chore: use vendir to vendor
diff --git a/charts/barbican/requirements.lock b/charts/barbican/requirements.lock
index 2cde33b..b9146d7 100644
--- a/charts/barbican/requirements.lock
+++ b/charts/barbican/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:53.842158604Z"
+generated: "2023-11-15T23:08:24.10384684Z"
diff --git a/charts/cinder/requirements.lock b/charts/cinder/requirements.lock
index 50b3284..67c5213 100644
--- a/charts/cinder/requirements.lock
+++ b/charts/cinder/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:42.017065377Z"
+generated: "2023-11-22T20:14:58.592049716Z"
diff --git a/charts/designate/requirements.lock b/charts/designate/requirements.lock
index ec2023d..b454b93 100644
--- a/charts/designate/requirements.lock
+++ b/charts/designate/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:40.214157201Z"
+generated: "2023-11-22T20:14:54.685042515Z"
diff --git a/charts/glance/requirements.lock b/charts/glance/requirements.lock
index 7d88177..1005916 100644
--- a/charts/glance/requirements.lock
+++ b/charts/glance/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:53.27887454Z"
+generated: "2023-11-09T15:11:39.317300744Z"
diff --git a/charts/heat/requirements.lock b/charts/heat/requirements.lock
index 6aa1b95..4057c92 100644
--- a/charts/heat/requirements.lock
+++ b/charts/heat/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:46.189897202Z"
+generated: "2023-11-20T16:59:14.214540302Z"
diff --git a/charts/horizon/requirements.lock b/charts/horizon/requirements.lock
index 96a7ef9..d605ea5 100644
--- a/charts/horizon/requirements.lock
+++ b/charts/horizon/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:47.86542723Z"
+generated: "2023-11-22T20:15:05.83595607Z"
diff --git a/charts/keystone/requirements.lock b/charts/keystone/requirements.lock
index 8b4f2de..a2fbbec 100644
--- a/charts/keystone/requirements.lock
+++ b/charts/keystone/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:51.975725275Z"
+generated: "2023-11-15T23:04:58.660312058Z"
diff --git a/charts/libvirt/charts/helm-toolkit/Chart.yaml b/charts/libvirt/charts/helm-toolkit/Chart.yaml
index 1ee9758..fd3f461 100644
--- a/charts/libvirt/charts/helm-toolkit/Chart.yaml
+++ b/charts/libvirt/charts/helm-toolkit/Chart.yaml
@@ -9,4 +9,4 @@
sources:
- https://opendev.org/openstack/openstack-helm-infra
- https://opendev.org/openstack/openstack-helm
-version: 0.2.55
+version: 0.2.56
diff --git a/charts/libvirt/charts/helm-toolkit/requirements.lock b/charts/libvirt/charts/helm-toolkit/requirements.lock
index be213ec..474adbc 100644
--- a/charts/libvirt/charts/helm-toolkit/requirements.lock
+++ b/charts/libvirt/charts/helm-toolkit/requirements.lock
@@ -1,3 +1,3 @@
dependencies: []
digest: sha256:643d5437104296e21d906ecb15b2c96ad278f20cfc4af53b12bb6069bd853726
-generated: "2023-11-02T02:34:47.093652653Z"
+generated: "2023-11-29T02:39:33.120856137Z"
diff --git a/charts/libvirt/charts/helm-toolkit/templates/snippets/_rgw_s3_bucket_user_env_vars_rook.tpl b/charts/libvirt/charts/helm-toolkit/templates/snippets/_rgw_s3_bucket_user_env_vars_rook.tpl
new file mode 100644
index 0000000..08521e0
--- /dev/null
+++ b/charts/libvirt/charts/helm-toolkit/templates/snippets/_rgw_s3_bucket_user_env_vars_rook.tpl
@@ -0,0 +1,28 @@
+{{/*
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/}}
+
+{{- define "helm-toolkit.snippets.rgw_s3_bucket_user_env_vars_rook" }}
+{{- range $s3Bucket := .Values.storage.s3.buckets }}
+- name: {{ printf "%s_S3_ACCESS_KEY" ($s3Bucket.client | replace "-" "_" | upper) }}
