bd057784d5
Add functionality to keystone to act as a certificate transfer provider. Add actions to add, remove, list CA certs to keystone. Add Certificate Transfer requires handler in ops_sunbeam. Update keystone_auth section cafile option if certificate is available in receive-ca-cert relation. Update metadata.yaml for keystone and rest of k8s charms. Change-Id: I9c800e8f8a0c9197b195331be7b445bafe794780
81 lines
2.0 KiB
YAML
81 lines
2.0 KiB
YAML
# Copyright 2021 Canonical Ltd
|
|
# See LICENSE file for licensing details.
|
|
name: glance-k8s
|
|
maintainer: OpenStack Charmers <openstack-charmers@lists.ubuntu.com>
|
|
summary: OpenStack Image Registry and Delivery Service
|
|
description: |
|
|
The Glance project provides an image registration and discovery service
|
|
and an image delivery service. These services are used in conjunction
|
|
by Nova to deliver images from object stores, such as OpenStack's Swift
|
|
service, to Nova's compute nodes.
|
|
version: 3
|
|
bases:
|
|
- name: ubuntu
|
|
channel: 22.04/stable
|
|
assumes:
|
|
- k8s-api
|
|
- juju >= 3.1
|
|
tags:
|
|
- openstack
|
|
- storage
|
|
- misc
|
|
source: https://opendev.org/openstack/charm-glance-k8s
|
|
issues: https://bugs.launchpad.net/charm-glance-k8s
|
|
|
|
containers:
|
|
glance-api:
|
|
resource: glance-api-image
|
|
mounts:
|
|
- storage: local-repository
|
|
# A persistent storage place to store glance images in a local file
|
|
# based repository. This must be shared storage in order to support a
|
|
# highly available glance registry.
|
|
location: /var/lib/glance/images
|
|
|
|
resources:
|
|
glance-api-image:
|
|
type: oci-image
|
|
description: OCI image for OpenStack Glance
|
|
# ghcr.io/canonical/glance-api:2023.2
|
|
upstream-source: ghcr.io/canonical/glance-api:2023.2
|
|
|
|
storage:
|
|
local-repository:
|
|
type: filesystem
|
|
description: |
|
|
A local filesystem storage repository for glance images to be saved to.
|
|
Note, this must be shared storage in order to support a highly
|
|
available glance image registry.
|
|
|
|
requires:
|
|
database:
|
|
interface: mysql_client
|
|
limit: 1
|
|
ingress-internal:
|
|
interface: ingress
|
|
optional: true
|
|
limit: 1
|
|
ingress-public:
|
|
interface: ingress
|
|
limit: 1
|
|
identity-service:
|
|
interface: keystone
|
|
limit: 1
|
|
amqp:
|
|
interface: rabbitmq
|
|
optional: true
|
|
ceph:
|
|
interface: ceph-client
|
|
optional: true
|
|
receive-ca-cert:
|
|
interface: certificate_transfer
|
|
optional: true
|
|
|
|
provides:
|
|
image-service:
|
|
interface: glance
|
|
|
|
peers:
|
|
peers:
|
|
interface: glance-peer
|