bundle: kubernetes

applications:
  traefik:
    charm: ch:traefik-k8s
    channel: 1.0/candidate
    scale: 1
    trust: true
  traefik-public:
    charm: ch:traefik-k8s
    channel: 1.0/candidate
    scale: 1
    trust: true
    options:
      kubernetes-service-annotations: metallb.universe.tf/address-pool=public
  mysql:
    charm: ch:mysql-k8s
    channel: 8.0/stable
    scale: 1
    trust: false
  rabbitmq:
    charm: ch:rabbitmq-k8s
    channel: 3.12/edge
    scale: 1
    trust: true
    options:
      minimum-replicas: 1
  keystone:
    charm: ch:keystone-k8s
    channel: 2024.1/edge
    scale: 1
    trust: true
    storage:
      fernet-keys: 5M
      credential-keys: 5M
  neutron:
    charm: ch:neutron-k8s
    channel: 2024.1/edge
    scale: 1
    trust: true
    options:
      debug: true
  octavia:
    charm: ../../octavia-k8s.charm
    scale: 1
    trust: true
    resources:
      octavia-api-image: ghcr.io/canonical/octavia-consolidated:2024.1
      octavia-driver-agent-image: ghcr.io/canonical/octavia-consolidated:2024.1
      octavia-housekeeping-image: ghcr.io/canonical/octavia-consolidated:2024.1
  ovn-central:
    charm: ch:ovn-central-k8s
    channel: 23.03/edge
    scale: 1
    trust: true
  tls-operator:
    charm: self-signed-certificates
    channel: edge
    scale: 1
    options:
      ca-common-name: internal-ca

relations:
- - mysql:database
  - keystone:database
- - traefik:ingress
  - keystone:ingress-internal
- - traefik-public:ingress
  - keystone:ingress-public

- - mysql:database
  - neutron:database
- - rabbitmq:amqp
  - neutron:amqp
- - keystone:identity-service
  - neutron:identity-service
- - traefik:ingress
  - neutron:ingress-internal
- - traefik-public:ingress
  - neutron:ingress-public
- - tls-operator:certificates
  - neutron:certificates
- - neutron:ovsdb-cms
  - ovn-central:ovsdb-cms

- - tls-operator:certificates
  - ovn-central:certificates

- - mysql:database
  - octavia:database
- - keystone:identity-service
  - octavia:identity-service
- - keystone:identity-ops
  - octavia:identity-ops
- - traefik:ingress
  - octavia:ingress-internal
- - traefik-public:ingress
  - octavia:ingress-public
- - tls-operator:certificates
  - octavia:certificates
- - octavia:ovsdb-cms
  - ovn-central:ovsdb-cms