+ valueFrom:
+ secretKeyRef:
+ name: {{ $s3Bucket.name }}
+ key: AWS_ACCESS_KEY_ID
+- name: {{ printf "%s_S3_SECRET_KEY" ($s3Bucket.client | replace "-" "_" | upper) }}
+ valueFrom:
+ secretKeyRef:
+ name: {{ $s3Bucket.name }}
+ key: AWS_SECRET_ACCESS_KEY
+{{- end }}
+{{- end }}
diff --git a/charts/libvirt/requirements.lock b/charts/libvirt/requirements.lock
index d5b9d70..41e4298 100644
--- a/charts/libvirt/requirements.lock
+++ b/charts/libvirt/requirements.lock
@@ -1,6 +1,6 @@
dependencies:
- name: helm-toolkit
repository: file://../helm-toolkit
- version: 0.2.55
-digest: sha256:fe6ad5ce9983b4435c76e650bb0050609eb56467a4429aa844e50d954d2e91c8
-generated: "2023-11-02T02:35:03.387000272Z"
+ version: 0.2.56
+digest: sha256:2341734ff37eda298acb943a81ff603ee8edd5cfcbe655dba5943b485b64f9e3
+generated: "2023-11-29T02:39:38.485927956Z"
diff --git a/charts/magnum/requirements.lock b/charts/magnum/requirements.lock
index ecce7ce..f10f451 100644
--- a/charts/magnum/requirements.lock
+++ b/charts/magnum/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:41.084827427Z"
+generated: "2023-11-22T20:15:14.57130025Z"
diff --git a/charts/manila/requirements.lock b/charts/manila/requirements.lock
index 3b009c5..8d56ee1 100644
--- a/charts/manila/requirements.lock
+++ b/charts/manila/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:51.492216862Z"
+generated: "2023-11-22T20:15:09.875210224Z"
diff --git a/charts/neutron/Chart.yaml b/charts/neutron/Chart.yaml
index 587c56b..d230623 100644
--- a/charts/neutron/Chart.yaml
+++ b/charts/neutron/Chart.yaml
@@ -9,4 +9,4 @@
sources:
- https://opendev.org/openstack/neutron
- https://opendev.org/openstack/openstack-helm
-version: 0.3.24
+version: 0.3.29
diff --git a/charts/neutron/requirements.lock b/charts/neutron/requirements.lock
index 1d7f269..9cc2f76 100644
--- a/charts/neutron/requirements.lock
+++ b/charts/neutron/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:49.227438894Z"
+generated: "2023-11-22T20:14:55.619219382Z"
diff --git a/charts/nova/requirements.lock b/charts/nova/requirements.lock
index b8c018f..5c187eb 100644
--- a/charts/nova/requirements.lock
+++ b/charts/nova/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:49.993650956Z"
+generated: "2023-11-03T00:16:38.441631616Z"
diff --git a/charts/octavia/requirements.lock b/charts/octavia/requirements.lock
index 4e12aee..f24caac 100644
--- a/charts/octavia/requirements.lock
+++ b/charts/octavia/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:55.046445907Z"
+generated: "2023-11-22T20:15:15.673945271Z"
diff --git a/charts/openvswitch/charts/helm-toolkit/Chart.yaml b/charts/openvswitch/charts/helm-toolkit/Chart.yaml
index 1ee9758..fd3f461 100644
--- a/charts/openvswitch/charts/helm-toolkit/Chart.yaml
+++ b/charts/openvswitch/charts/helm-toolkit/Chart.yaml
@@ -9,4 +9,4 @@
sources:
- https://opendev.org/openstack/openstack-helm-infra
- https://opendev.org/openstack/openstack-helm
-version: 0.2.55
+version: 0.2.56
diff --git a/charts/openvswitch/charts/helm-toolkit/requirements.lock b/charts/openvswitch/charts/helm-toolkit/requirements.lock
index be213ec..474adbc 100644
--- a/charts/openvswitch/charts/helm-toolkit/requirements.lock
+++ b/charts/openvswitch/charts/helm-toolkit/requirements.lock
@@ -1,3 +1,3 @@
dependencies: []
digest: sha256:643d5437104296e21d906ecb15b2c96ad278f20cfc4af53b12bb6069bd853726
-generated: "2023-11-02T02:34:47.093652653Z"
+generated: "2023-11-29T02:39:33.120856137Z"
