Add cc-rrze (#846)

Signed-off-by: Lukas Kraus <[email protected]>
Signed-off-by: Matthias Büchse <[email protected]>
Co-authored-by: Matthias Büchse <[email protected]>

Author: cpt-kernel-afk

.zuul.d/secure.yaml

@@ -57,6 +57,28 @@
           Vjo5fBpIjEOLNtA40vx0Agx1Red2eMFA5oLcxiDMBSP4nLiI1QNROSnGc7GYoIT5kyq8k
           P5Uw261H4un2xvpO9ZBuHEV5mskTiBazTPDwaqU3yZoyGIvdQl2Uo6S3Glnf41YH+k/hN
           jxzziQB9sT2glnmmzrzZ22xPZg+sTngWS/3svRYV9BXKnMgq8jjR6eIKGYSwyQ=
+      cc_rrze_ac_id: !encrypted/pkcs1-oaep
+        - DUgJ7ozJOzJq1TSmBE6P8RGAW6C+s9LDRbW6mHIbAQlAX3+21d/KgoLk9zEyDdOanK1yd
+          QaEZJDjURsIAcHJh7vh9w/2Z948XKDybxIOb1tcJGJU1LsEmYoNAQXM5G3+l8Z66Crpgw
+          RE+wBlSe1dhXrhiGefH2ykvbRtPggJMFECpy+rVg16GhGSlnzptVk4F2GEGpzkEx84B0J
+          0h/HdX/y40xoeBx6giVZrZsOGnvWmMLqIq5Q5NMa1hdY0yGbpAUruqFrkVYZGU59ygEuo
+          60mJD0R1wQOo14wZtXob67V0DO9AcdRJHZRDRKyclPyGkf/QbCBf8+DCqAd/BKbe9a818
+          Z7M8aeylvO/digVAqJa5zin3vOz5PJUGkv0GZjjcgGkwV+d/7pWwebBsXNjBKj9HgX3Xe
+          eU6ZmfIJHb3pB4X+RySTIFAjp60Tb6QLe7yE1aJ5Ffc8ZsGqLhYcH0Q+SWhh3A6EJirRY
+          T76Ufw5n04L7GT+nP1Cy6Lf2eSPvJCto9y5iSfnayyssWmkDmcgrYVJXhktuR6Gy6sTQu
+          0+s9ynznFVG0PVexLZVo7fCmcFydGHeoupCj0kHIc46hCMogEQI7CI+462jS5Rznhs+2J
+          cK5NYc1gl6woxeJq3fwITw0eGK+zqrUMsBAV1FKrgfkYuFydRA/JRQSd3+vEOI=
+      cc_rrze_ac_secret: !encrypted/pkcs1-oaep
+        - pW3PjqBbzTNc3PfESczT4DXlk1mfiC6PMqkLidggcVRawlEy/UT7Dmynjr+lvkJz6oHIo
+          vnfnviKW7t6VqUgv5h4rRbh3PaCJqrCL35X7hW1uJSvyOgq3he836+78W23j/JhyO/gKk
+          9okn31np0uWguiIueCXjIgfkq2M/rJ3Aq//6siT/BKGmUupu6J7lskd47IHsOFV6oVT/t
+          MT+QrOJEP1KDlIiwbQsoiX9r+39/RR2qvhxMCW5Bh068TJI206oKPmJcR5doDBgygOhhj
+          HFwmox9X6F4jR1uDLAjxzdX7pC/JHaYGEe4rBYJ+RB4HKAH+4p7Fvy152quDkUsQPmJjn
+          ivRk6eR9/NrMPpljsvdIs9J/dPsdbCmM55rnGvo+BBh2lA7LrNzgcAHQ8se1UozaTzzlC
+          AIiZRchy6ivAucQEJv7iKXRgR2YLq4yO3GYOmY0bcGkE+K2Envuq1mz1Dt874Rc4FyGSN
+          diK3gdP7uWp0nVp4BXCXIygscdQe/rMCgrVSFV3l6EEz+nuaZM0AodkPccjuPdFnxainq
+          JQEGmPnox+w8UgMNpR3BSIY3qZpEsIrOejX/L0tM4+z1mozdSnhajJV4dkj8xYreJKQJC
+          lwpQQDNBIyjwvq6GJjreu0ZEWdwBAYmodhaH8odgd/cpctXB/tuzqgpnEwQt2E=
       cnds_ac_id: !encrypted/pkcs1-oaep
         - apArEei+9Eu0NrelesebDZwUjGvbep58dAQowtcCEn1hzbUAqMxWm74Ibk1e+C3prH5Zv
           tcj+okUoyfelP8ExqCZL55cOZVentoyg/VfiwZlR1z9N/p3vDkN3sx8z6o7CJux2oFMkg

