bf43f5cf8d
These options creates more issues than they are solving. Removing `admin-user`, `admin-role`, and `service-tenant` to ensure a standard sunbeam deployment. Rename the `Admin` to the default [1]` admin` role. 1: https://docs.openstack.org/keystone/2024.1/admin/service-api-protection.html Change-Id: I93f3b754e4aca2cc71b0e408555c6d937a9d4e04
141 lines
2.8 KiB
YAML
141 lines
2.8 KiB
YAML
bundle: kubernetes
|
|
|
|
applications:
|
|
traefik:
|
|
charm: ch:traefik-k8s
|
|
channel: 1.0/candidate
|
|
scale: 1
|
|
trust: true
|
|
traefik-public:
|
|
charm: ch:traefik-k8s
|
|
channel: 1.0/candidate
|
|
scale: 1
|
|
trust: true
|
|
options:
|
|
kubernetes-service-annotations: metallb.universe.tf/address-pool=public
|
|
mysql:
|
|
charm: ch:mysql-k8s
|
|
channel: 8.0/stable
|
|
scale: 1
|
|
trust: false
|
|
rabbitmq:
|
|
charm: ch:rabbitmq-k8s
|
|
channel: 3.12/edge
|
|
scale: 1
|
|
trust: true
|
|
options:
|
|
minimum-replicas: 1
|
|
keystone:
|
|
charm: ch:keystone-k8s
|
|
channel: 2024.1/edge
|
|
scale: 1
|
|
trust: true
|
|
storage:
|
|
fernet-keys: 5M
|
|
credential-keys: 5M
|
|
glance:
|
|
charm: ch:glance-k8s
|
|
channel: 2024.1/edge
|
|
scale: 1
|
|
trust: true
|
|
storage:
|
|
local-repository: 5G
|
|
nova:
|
|
charm: ch:nova-k8s
|
|
channel: 2024.1/edge
|
|
scale: 1
|
|
trust: true
|
|
placement:
|
|
charm: ch:placement-k8s
|
|
channel: 2024.1/edge
|
|
scale: 1
|
|
trust: true
|
|
neutron:
|
|
charm: ch:neutron-k8s
|
|
channel: 2024.1/edge
|
|
scale: 1
|
|
trust: true
|
|
ovn-central:
|
|
charm: ch:ovn-central-k8s
|
|
channel: 24.03/edge
|
|
scale: 1
|
|
trust: true
|
|
ovn-relay:
|
|
charm: ../../ovn-relay-k8s.charm
|
|
scale: 1
|
|
trust: true
|
|
resources:
|
|
ovn-sb-db-server-image: ghcr.io/canonical/ovn-consolidated:24.03
|
|
tls-operator:
|
|
charm: self-signed-certificates
|
|
channel: edge
|
|
scale: 1
|
|
options:
|
|
ca-common-name: internal-ca
|
|
|
|
relations:
|
|
- - mysql:database
|
|
- keystone:database
|
|
- - traefik:ingress
|
|
- keystone:ingress-internal
|
|
- - traefik-public:ingress
|
|
- keystone:ingress-public
|
|
|
|
- - mysql:database
|
|
- glance:database
|
|
- - rabbitmq:amqp
|
|
- glance:amqp
|
|
- - keystone:identity-service
|
|
- glance:identity-service
|
|
- - traefik:ingress
|
|
- glance:ingress-internal
|
|
- - traefik-public:ingress
|
|
- glance:ingress-public
|
|
|
|
- - mysql:database
|
|
- nova:database
|
|
- - mysql:database
|
|
- nova:api-database
|
|
- - mysql:database
|
|
- nova:cell-database
|
|
- - rabbitmq:amqp
|
|
- nova:amqp
|
|
- - keystone:identity-service
|
|
- nova:identity-service
|
|
- - traefik:ingress
|
|
- nova:ingress-internal
|
|
- - traefik-public:ingress
|
|
- nova:ingress-public
|
|
|
|
- - mysql:database
|
|
- placement:database
|
|
- - keystone:identity-service
|
|
- placement:identity-service
|
|
- - traefik:ingress
|
|
- placement:ingress-internal
|
|
- - traefik-public:ingress
|
|
- placement:ingress-public
|
|
|
|
- - mysql:database
|
|
- neutron:database
|
|
- - rabbitmq:amqp
|
|
- neutron:amqp
|
|
- - keystone:identity-service
|
|
- neutron:identity-service
|
|
- - traefik:ingress
|
|
- neutron:ingress-internal
|
|
- - traefik-public:ingress
|
|
- neutron:ingress-public
|
|
- - tls-operator:certificates
|
|
- neutron:certificates
|
|
- - neutron:ovsdb-cms
|
|
- ovn-central:ovsdb-cms
|
|
|
|
- - tls-operator:certificates
|
|
- ovn-central:certificates
|
|
|
|
- - tls-operator:certificates
|
|
- ovn-relay:certificates
|
|
- - ovn-relay:ovsdb-cms
|
|
- ovn-central:ovsdb-cms
|