diff --git a/charts/openvswitch/charts/helm-toolkit/templates/snippets/_rgw_s3_bucket_user_env_vars_rook.tpl b/charts/openvswitch/charts/helm-toolkit/templates/snippets/_rgw_s3_bucket_user_env_vars_rook.tpl
new file mode 100644
index 0000000..08521e0
--- /dev/null
+++ b/charts/openvswitch/charts/helm-toolkit/templates/snippets/_rgw_s3_bucket_user_env_vars_rook.tpl
@@ -0,0 +1,28 @@
+{{/*
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/}}
+
+{{- define "helm-toolkit.snippets.rgw_s3_bucket_user_env_vars_rook" }}
+{{- range $s3Bucket := .Values.storage.s3.buckets }}
+- name: {{ printf "%s_S3_ACCESS_KEY" ($s3Bucket.client | replace "-" "_" | upper) }}
+ valueFrom:
+ secretKeyRef:
+ name: {{ $s3Bucket.name }}
+ key: AWS_ACCESS_KEY_ID
+- name: {{ printf "%s_S3_SECRET_KEY" ($s3Bucket.client | replace "-" "_" | upper) }}
+ valueFrom:
+ secretKeyRef:
+ name: {{ $s3Bucket.name }}
+ key: AWS_SECRET_ACCESS_KEY
+{{- end }}
+{{- end }}
diff --git a/charts/openvswitch/requirements.lock b/charts/openvswitch/requirements.lock
index b9613ad..a9a0bd4 100644
--- a/charts/openvswitch/requirements.lock
+++ b/charts/openvswitch/requirements.lock
@@ -1,6 +1,6 @@
dependencies:
- name: helm-toolkit
repository: file://../helm-toolkit
- version: 0.2.55
-digest: sha256:fe6ad5ce9983b4435c76e650bb0050609eb56467a4429aa844e50d954d2e91c8
-generated: "2023-11-02T02:35:07.681193516Z"
+ version: 0.2.56
+digest: sha256:2341734ff37eda298acb943a81ff603ee8edd5cfcbe655dba5943b485b64f9e3
+generated: "2023-11-29T02:39:43.736465441Z"
diff --git a/charts/ovn/charts/helm-toolkit/Chart.yaml b/charts/ovn/charts/helm-toolkit/Chart.yaml
index 1ee9758..fd3f461 100644
--- a/charts/ovn/charts/helm-toolkit/Chart.yaml
+++ b/charts/ovn/charts/helm-toolkit/Chart.yaml
@@ -9,4 +9,4 @@
sources:
- https://opendev.org/openstack/openstack-helm-infra
- https://opendev.org/openstack/openstack-helm
-version: 0.2.55
+version: 0.2.56
diff --git a/charts/ovn/charts/helm-toolkit/requirements.lock b/charts/ovn/charts/helm-toolkit/requirements.lock
index be213ec..474adbc 100644
--- a/charts/ovn/charts/helm-toolkit/requirements.lock
+++ b/charts/ovn/charts/helm-toolkit/requirements.lock
@@ -1,3 +1,3 @@
dependencies: []
digest: sha256:643d5437104296e21d906ecb15b2c96ad278f20cfc4af53b12bb6069bd853726
-generated: "2023-11-02T02:34:47.093652653Z"
+generated: "2023-11-29T02:39:33.120856137Z"
diff --git a/charts/ovn/charts/helm-toolkit/templates/snippets/_rgw_s3_bucket_user_env_vars_rook.tpl b/charts/ovn/charts/helm-toolkit/templates/snippets/_rgw_s3_bucket_user_env_vars_rook.tpl
new file mode 100644
index 0000000..08521e0
--- /dev/null
+++ b/charts/ovn/charts/helm-toolkit/templates/snippets/_rgw_s3_bucket_user_env_vars_rook.tpl
@@ -0,0 +1,28 @@
+{{/*
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/}}
+
+{{- define "helm-toolkit.snippets.rgw_s3_bucket_user_env_vars_rook" }}
+{{- range $s3Bucket := .Values.storage.s3.buckets }}
+- name: {{ printf "%s_S3_ACCESS_KEY" ($s3Bucket.client | replace "-" "_" | upper) }}
+ valueFrom:
+ secretKeyRef:
+ name: {{ $s3Bucket.name }}
+ key: AWS_ACCESS_KEY_ID
+- name: {{ printf "%s_S3_SECRET_KEY" ($s3Bucket.client | replace "-" "_" | upper) }}
+ valueFrom:
+ secretKeyRef:
+ name: {{ $s3Bucket.name }}
+ key: AWS_SECRET_ACCESS_KEY
+{{- end }}
+{{- end }}
diff --git a/charts/ovn/requirements.lock b/charts/ovn/requirements.lock
index b5f1c68..0e9719e 100644
--- a/charts/ovn/requirements.lock
+++ b/charts/ovn/requirements.lock
@@ -1,6 +1,6 @@
dependencies:
- name: helm-toolkit
