bd057784d5
Add functionality to keystone to act as a certificate transfer provider. Add actions to add, remove, list CA certs to keystone. Add Certificate Transfer requires handler in ops_sunbeam. Update keystone_auth section cafile option if certificate is available in receive-ca-cert relation. Update metadata.yaml for keystone and rest of k8s charms. Change-Id: I9c800e8f8a0c9197b195331be7b445bafe794780
109 lines
2.7 KiB
Django/Jinja
109 lines
2.7 KiB
Django/Jinja
bundle: kubernetes
|
|
|
|
applications:
|
|
traefik:
|
|
charm: ch:traefik-k8s
|
|
channel: 1.0/candidate
|
|
scale: 1
|
|
trust: true
|
|
options:
|
|
kubernetes-service-annotations: metallb.universe.tf/address-pool=public
|
|
mysql:
|
|
charm: ch:mysql-k8s
|
|
channel: 8.0/stable
|
|
scale: 1
|
|
trust: true
|
|
constraints: cpu-power=1000 mem=1G
|
|
ldap-server:
|
|
charm: ch:ldap-test-fixture-k8s
|
|
channel: edge
|
|
scale: 1
|
|
rabbitmq:
|
|
charm: ch:rabbitmq-k8s
|
|
channel: 3.12/edge
|
|
scale: 1
|
|
trust: true
|
|
options:
|
|
minimum-replicas: 1
|
|
keystone:
|
|
{% if keystone_k8s is defined and keystone_k8s is sameas true -%}
|
|
charm: ../../../keystone-k8s.charm
|
|
{% else -%}
|
|
charm: ch:keystone-k8s
|
|
channel: 2023.2/edge
|
|
{% endif -%}
|
|
scale: 1
|
|
trust: true
|
|
options:
|
|
admin-role: admin
|
|
storage:
|
|
fernet-keys: 5M
|
|
credential-keys: 5M
|
|
resources:
|
|
keystone-image: ghcr.io/canonical/keystone:2023.2
|
|
designate-bind:
|
|
{% if designate_bind_k8s is defined and designate_bind_k8s is sameas true -%}
|
|
charm: ../../../designate-bind-k8s.charm
|
|
{% else -%}
|
|
charm: ch:designate-bind-k8s
|
|
channel: 9/edge
|
|
{% endif -%}
|
|
scale: 1
|
|
trust: false
|
|
resources:
|
|
designate-bind-image: ubuntu/bind9:9.18-22.04_beta
|
|
designate:
|
|
{% if designate_k8s is defined and designate_k8s is sameas true -%}
|
|
charm: ../../../designate-k8s.charm
|
|
{% else -%}
|
|
charm: ch:designate-k8s
|
|
channel: 2023.2/edge
|
|
{% endif -%}
|
|
scale: 1
|
|
trust: false
|
|
resources:
|
|
designate-image: ghcr.io/canonical/designate-consolidated:2023.2
|
|
keystone-ldap:
|
|
{% if keystone_ldap_k8s is defined and keystone_ldap_k8s is sameas true -%}
|
|
charm: ../../../keystone-ldap-k8s.charm
|
|
{% else -%}
|
|
charm: ch:keystone-ldap-k8s
|
|
channel: 2023.2/edge
|
|
{% endif -%}
|
|
scale: 1
|
|
openstack-exporter:
|
|
{% if openstack_exporter_k8s is defined and openstack_exporter_k8s is sameas true -%}
|
|
charm: ../../../openstack-exporter-k8s.charm
|
|
{% else -%}
|
|
charm: ch:openstack-exporter-k8s
|
|
channel: 2023.2/edge
|
|
{% endif -%}
|
|
scale: 1
|
|
resources:
|
|
openstack-exporter-image: ghcr.io/canonical/openstack-exporter:1.6.0-7533071
|
|
|
|
relations:
|
|
- - mysql:database
|
|
- keystone:database
|
|
- - traefik:ingress
|
|
- keystone:ingress-public
|
|
|
|
- - mysql:database
|
|
- designate:database
|
|
- - rabbitmq:amqp
|
|
- designate:amqp
|
|
- - keystone:identity-service
|
|
- designate:identity-service
|
|
- - traefik:ingress
|
|
- designate:ingress-public
|
|
- - designate-bind:dns-backend
|
|
- designate:dns-backend
|
|
- - keystone:send-ca-cert
|
|
- designate:receive-ca-cert
|
|
|
|
- - keystone:domain-config
|
|
- keystone-ldap:domain-config
|
|
|
|
- - keystone:identity-ops
|
|
- openstack-exporter:identity-ops
|