Skip to content

[WIP] Add Application Credentials authentication support for Nova services #1006

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[WIP] Add Application Credentials authentication support for Nova services #1006

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
287 changes: 242 additions & 45 deletions api/bases/nova.openstack.org_nova.yaml
View file
Open in desktop

Large diffs are not rendered by default.

113 changes: 100 additions & 13 deletions api/bases/nova.openstack.org_novaapis.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,6 +66,12 @@ spec:
description: APITimeout for Route and Apache
minimum: 10
type: integer
applicationCredentialID:
description: ApplicationCredentialID - the ID of the ApplicationCredential
type: string
applicationCredentialSecret:
description: ApplicationCredentialSecret - the secret of the ApplicationCredential
type: string
cell0DatabaseAccount:
default: nova-cell0
description: APIDatabaseAccount - MariaDBAccount to use when accessing
Expand All @@ -86,11 +92,23 @@ spec:
to /etc/<service>/<service>.conf.d directory as custom.conf file.
type: string
defaultConfigOverwrite:
additionalProperties:
type: string
description: DefaultConfigOverwrite - interface to overwrite default
config files like e.g. api-paste.ini or policy.yaml.
type: object
items:
description: |-
KeyValuePair represents a key-value pair as an alternative to map fields
to comply with CRD schema validation requirements
properties:
key:
default: ""
type: string
value:
type: string
type: object
type: array
x-kubernetes-list-map-keys:
- key
x-kubernetes-list-type: map
keystoneAuthURL:
description: |-
KeystoneAuthURL configures the keystone API endpoint to be used
Expand All @@ -113,11 +131,23 @@ spec:
type: string
type: array
nodeSelector:
additionalProperties:
type: string
description: NodeSelector to target subset of worker nodes running
this service
type: object
items:
description: |-
KeyValuePair represents a key-value pair as an alternative to map fields
to comply with CRD schema validation requirements
properties:
key:
default: ""
type: string
value:
type: string
type: object
type: array
x-kubernetes-list-map-keys:
- key
x-kubernetes-list-type: map
override:
description: Override, provides the ability to override the generated
manifest of several child resources.
Expand Down Expand Up @@ -278,16 +308,28 @@ spec:
type: object
type: object
registeredCells:
additionalProperties:
type: string
description: |-
RegisteredCells is a map keyed by cell names that are registered in the
nova_api database with a value that is the hash of the given cell
configuration.
This is used to detect when a new cell is added or an existing cell is
reconfigured to trigger refresh of the in memory cell caches of the
service.
type: object
items:
description: |-
KeyValuePair represents a key-value pair as an alternative to map fields
to comply with CRD schema validation requirements
properties:
key:
default: ""
type: string
value:
type: string
type: object
type: array
x-kubernetes-list-map-keys:
- key
x-kubernetes-list-type: map
replicas:
default: 1
description: Replicas of the service to run
Expand Down Expand Up @@ -416,6 +458,14 @@ spec:
current project
type: string
type: object
useApplicationCredential:
default: "false"
description: UseApplicationCredential - indicates if ApplicationCredential
authentication is used
enum:
- "true"
- "false"
type: string
required:
- apiDatabaseHostname
- cell0DatabaseHostname
Expand Down Expand Up @@ -472,10 +522,22 @@ spec:
type: object
type: array
hash:
additionalProperties:
type: string
description: Map of hashes to track e.g. job status
type: object
items:
description: |-
KeyValuePair represents a key-value pair as an alternative to map fields
to comply with CRD schema validation requirements
properties:
key:
default: ""
type: string
value:
type: string
type: object
type: array
x-kubernetes-list-map-keys:
- key
x-kubernetes-list-type: map
lastAppliedTopology:
description: LastAppliedTopology - the last applied Topology
properties:
Expand All @@ -496,8 +558,33 @@ spec:
items:
type: string
type: array
description: NetworkAttachments status of the deployment pods
description: |-
NetworkAttachments status of the deployment pods
NetworkAttachments status of the deployment pods
Deprecated: This field uses a map structure that violates schema validation.
Use NetworkAttachmentsStatus instead.
type: object
networkAttachmentsStatus:
description: |-
NetworkAttachmentsStatus provides the same information as NetworkAttachments
but in a schema-compliant format
items:
description: NetworkAttachmentStatus represents network attachment
status for a specific endpoint
properties:
ips:
items:
type: string
type: array
x-kubernetes-list-type: set
name:
default: ""
type: string
type: object
type: array
x-kubernetes-list-map-keys:
- name
x-kubernetes-list-type: map
observedGeneration:
description: |-
ObservedGeneration - the most recent generation observed for this
Expand Down
Loading
Loading