config
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-pgfsv
      readOnly: true
  - args:
    - --type=liveness
    - --endpoint=$(CSI_ENDPOINT)
    - --metricsport=8080
    - --metricspath=/metrics
    - --polltime=60s
    - --timeout=3s
    env:
    - name: CSI_ENDPOINT
      value: unix:///csi/csi-provisioner.sock
    - name: POD_IP
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: status.podIP
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imagePullPolicy: IfNotPresent
    name: liveness-prometheus
    ports:
    - containerPort: 8080
      name: metrics
      protocol: TCP
    resources: {}
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /csi
      name: socket-dir
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-pgfsv
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  nodeName: instance
  nodeSelector:
    openstack-control-plane: enabled
  preemptionPolicy: PreemptLowerPriority
  priority: 2000000000
  priorityClassName: system-cluster-critical
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext: {}
  serviceAccount: ceph-csi-rbd-provisioner
  serviceAccountName: ceph-csi-rbd-provisioner
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  volumes:
  - emptyDir:
      medium: Memory
    name: socket-dir
  - hostPath:
      path: /dev
      type: ""
    name: host-dev
  - hostPath:
      path: /sys
      type: ""
    name: host-sys
  - hostPath:
      path: /lib/modules
      type: ""
    name: lib-modules
  - configMap:
      defaultMode: 420
      name: ceph-config
    name: ceph-config
  - configMap:
      defaultMode: 420
      name: ceph-csi-config
    name: ceph-csi-config
  - configMap:
      defaultMode: 420
      name: ceph-csi-encryption-kms-config
    name: ceph-csi-encryption-kms-config
  - emptyDir:
      medium: Memory
    name: keys-tmp-dir
  - name: oidc-token
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          audience: ceph-csi-kms
          expirationSeconds: 3600
          path: oidc-token
  - name: kube-api-access-pgfsv
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2026-06-22T23:06:47Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2026-06-22T23:07:15Z"
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2026-06-22T23:07:15Z"
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2026-06-22T23:06:47Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: containerd://13a5d22646a46a40b1d0b22258a2309f4274d222d4df0ea75cd66eed809f36ea
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher:v4.5.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-attacher@sha256:d69cc72025f7c40dae112ff989e920a3331583497c8dfb1600c5ae0e37184a29
    lastState: {}
    name: csi-attacher
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-06-22T23:07:14Z"
  - containerID: containerd://a4db9d75faba5aa30001ea83cabf178e30d11678c97fbdae33cb9ae2c535e723
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-provisioner@sha256:de79c8bbc271622eb94d2ee8689f189ea7c1cb6adac260a421980fe5eed66708
    lastState: {}
    name: csi-provisioner
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-06-22T23:07:09Z"
  - containerID: containerd://fda2e764f362b4508982afe867bd64f2497c4e4bec1a734cef466a452d9afc8b
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: csi-rbdplugin
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-06-22T23:07:05Z"
  - containerID: containerd://4f69466ed0932e289b850b0ba876b288e9cbb122092320995d3957fe90b883dc
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: csi-rbdplugin-controller
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-06-22T23:07:14Z"
  - containerID: containerd://94a322384ce0bc6028dae2156931de8be183e73c6e080da829b75f019d6cf710
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer:v1.10.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-resizer@sha256:4c148bbdf883153bc72d321be4dc55c33774a6d98b2b3e0c2da6ae389149a9b7
    lastState: {}
    name: csi-resizer
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-06-22T23:07:10Z"
  - containerID: containerd://21d92e756d1a685a0dc03d915a72b1683effb9b47825dfe8e375f438c0697339
    image: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter:v7.0.0
    imageID: harbor.atmosphere.dev/registry.k8s.io/sig-storage/csi-snapshotter@sha256:682d5015146de0f922def125a3be1e2a29c43a3eb45700600e4e0733ec3f5752
    lastState: {}
    name: csi-snapshotter
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-06-22T23:07:12Z"
  - containerID: containerd://8255b9cce59e17ece5d307e2540a9fd5bd9928f4e8457a935ef2e25cbb0193b3
    image: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi:v3.11.0
    imageID: harbor.atmosphere.dev/quay.io/cephcsi/cephcsi@sha256:a338c0dec57b8033e01f277dc342607d7610411422cc3ce47f176ab059aeaf21
    lastState: {}
    name: liveness-prometheus
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-06-22T23:07:14Z"
  hostIP: 199.204.45.72
  phase: Running
  podIP: 10.0.0.159
  podIPs:
  - ip: 10.0.0.159
  qosClass: BestEffort
  startTime: "2026-06-22T23:06:47Z"