Allow setting TLS-related options

sdatko · kstrenkova · commit d88c368518cb · 2025-11-11T06:30:41.000-05:00
diff --git a/examples/dt/bgp-l3-xl/control-plane/service-values.yaml b/examples/dt/bgp-l3-xl/control-plane/service-values.yaml
@@ -6,7 +6,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   glance:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/bgp_dt01/control-plane/service-values.yaml b/examples/dt/bgp_dt01/control-plane/service-values.yaml
@@ -6,7 +6,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   glance:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/bmo01/control-plane/service-values.yaml b/examples/dt/bmo01/control-plane/service-values.yaml
@@ -8,7 +8,12 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   cinderVolumes:
     lvm-iscsi:
       replicas: 1
diff --git a/examples/dt/dcn/control-plane/scaledown/service-values.yaml b/examples/dt/dcn/control-plane/scaledown/service-values.yaml
@@ -6,7 +6,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   cinder:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/dcn/control-plane/service-values.yaml b/examples/dt/dcn/control-plane/service-values.yaml
@@ -6,4 +6,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
+  _change_me: later
diff --git a/examples/dt/dcn/service-values.yaml b/examples/dt/dcn/service-values.yaml
@@ -7,7 +7,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   cinder:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/nfv/nfv-ovs-dpdk-sriov-2nodesets/service-values.yaml b/examples/dt/nfv/nfv-ovs-dpdk-sriov-2nodesets/service-values.yaml
@@ -14,7 +14,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/nfv/nfv-ovs-dpdk-sriov-hci/control-plane/service-values.yaml b/examples/dt/nfv/nfv-ovs-dpdk-sriov-hci/control-plane/service-values.yaml
@@ -14,7 +14,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/nfv/nfv-ovs-dpdk-sriov-hci/service-values.yaml b/examples/dt/nfv/nfv-ovs-dpdk-sriov-hci/service-values.yaml
@@ -14,7 +14,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   swift:
     enabled: false
   cinderAPI:
diff --git a/examples/dt/nfv/nfv-ovs-dpdk-sriov-networker/service-values.yaml b/examples/dt/nfv/nfv-ovs-dpdk-sriov-networker/service-values.yaml
@@ -14,7 +14,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/nova/nova-three-cells/control-plane/service-values.yaml b/examples/dt/nova/nova-three-cells/control-plane/service-values.yaml
@@ -8,7 +8,12 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   galera:
     templates:
       openstack-cell2:
diff --git a/examples/dt/nova/nova01alpha/service-values.yaml b/examples/dt/nova/nova01alpha/service-values.yaml
@@ -7,7 +7,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [ml2]
diff --git a/examples/dt/osasinfra-ipv6/control-plane/service-values.yaml b/examples/dt/osasinfra-ipv6/control-plane/service-values.yaml
@@ -6,4 +6,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
+  _change_me: later
diff --git a/examples/dt/osasinfra-ipv6/service-values.yaml b/examples/dt/osasinfra-ipv6/service-values.yaml
@@ -7,7 +7,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   cinderAPI:
     replicas: 3
   cinderBackup:
diff --git a/examples/dt/osasinfra/control-plane/service-values.yaml b/examples/dt/osasinfra/control-plane/service-values.yaml
@@ -6,4 +6,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
+  _change_me: later
diff --git a/examples/dt/osasinfra/service-values.yaml b/examples/dt/osasinfra/service-values.yaml
@@ -7,7 +7,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   cinderAPI:
     replicas: 3
   cinderBackup:
diff --git a/examples/dt/pidone/service-values.yaml b/examples/dt/pidone/service-values.yaml
@@ -7,7 +7,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   glance:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/uni01alpha/control-plane/service-values.yaml b/examples/dt/uni01alpha/control-plane/service-values.yaml
@@ -8,7 +8,12 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   cinderVolumes:
     lvm-iscsi:
       replicas: 1
diff --git a/examples/dt/uni02beta/control-plane/service-values.yaml b/examples/dt/uni02beta/control-plane/service-values.yaml
@@ -8,8 +8,12 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
 