repository: file://../helm-toolkit
- version: 0.2.55
-digest: sha256:fe6ad5ce9983b4435c76e650bb0050609eb56467a4429aa844e50d954d2e91c8
-generated: "2023-11-02T02:35:05.704748825Z"
+ version: 0.2.56
+digest: sha256:2341734ff37eda298acb943a81ff603ee8edd5cfcbe655dba5943b485b64f9e3
+generated: "2023-11-29T02:39:38.134714677Z"
diff --git a/charts/placement/requirements.lock b/charts/placement/requirements.lock
index 4593a4a..1984052 100644
--- a/charts/placement/requirements.lock
+++ b/charts/placement/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:47.434673508Z"
+generated: "2023-11-22T20:15:04.838002001Z"
diff --git a/charts/placement/values_overrides/2023.1-ubuntu_focal.yaml b/charts/placement/values_overrides/2023.1-ubuntu_focal.yaml
new file mode 100644
index 0000000..b5804f9
--- /dev/null
+++ b/charts/placement/values_overrides/2023.1-ubuntu_focal.yaml
@@ -0,0 +1,19 @@
+---
+images:
+ pull_policy: IfNotPresent
+ tags:
+ placement: "docker.io/openstackhelm/placement:2023.1-ubuntu_focal"
+ ks_user: "docker.io/openstackhelm/heat:2023.1-ubuntu_focal"
+ ks_service: "docker.io/openstackhelm/heat:2023.1-ubuntu_focal"
+ ks_endpoints: "docker.io/openstackhelm/heat:2023.1-ubuntu_focal"
+ db_init: "docker.io/openstackhelm/heat:2023.1-ubuntu_focal"
+ db_drop: "docker.io/openstackhelm/heat:2023.1-ubuntu_focal"
+ placement_db_sync: "docker.io/openstackhelm/placement:2023.1-ubuntu_focal"
+ dep_check: "quay.io/airshipit/kubernetes-entrypoint:v1.0.0"
+ image_repo_sync: "docker.io/docker:17.07.0"
+dependencies:
+ static:
+ db_sync:
+ jobs:
+ - placement-db-init
+...
diff --git a/charts/placement/values_overrides/2023.1-ubuntu_jammy.yaml b/charts/placement/values_overrides/2023.1-ubuntu_jammy.yaml
new file mode 100644
index 0000000..45fd7fa
--- /dev/null
+++ b/charts/placement/values_overrides/2023.1-ubuntu_jammy.yaml
@@ -0,0 +1,19 @@
+---
+images:
+ pull_policy: IfNotPresent
+ tags:
+ placement: "docker.io/openstackhelm/placement:2023.1-ubuntu_jammy"
+ ks_user: "docker.io/openstackhelm/heat:2023.1-ubuntu_jammy"
+ ks_service: "docker.io/openstackhelm/heat:2023.1-ubuntu_jammy"
+ ks_endpoints: "docker.io/openstackhelm/heat:2023.1-ubuntu_jammy"
+ db_init: "docker.io/openstackhelm/heat:2023.1-ubuntu_jammy"
+ db_drop: "docker.io/openstackhelm/heat:2023.1-ubuntu_jammy"
+ placement_db_sync: "docker.io/openstackhelm/placement:2023.1-ubuntu_jammy"
+ dep_check: "quay.io/airshipit/kubernetes-entrypoint:v1.0.0"
+ image_repo_sync: "docker.io/docker:17.07.0"
+dependencies:
+ static:
+ db_sync:
+ jobs:
+ - placement-db-init
+...
diff --git a/charts/placement/values_overrides/2023.2-ubuntu_jammy.yaml b/charts/placement/values_overrides/2023.2-ubuntu_jammy.yaml
new file mode 100644
index 0000000..bbb7391
--- /dev/null
+++ b/charts/placement/values_overrides/2023.2-ubuntu_jammy.yaml
@@ -0,0 +1,19 @@
+---
+images:
+ pull_policy: IfNotPresent
+ tags:
+ placement: "docker.io/openstackhelm/placement:2023.2-ubuntu_jammy"
+ ks_user: "docker.io/openstackhelm/heat:2023.2-ubuntu_jammy"
+ ks_service: "docker.io/openstackhelm/heat:2023.2-ubuntu_jammy"
+ ks_endpoints: "docker.io/openstackhelm/heat:2023.2-ubuntu_jammy"
+ db_init: "docker.io/openstackhelm/heat:2023.2-ubuntu_jammy"
+ db_drop: "docker.io/openstackhelm/heat:2023.2-ubuntu_jammy"
+ placement_db_sync: "docker.io/openstackhelm/placement:2023.2-ubuntu_jammy"
+ dep_check: "quay.io/airshipit/kubernetes-entrypoint:v1.0.0"
+ image_repo_sync: "docker.io/docker:17.07.0"
+dependencies:
+ static:
+ db_sync:
+ jobs:
+ - placement-db-init
+...
