Allow setting TLS-related options

sdatko · sdatko · commit 7e1fb59b1fae · 2025-08-09T22:06:05.000+02:00
diff --git a/examples/dt/bgp-l3-xl/control-plane/service-values.yaml b/examples/dt/bgp-l3-xl/control-plane/service-values.yaml
@@ -6,7 +6,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   glance:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/bgp_dt01/control-plane/service-values.yaml b/examples/dt/bgp_dt01/control-plane/service-values.yaml
@@ -6,7 +6,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   glance:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/bmo01/control-plane/service-values.yaml b/examples/dt/bmo01/control-plane/service-values.yaml
@@ -8,7 +8,10 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   cinderVolumes:
     lvm-iscsi:
       replicas: 1
diff --git a/examples/dt/dcn/control-plane/scaledown/service-values.yaml b/examples/dt/dcn/control-plane/scaledown/service-values.yaml
@@ -6,7 +6,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   cinder:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/dcn/control-plane/service-values.yaml b/examples/dt/dcn/control-plane/service-values.yaml
@@ -6,4 +6,7 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
diff --git a/examples/dt/dcn/service-values.yaml b/examples/dt/dcn/service-values.yaml
@@ -7,7 +7,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   cinder:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/nfv/nfv-ovs-dpdk-sriov-2nodesets/service-values.yaml b/examples/dt/nfv/nfv-ovs-dpdk-sriov-2nodesets/service-values.yaml
@@ -14,7 +14,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/nfv/nfv-ovs-dpdk-sriov-hci/control-plane/service-values.yaml b/examples/dt/nfv/nfv-ovs-dpdk-sriov-hci/control-plane/service-values.yaml
@@ -14,7 +14,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/nfv/nfv-ovs-dpdk-sriov-hci/service-values.yaml b/examples/dt/nfv/nfv-ovs-dpdk-sriov-hci/service-values.yaml
@@ -14,7 +14,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   swift:
     enabled: false
   cinderAPI:
diff --git a/examples/dt/nfv/nfv-ovs-dpdk-sriov-networker/service-values.yaml b/examples/dt/nfv/nfv-ovs-dpdk-sriov-networker/service-values.yaml
@@ -14,7 +14,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/nova/nova-three-cells/control-plane/service-values.yaml b/examples/dt/nova/nova-three-cells/control-plane/service-values.yaml
@@ -8,7 +8,10 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   galera:
     templates:
       openstack-cell2:
diff --git a/examples/dt/nova/nova01alpha/service-values.yaml b/examples/dt/nova/nova01alpha/service-values.yaml
@@ -7,7 +7,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [ml2]
diff --git a/examples/dt/osasinfra-ipv6/control-plane/service-values.yaml b/examples/dt/osasinfra-ipv6/control-plane/service-values.yaml
@@ -6,4 +6,7 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
diff --git a/examples/dt/osasinfra-ipv6/service-values.yaml b/examples/dt/osasinfra-ipv6/service-values.yaml
@@ -7,7 +7,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   cinderAPI:
     replicas: 3
   cinderBackup:
diff --git a/examples/dt/osasinfra/control-plane/service-values.yaml b/examples/dt/osasinfra/control-plane/service-values.yaml
@@ -6,4 +6,7 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
diff --git a/examples/dt/osasinfra/service-values.yaml b/examples/dt/osasinfra/service-values.yaml
@@ -7,7 +7,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   cinderAPI:
     replicas: 3
   cinderBackup:
diff --git a/examples/dt/pidone/service-values.yaml b/examples/dt/pidone/service-values.yaml
@@ -7,7 +7,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   glance:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/uni01alpha/control-plane/service-values.yaml b/examples/dt/uni01alpha/control-plane/service-values.yaml
@@ -8,7 +8,10 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   cinderVolumes:
     lvm-iscsi:
       replicas: 1
diff --git a/examples/dt/uni02beta/control-plane/service-values.yaml b/examples/dt/uni02beta/control-plane/service-values.yaml
@@ -8,7 +8,10 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
 