+  # --- Below are VA/DT-specific data ---
   cinderBackup:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/uni04delta-ipv6/control-plane/service-values.yaml b/examples/dt/uni04delta-ipv6/control-plane/service-values.yaml
@@ -6,8 +6,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
 
+  # --- Below are VA/DT-specific data ---
   cinderBackup:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/uni04delta/control-plane/service-values.yaml b/examples/dt/uni04delta/control-plane/service-values.yaml
@@ -8,7 +8,12 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   cinderBackup:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/uni05epsilon/control-plane/service-values.yaml b/examples/dt/uni05epsilon/control-plane/service-values.yaml
@@ -8,8 +8,12 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
 
+  # --- Below are VA/DT-specific data ---
   galera:
     templates:
       openstack-cell2:
diff --git a/examples/dt/uni05epsilon/service-values.yaml b/examples/dt/uni05epsilon/service-values.yaml
@@ -8,9 +8,13 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
   notificationsBusInstance: rabbitmq-notifications
+  tls:
+    caBundleSecretName: ""
 
+  # --- Below are VA/DT-specific data ---
   cinderBackup:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/dt/uni06zeta/control-plane/service-values.yaml b/examples/dt/uni06zeta/control-plane/service-values.yaml
@@ -8,7 +8,12 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   cinderVolumes:
     lvm-nvme-tcp:
       replicas: 1
diff --git a/examples/dt/uni07eta/control-plane/service-values.yaml b/examples/dt/uni07eta/control-plane/service-values.yaml
@@ -8,7 +8,12 @@ metadata:
     config.kubernetes.io/local-config: "true"
 
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   cinderVolumes:
     ontap-iscsi:
       customServiceConfig: |
diff --git a/examples/va/hci/control-plane/service-values.yaml b/examples/va/hci/control-plane/service-values.yaml
@@ -6,4 +6,10 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
+  _change_me: later
diff --git a/examples/va/hci/service-values.yaml b/examples/va/hci/service-values.yaml
@@ -7,8 +7,13 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
   notificationsBusInstance: rabbitmq-notifications
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   cinderAPI:
     replicas: 3
   cinderBackup:
diff --git a/examples/va/multi-namespace/control-plane/service-values.yaml b/examples/va/multi-namespace/control-plane/service-values.yaml
@@ -6,7 +6,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   barbican:
     enabled: false
   cinderAPI:
diff --git a/examples/va/multi-namespace/control-plane2/service-values.yaml b/examples/va/multi-namespace/control-plane2/service-values.yaml
@@ -6,7 +6,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   barbican:
     enabled: false
   cinderAPI:
diff --git a/examples/va/nfv/ovs-dpdk-networker/service-values.yaml b/examples/va/nfv/ovs-dpdk-networker/service-values.yaml
@@ -14,7 +14,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/va/nfv/ovs-dpdk-sriov/service-values.yaml b/examples/va/nfv/ovs-dpdk-sriov/service-values.yaml
@@ -14,7 +14,12 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  # --- Fields required by lib/control-plane ---
   preserveJobs: false
+  tls:
+    caBundleSecretName: ""
+
+  # --- Below are VA/DT-specific data ---
   neutron:
     customServiceConfig: |
       [DEFAULT]
diff --git a/examples/va/nfv/ovs-dpdk/service-values.yaml b/examples/va/nfv/ovs-dpdk/service-values.yaml
diff --git a/examples/va/nfv/sriov/service-values.yaml b/examples/va/nfv/sriov/service-values.yaml
diff --git a/examples/va/nvidia-mdev/control-plane/service-values.yaml b/examples/va/nvidia-mdev/control-plane/service-values.yaml
diff --git a/lib/control-plane/base/openstackcontrolplane.yaml b/lib/control-plane/base/openstackcontrolplane.yaml
diff --git a/lib/control-plane/kustomization.yaml b/lib/control-plane/kustomization.yaml
diff --git a/lib/control-plane/tls/kustomization.yaml b/lib/control-plane/tls/kustomization.yaml