diff --git a/charts/placement/values_overrides/apparmor.yaml b/charts/placement/values_overrides/apparmor.yaml
new file mode 100644
index 0000000..ee883ac
--- /dev/null
+++ b/charts/placement/values_overrides/apparmor.yaml
@@ -0,0 +1,8 @@
+---
+pod:
+ mandatory_access_control:
+ type: apparmor
+ placement-api:
+ placement-api: runtime/default
+ init: runtime/default
+...
diff --git a/charts/placement/values_overrides/netpol.yaml b/charts/placement/values_overrides/netpol.yaml
new file mode 100644
index 0000000..84557be
--- /dev/null
+++ b/charts/placement/values_overrides/netpol.yaml
@@ -0,0 +1,20 @@
+---
+manifests:
+ network_policy: true
+network_policy:
+ placement:
+ egress:
+ - {}
+ ingress:
+ - from:
+ - podSelector:
+ matchLabels:
+ application: nova
+ ports:
+ - protocol: TCP
+ port: 8778
+ - protocol: TCP
+ port: 80
+ - protocol: TCP
+ port: 8080
+...
diff --git a/charts/placement/values_overrides/tls-offloading.yaml b/charts/placement/values_overrides/tls-offloading.yaml
new file mode 100644
index 0000000..ff97285
--- /dev/null
+++ b/charts/placement/values_overrides/tls-offloading.yaml
@@ -0,0 +1,12 @@
+---
+endpoints:
+ identity:
+ auth:
+ admin:
+ cacert: /etc/ssl/certs/openstack-helm.crt
+ placement:
+ cacert: /etc/ssl/certs/openstack-helm.crt
+
+tls:
+ identity: true
+...
diff --git a/charts/placement/values_overrides/tls.yaml b/charts/placement/values_overrides/tls.yaml
new file mode 100644
index 0000000..514b660
--- /dev/null
+++ b/charts/placement/values_overrides/tls.yaml
@@ -0,0 +1,80 @@
+---
+network:
+ api:
+ ingress:
+ annotations:
+ nginx.ingress.kubernetes.io/backend-protocol: "https"
+conf:
+ software:
+ apache2:
+ a2enmod:
+ - ssl
+ placement:
+ keystone_authtoken:
+ cafile: /etc/placement/certs/ca.crt
+ wsgi_placement: |
+ Listen 0.0.0.0:{{ tuple "placement" "service" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
+ LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
+ LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" proxy
+ SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded
+ CustomLog /dev/stdout combined env=!forwarded
+ CustomLog /dev/stdout proxy env=forwarded
+ <VirtualHost *:{{ tuple "placement" "service" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}>
+ ServerName {{ printf "%s.%s.svc.%s" "placement-api" .Release.Namespace .Values.endpoints.cluster_domain_suffix }}
+ WSGIDaemonProcess placement-api processes=4 threads=1 user=placement group=placement display-name=%{GROUP}
+ WSGIProcessGroup placement-api
+ WSGIScriptAlias / /var/www/cgi-bin/placement/placement-api
+ WSGIApplicationGroup %{GLOBAL}
+ WSGIPassAuthorization On
+ <IfVersion >= 2.4>
+ ErrorLogFormat "%{cu}t %M"
+ </IfVersion>
+ ErrorLog /dev/stdout
+ SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded
+ CustomLog /dev/stdout combined env=!forwarded
+ CustomLog /dev/stdout proxy env=forwarded
+
+ SSLEngine on
+ SSLCertificateFile /etc/placement/certs/tls.crt
+ SSLCertificateKeyFile /etc/placement/certs/tls.key
+ SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
+ SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
+ SSLHonorCipherOrder on
+ </VirtualHost>
+ Alias /placement /var/www/cgi-bin/placement/placement-api
+ <Location /placement>
+ SetHandler wsgi-script
+ Options +ExecCGI
+ WSGIProcessGroup placement-api
+ WSGIApplicationGroup %{GLOBAL}
+ WSGIPassAuthorization On
+ </Location>
+endpoints:
+ identity:
+ auth:
+ admin:
+ cacert: /etc/ssl/certs/openstack-helm.crt
+ placement:
+ cacert: /etc/ssl/certs/openstack-helm.crt
+ scheme:
+ default: https
+ port:
+ api:
+ default: 443
+ placement:
+ host_fqdn_override:
+ default:
+ tls:
+ secretName: placement-tls-api
+ issuerRef:
+ name: ca-issuer
+ kind: ClusterIssuer
+ scheme:
+ default: https
+ service: https
+ port:
+ api:
+ public: 443
+manifests:
+ certificates: true
+...