   cinderBackup:
     customServiceConfig: |
diff --git a/examples/dt/uni04delta-ipv6/control-plane/service-values.yaml b/examples/dt/uni04delta-ipv6/control-plane/service-values.yaml
@@ -6,7 +6,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
 
   cinderBackup:
     customServiceConfig: |
diff --git a/examples/dt/uni04delta/control-plane/service-values.yaml b/examples/dt/uni04delta/control-plane/service-values.yaml
@@ -8,7 +8,10 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   cinderBackup:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/uni05epsilon/control-plane/service-values.yaml b/examples/dt/uni05epsilon/control-plane/service-values.yaml
@@ -8,7 +8,10 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
 
   galera:
     templates:
diff --git a/examples/dt/uni05epsilon/service-values.yaml b/examples/dt/uni05epsilon/service-values.yaml
@@ -8,7 +8,10 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
 
   cinderBackup:
     customServiceConfig: |
diff --git a/examples/dt/uni06zeta/control-plane/service-values.yaml b/examples/dt/uni06zeta/control-plane/service-values.yaml
@@ -8,7 +8,10 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   cinderVolumes:
     lvm-nvme-tcp:
       replicas: 1
diff --git a/examples/dt/uni07eta/control-plane/service-values.yaml b/examples/dt/uni07eta/control-plane/service-values.yaml
@@ -8,7 +8,10 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   cinderVolumes:
     ontap-iscsi:
       customServiceConfig: |
diff --git a/examples/va/hci/control-plane/service-values.yaml b/examples/va/hci/control-plane/service-values.yaml
@@ -6,4 +6,7 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
diff --git a/examples/va/hci/service-values.yaml b/examples/va/hci/service-values.yaml
@@ -7,7 +7,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   cinderAPI:
     replicas: 3
   cinderBackup:
diff --git a/examples/va/multi-namespace/control-plane/service-values.yaml b/examples/va/multi-namespace/control-plane/service-values.yaml
@@ -6,7 +6,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   barbican:
     enabled: false
   cinderAPI:
diff --git a/examples/va/multi-namespace/control-plane2/service-values.yaml b/examples/va/multi-namespace/control-plane2/service-values.yaml
@@ -6,7 +6,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   barbican:
     enabled: false
   cinderAPI:
diff --git a/examples/va/nfv/ovs-dpdk-networker/service-values.yaml b/examples/va/nfv/ovs-dpdk-networker/service-values.yaml
@@ -14,7 +14,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/va/nfv/ovs-dpdk-sriov/service-values.yaml b/examples/va/nfv/ovs-dpdk-sriov/service-values.yaml
@@ -14,7 +14,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/va/nfv/ovs-dpdk/service-values.yaml b/examples/va/nfv/ovs-dpdk/service-values.yaml
@@ -14,7 +14,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/va/nfv/sriov/service-values.yaml b/examples/va/nfv/sriov/service-values.yaml
@@ -7,7 +7,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [ml2]
diff --git a/examples/va/nvidia-mdev/control-plane/service-values.yaml b/examples/va/nvidia-mdev/control-plane/service-values.yaml
@@ -6,7 +6,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls: {}
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [DEFAULT]
diff --git a/lib/control-plane/base/openstackcontrolplane.yaml b/lib/control-plane/base/openstackcontrolplane.yaml
@@ -292,3 +292,4 @@ spec:
       logging:
         enabled: false
         port: 10514
+  tls: {}
diff --git a/lib/control-plane/kustomization.yaml b/lib/control-plane/kustomization.yaml
@@ -9,3 +9,4 @@ components:
   - storage
   - ovn-bridge
   - job-settings
+  - tls
diff --git a/lib/control-plane/tls/kustomization.yaml b/lib/control-plane/tls/kustomization.yaml
@@ -0,0 +1,16 @@
+---
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+replacements:
+  - source:
+      kind: ConfigMap
+      name: service-values
+      fieldPath: data.tls
+    targets:
+      - select:
+          kind: OpenStackControlPlane
+        fieldPaths:
+          - spec.tls
+        options:
+          create: true