Tests/config.toml

@@ -19,6 +19,7 @@ scopes = [
 subjects = [
     "gx-scs",
     "artcodix",
+    "cc-rrze",
     "pco-prod1",
     "pco-prod2",
     "pco-prod3",

compliance-monitor/bootstrap.yaml

@@ -25,6 +25,15 @@ accounts:
   - subject: artcodix
     delegates:
       - zuul_ci
+  - subject: cc-rrze
+    delegates:
+      - zuul_ci
+    api_keys:
+      - "$argon2id$v=19$m=65536,t=3,p=4$iLG29t7be88ZY6w1Rui91w$9UwkTMLBMxq/1QyeVfJcc95fhQtY1AC48Rex4S8ZSIU"
+    keys:
+      - public_key: "AAAAC3NzaC1lZDI1NTE5AAAAIF8kQx6ur/WSSY9ThK/mwhrl/VsYnjRk44GSXBy3VfKI"
+        public_key_type: "ssh-ed25519"
+        public_key_name: "primary"
   - subject: pco-prod1
     delegates:
       - zuul_ci

compliance-monitor/templates/overview.md.j2

@@ -14,6 +14,9 @@ Version numbers are suffixed by a symbol depending on state: * for _draft_, †
 | [aov.cloud](https://www.aov.de/) | Community cloud for customers | aov IT.Services GmbH |
 {#- #} [{{ results | pick('aov', iaas) | summary }}]({{ detail_url('aov', iaas) }}) {# -#}
 | [HM](https://health.aov.cloud/) |
+| [CC@RRZE](https://www.rrze.fau.de/) | Private Compute Cloud (CC) for [FAU](https://www.fau.de/) | Regionales Rechenzentrum Erlangen | 
+{#- #} [{{ results | pick('cc-rrze', iaas) | summary }}]({{ detail_url('cc-rrze', iaas) }}) {# -#}
+| (soon) |
 | [CNDS](https://cnds.io/) | Public cloud for customers | artcodix GmbH |
 {#- #} [{{ results | pick('artcodix', iaas) | summary }}]({{ detail_url('artcodix', iaas) }}) {# -#}
 | [HM](https://ohm.muc.cloud.cnds.io/) |

playbooks/clouds.yaml.j2

@@ -19,6 +19,15 @@ clouds:
       application_credential_id: "{{ clouds_conf.cnds_ac_id }}"
       application_credential_secret: "{{ clouds_conf.cnds_ac_secret }}"
       #project_id: 225a7363dab74b69aa1e3f744aced109
+  cc-rrze:
+    region_name: "DE-ERL"
+    interface: "public"
+    identity_api_version: 3
+    auth_type: "v3applicationcredential"
+    auth:
+      auth_url: https://api.cc.rrze.de:5000
+      application_credential_id: "{{ clouds_conf.cc_rrze_ac_id }}"
+      application_credential_secret: "{{ clouds_conf.cc_rrze_a_ac_secret }}"
   pco-prod1:
     region_name: "prod1"
     interface: "public"