---

kubectl -n bdo-tst-flink-operator get pod flink-kubernetes-operator-f6f574558-l9jpk -o yaml \
  | grep -A15 -B15 -E 'keytab|/etc/keytab|kerberos'
    securityContext: {}
    startupProbe:
      failureThreshold: 30
      httpGet:
        path: /
        port: health-port
        scheme: HTTP
      periodSeconds: 10
      successThreshold: 1
      timeoutSeconds: 1
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /opt/flink/conf
      name: flink-operator-config-volume
    - mountPath: /etc/keytab/
      name: flink-keytabs
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-cbnj4
      readOnly: true
  - command:
    - /docker-entrypoint.sh
    - webhook
    env:
    - name: WEBHOOK_KEYSTORE_PASSWORD
      valueFrom:
        secretKeyRef:
          key: password
          name: flink-operator-webhook-secret
    - name: WEBHOOK_KEYSTORE_FILE
      value: /certs/keystore.p12
    - name: WEBHOOK_KEYSTORE_TYPE
--
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  volumes:
  - configMap:
      defaultMode: 420
      items:
      - key: config.yaml
        path: config.yaml
      - key: log4j-operator.properties
        path: log4j-operator.properties
      - key: log4j-console.properties
        path: log4j-console.properties
      name: flink-operator-config
    name: flink-operator-config-volume
  - name: flink-keytabs
    secret:
      defaultMode: 420
      items:
      - key: service.tdp_int_02.keytab
        path: service.tdp_int_02.keytab
      secretName: flink-keytabs
  - name: keystore
    secret:
      defaultMode: 420
      items:
      - key: keystore.p12
        path: keystore.p12
      secretName: webhook-server-cert
  - name: kube-api-access-cbnj4
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
--
    resources: {}
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-10-14T15:28:41Z"
    user:
      linux:
        gid: 9999
        supplementalGroups:
        - 9999
        uid: 9999
    volumeMounts:
    - mountPath: /opt/flink/conf
      name: flink-operator-config-volume
    - mountPath: /etc/keytab/
      name: flink-keytabs
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-cbnj4
      readOnly: true
      recursiveReadOnly: Disabled
  - containerID: containerd://8a97f3290ec9234e73c70b67d7ec17ce2de3f87a37794f133496bf08c6681cee
    image: artifactory.tdp.corp.t2.ru:443/infrastructure-docker-repo/flink-kubernetes-operator:1.16.1
    imageID: artifactory.tdp.corp.t2.ru:443/infrastructure-docker-repo/flink-kubernetes-operator@sha256:91250bb08c4f1ea358b201680e355139a530cb7318439926d62c6387d7c1369d
    lastState: {}
    name: flink-webhook
    ready: true
    resources: {}
    restartCount: 0
    started: true
    state:
      running:





kubectl -n bdo-tst-flink-tms-huawei-ros \
  get secret kerberos-keytab-tms-huawei-ros-cluster \
  -o json | jq '{name:.metadata.name, keys:(.data|keys), ownerReferences:.metadata.ownerReferences}'
{
  "name": "kerberos-keytab-tms-huawei-ros-cluster",
  "keys": [
    "service.tdp_int_02.keytab"
  ],
  "ownerReferences": [
    {
      "apiVersion": "apps/v1",
      "blockOwnerDeletion": true,
      "controller": true,
      "kind": "Deployment",
      "name": "tms-huawei-ros-cluster",
      "uid": "d65f7d9b-31b1-47f6-8b78-77064b5fb807"
    }
  ]
}