Add scheduler seed

openstack/cortex/.helmignore

@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj

openstack/cortex/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: owner-info
+  repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
+  version: 1.0.0
+digest: sha256:ca7c19b16632950e17c13dc4e5dbda8c7006ad9178f511fefe25bc57e69ad033
+generated: "2024-09-05T09:55:44.009371+02:00"

openstack/cortex/Chart.yaml

@@ -0,0 +1,8 @@
+apiVersion: v2
+description: Helm chart for cortex
+name: scheduler
+version: 0.0.1
+dependencies:
+  - name: owner-info
+    repository: oci://keppel.eu-de-1.cloud.sap/ccloud-helm
+    version: '>= 0.0.0'

openstack/cortex/README.md

@@ -0,0 +1,5 @@
+# Cortex seed project
+
+Contains project seed for generating a project on CC.
+
+- Example project seed: [link](https://github.com/sapcc/helm-charts/blob/master/openstack/domain-seeds/templates/domain-ccadmin-seed.yaml)

openstack/cortex/ci/test-values.yaml

@@ -0,0 +1 @@
+technicalUser: foouser

openstack/cortex/templates/seed.yaml

@@ -0,0 +1,38 @@
+{{- $vbase  := .Values.global.vaultBaseURL | required "missing value for .Values.global.vaultBaseURL" -}}
+{{- $region := .Values.global.region       | required "missing value for .Values.global.region"       -}}
+
+apiVersion: "openstack.stable.sap.cc/v1"
+kind: "OpenstackSeed"
+metadata:
+  name: scheduler-seed
+spec:
+  requires:
+  - {{ .Values.global.keystoneNamespace }}/keystone-seed
+
+  domains:
+  - name: Default
+    users:
+    - name: scheduler_service
+      description: "Scheduler service user for CC. This user was automatically generated by a user seed: https://github.com/sapcc/helm-charts/tree/master/openstack/cortex/" 
+      password: {{ printf "%s/%s/cortex/keystone-user/password" $vbase $region | quote }}
+      role_assignments:
+      - project: scheduler
+        role:    service
+
+  - name: ccadmin
+    projects:
+    - name: scheduler
+      description: "Scheduler for CC. This project was automatically generated by a project seed: https://github.com/sapcc/helm-charts/tree/master/openstack/cortex/"
+      role_assignments:
+      - user: scheduler_service@Default
+        role: member
+      - user: scheduler_service@Default
+        role: reader
+      - user: scheduler_service@Default
+        role: cloud_compute_admin
+      - user: scheduler_service@Default
+        role: cloud_identity_viewer
+      - user: scheduler_service@Default
+        role: cloud_volume_admin
+      - user: scheduler_service@Default
+        role: cloud_network_admin

openstack/cortex/values.yaml

@@ -0,0 +1,5 @@
+owner-info:
+  support-group: containers
+  service: scheduler
+  support-group: workload-mgmt
+  helm-chart-url: https://github.com/sapcc/helm-charts/tree/master/openstack/cortex