Skip to content

Commit a1c488f

Browse files
committed
Adjust to use CloudKittyCore to avoid exposing images in the ControlPlane
1 parent 05c41e1 commit a1c488f

File tree

12 files changed

+551
-97
lines changed

12 files changed

+551
-97
lines changed

apis/bases/core.openstack.org_openstackcontrolplanes.yaml

Lines changed: 173 additions & 14 deletions
Large diffs are not rendered by default.

apis/go.mod

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,6 @@ require (
6868
github.com/google/pprof v0.0.0-20240727154555-813a5fbdbec8 // indirect
6969
github.com/google/uuid v1.6.0 // indirect
7070
github.com/gophercloud/gophercloud v1.14.1 // indirect
71-
github.com/grafana/loki/operator/api/loki v0.0.0-20250910094332-a082b8a061ba // indirect
7271
github.com/imdario/mergo v0.3.16 // indirect
7372
github.com/josharian/intern v1.0.0 // indirect
7473
github.com/json-iterator/go v1.1.12 // indirect
@@ -120,4 +119,4 @@ replace github.com/openshift/api => github.com/openshift/api v0.0.0-202507112000
120119
replace github.com/rabbitmq/cluster-operator/v2 => github.com/openstack-k8s-operators/rabbitmq-cluster-operator/v2 v2.6.1-0.20250717122149-12f70b7f3d8d //allow-merging
121120

122121
// Test CloudKitty
123-
replace github.com/openstack-k8s-operators/telemetry-operator/api => github.com/jlarriba/telemetry-operator/api v0.1.1-0.20250923092300-186405486b28
122+
replace github.com/openstack-k8s-operators/telemetry-operator/api => github.com/jlarriba/telemetry-operator/api v0.1.1-0.20250930084254-d101f99286fd

apis/go.sum

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -60,12 +60,10 @@ github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
6060
github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
6161
github.com/gophercloud/gophercloud v1.14.1 h1:DTCNaTVGl8/cFu58O1JwWgis9gtISAFONqpMKNg/Vpw=
6262
github.com/gophercloud/gophercloud v1.14.1/go.mod h1:aAVqcocTSXh2vYFZ1JTvx4EQmfgzxRcNupUfxZbBNDM=
63-
github.com/grafana/loki/operator/api/loki v0.0.0-20250910094332-a082b8a061ba h1:P5Wgp2HfGfNPLCPpS+YqquKdrrl4tW0El7VX23D6vtg=
64-
github.com/grafana/loki/operator/api/loki v0.0.0-20250910094332-a082b8a061ba/go.mod h1:OBAgJh0mLYRvziBzBKr4/anrPHqGY9qEfuNXCpnUNi0=
6563
github.com/imdario/mergo v0.3.16 h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4=
6664
github.com/imdario/mergo v0.3.16/go.mod h1:WBLT9ZmE3lPoWsEzCh9LPo3TiwVN+ZKEjmz+hD27ysY=
67-
github.com/jlarriba/telemetry-operator/api v0.1.1-0.20250923092300-186405486b28 h1:9H+DxrR9/zzJtTZ9HeC7Ngxq83fLyZU6Z2sr4J5HOcI=
68-
github.com/jlarriba/telemetry-operator/api v0.1.1-0.20250923092300-186405486b28/go.mod h1:+SOqfHuYQlyFGykNxqMWZcFjdIB6+2+L3K7w+Uh+vCM=
65+
github.com/jlarriba/telemetry-operator/api v0.1.1-0.20250930084254-d101f99286fd h1:QWR7+D5NMWyBboAVPY8fWUplSA07mXX17I+Cp5gHWLA=
66+
github.com/jlarriba/telemetry-operator/api v0.1.1-0.20250930084254-d101f99286fd/go.mod h1:v4Stbc6YFVR3r7ofSuErpTJ9Ki2Ka9Fs8S+dgiNqx60=
6967
github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=
7068
github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
7169
github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=

bindata/crds/crds.yaml

Lines changed: 173 additions & 14 deletions
Large diffs are not rendered by default.

bindata/operator/operator.yaml

Lines changed: 7 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ metadata:
5454
name: openstack-operator-controller-manager
5555
namespace: '{{ .OperatorNamespace }}'
5656
spec:
57-
replicas: {{ .OpenStackOperator.Deployment.Replicas }}
57+
replicas: 1
5858
selector:
5959
matchLabels:
6060
openstack.org/operator-name: openstack
@@ -74,10 +74,7 @@ spec:
7474
command:
7575
- /manager
7676
env:
77-
{{- range .OpenStackOperator.Deployment.Manager.Env }}
78-
- name: '{{ .Name }}'
79-
value: '{{ .Value }}'
80-
{{- end }}
77+
- envCustom: replace_me
8178
image: '{{ .OpenStackOperator.Deployment.Manager.Image }}'
8279
livenessProbe:
8380
httpGet:
@@ -98,11 +95,9 @@ spec:
9895
periodSeconds: 10
9996
resources:
10097
limits:
101-
cpu: {{ .OpenStackOperator.Deployment.Manager.Resources.Limits.CPU }}
102-
memory: {{ .OpenStackOperator.Deployment.Manager.Resources.Limits.Memory }}
98+
customLimits: replace_me
10399
requests:
104-
cpu: {{ .OpenStackOperator.Deployment.Manager.Resources.Requests.CPU }}
105-
memory: {{ .OpenStackOperator.Deployment.Manager.Resources.Requests.Memory }}
100+
customRequests: replace_me
106101
securityContext:
107102
allowPrivilegeEscalation: false
108103
volumeMounts:
@@ -114,7 +109,7 @@ spec:
114109
- --upstream=http://127.0.0.1:8080/
115110
- --logtostderr=true
116111
- --v=0
117-
image: '{{ .OpenStackOperator.Deployment.KubeRbacProxy.Image }}'
112+
image: kube-rbac-proxy:replace_me
118113
name: kube-rbac-proxy
119114
ports:
120115
- containerPort: 8443
@@ -129,22 +124,7 @@ spec:
129124
memory: 64Mi
130125
securityContext:
131126
allowPrivilegeEscalation: false
132-
tolerations:
133-
{{- range .OpenStackOperator.Deployment.Tolerations }}
134-
- key: "{{ .Key }}"
135-
{{- if .Operator }}
136-
operator: "{{ .Operator }}"
137-
{{- end }}
138-
{{- if .Value }}
139-
value: "{{ .Value }}"
140-
{{- end }}
141-
{{- if .Effect }}
142-
effect: "{{ .Effect }}"
143-
{{- end }}
144-
{{- if .TolerationSeconds }}
145-
tolerationSeconds: {{ .TolerationSeconds }}
146-
{{- end }}
147-
{{- end }}
127+
customTolerations: replace_me
148128
securityContext:
149129
runAsNonRoot: true
150130
serviceAccountName: openstack-operator-controller-manager
@@ -459,4 +439,4 @@ webhooks:
459439
- UPDATE
460440
resources:
461441
- openstackdataplaneservices
462-
sideEffects: None
442+
sideEffects: None

0 commit comments

Comments
 (0)