--- apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.133.0.40/23"],"mac_address":"0a:58:0a:85:00:28","gateway_ips":["10.133.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.133.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.133.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.133.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.133.0.1"}],"ip_address":"10.133.0.40/23","gateway_ip":"10.133.0.1","role":"primary"}}' openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-05-26T20:15:00Z" finalizers: - batch.kubernetes.io/job-tracking generateName: maas-api-key-cleanup-29663775- generation: 1 labels: app: maas-api-cleanup app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service batch.kubernetes.io/controller-uid: 8af20203-40a1-41ac-93e8-456c6257e074 batch.kubernetes.io/job-name: maas-api-key-cleanup-29663775 controller-uid: 8af20203-40a1-41ac-93e8-456c6257e074 job-name: maas-api-key-cleanup-29663775 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-140-142 operation: Update subresource: status time: "2026-05-26T20:15:00Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:finalizers: .: {} v:"batch.kubernetes.io/job-tracking": {} f:generateName: {} f:labels: .: {} f:app: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:batch.kubernetes.io/controller-uid: {} f:batch.kubernetes.io/job-name: {} f:controller-uid: {} f:job-name: {} f:ownerReferences: .: {} k:{"uid":"8af20203-40a1-41ac-93e8-456c6257e074"}: {} f:spec: f:containers: k:{"name":"cleanup"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:runAsNonRoot: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsNonRoot: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} manager: kube-controller-manager operation: Update time: "2026-05-26T20:15:00Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-05-26T20:15:00Z" name: maas-api-key-cleanup-29663775-l8qsx namespace: opendatahub ownerReferences: - apiVersion: batch/v1 blockOwnerDeletion: true controller: true kind: Job name: maas-api-key-cleanup-29663775 uid: 8af20203-40a1-41ac-93e8-456c6257e074 resourceVersion: "46608" uid: 541b8532-4d2a-4ce6-b080-56ddec518c19 spec: containers: - command: - /bin/sh - -c - | curl -sf -k -X POST https://maas-api:8443/internal/v1/api-keys/cleanup image: registry.redhat.io/ubi9/ubi-minimal:9.7 imagePullPolicy: IfNotPresent name: cleanup resources: limits: cpu: 50m memory: 32Mi requests: cpu: 10m memory: 16Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000660000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-lpck7 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: maas-api-dockercfg-xn848 nodeName: ip-10-0-140-142.ec2.internal preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: OnFailure schedulerName: default-scheduler securityContext: fsGroup: 1000660000 runAsNonRoot: true seLinuxOptions: level: s0:c26,c5 seccompProfile: type: RuntimeDefault serviceAccount: maas-api serviceAccountName: maas-api terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - name: kube-api-access-lpck7 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-05-26T20:15:00Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-05-26T20:15:00Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-05-26T20:15:00Z" message: 'containers with unready status: [cleanup]' reason: ContainersNotReady status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-05-26T20:15:00Z" message: 'containers with unready status: [cleanup]' reason: ContainersNotReady status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-05-26T20:15:00Z" status: "True" type: PodScheduled containerStatuses: - image: registry.redhat.io/ubi9/ubi-minimal:9.7 imageID: "" lastState: {} name: cleanup ready: false restartCount: 0 started: false state: waiting: reason: ContainerCreating volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-lpck7 readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.140.142 hostIPs: - ip: 10.0.140.142 phase: Pending qosClass: Burstable startTime: "2026-05-26T20:15:00Z"