diff --git a/charts/placement/values_overrides/victoria-ubuntu_focal.yaml b/charts/placement/values_overrides/victoria-ubuntu_focal.yaml
new file mode 100644
index 0000000..55a4693
--- /dev/null
+++ b/charts/placement/values_overrides/victoria-ubuntu_focal.yaml
@@ -0,0 +1,19 @@
+---
+images:
+ pull_policy: IfNotPresent
+ tags:
+ placement: "docker.io/openstackhelm/placement:victoria-ubuntu_focal"
+ ks_user: "docker.io/openstackhelm/heat:victoria-ubuntu_focal"
+ ks_service: "docker.io/openstackhelm/heat:victoria-ubuntu_focal"
+ ks_endpoints: "docker.io/openstackhelm/heat:victoria-ubuntu_focal"
+ db_init: "docker.io/openstackhelm/heat:victoria-ubuntu_focal"
+ db_drop: "docker.io/openstackhelm/heat:victoria-ubuntu_focal"
+ placement_db_sync: "docker.io/openstackhelm/placement:victoria-ubuntu_focal"
+ dep_check: "quay.io/airshipit/kubernetes-entrypoint:v1.0.0"
+ image_repo_sync: "docker.io/docker:17.07.0"
+dependencies:
+ static:
+ db_sync:
+ jobs:
+ - placement-db-init
+...
diff --git a/charts/placement/values_overrides/wallaby-ubuntu_focal.yaml b/charts/placement/values_overrides/wallaby-ubuntu_focal.yaml
new file mode 100644
index 0000000..47cf660
--- /dev/null
+++ b/charts/placement/values_overrides/wallaby-ubuntu_focal.yaml
@@ -0,0 +1,19 @@
+---
+images:
+ pull_policy: IfNotPresent
+ tags:
+ placement: "docker.io/openstackhelm/placement:wallaby-ubuntu_focal"
+ ks_user: "docker.io/openstackhelm/heat:wallaby-ubuntu_focal"
+ ks_service: "docker.io/openstackhelm/heat:wallaby-ubuntu_focal"
+ ks_endpoints: "docker.io/openstackhelm/heat:wallaby-ubuntu_focal"
+ db_init: "docker.io/openstackhelm/heat:wallaby-ubuntu_focal"
+ db_drop: "docker.io/openstackhelm/heat:wallaby-ubuntu_focal"
+ placement_db_sync: "docker.io/openstackhelm/placement:wallaby-ubuntu_focal"
+ dep_check: "quay.io/airshipit/kubernetes-entrypoint:v1.0.0"
+ image_repo_sync: "docker.io/docker:17.07.0"
+dependencies:
+ static:
+ db_sync:
+ jobs:
+ - placement-db-init
+...
diff --git a/charts/placement/values_overrides/xena-ubuntu_focal.yaml b/charts/placement/values_overrides/xena-ubuntu_focal.yaml
new file mode 100644
index 0000000..68baf2c
--- /dev/null
+++ b/charts/placement/values_overrides/xena-ubuntu_focal.yaml
@@ -0,0 +1,19 @@
+---
+images:
+ pull_policy: IfNotPresent
+ tags:
+ placement: "docker.io/openstackhelm/placement:xena-ubuntu_focal"
+ ks_user: "docker.io/openstackhelm/heat:xena-ubuntu_focal"
+ ks_service: "docker.io/openstackhelm/heat:xena-ubuntu_focal"
+ ks_endpoints: "docker.io/openstackhelm/heat:xena-ubuntu_focal"
+ db_init: "docker.io/openstackhelm/heat:xena-ubuntu_focal"
+ db_drop: "docker.io/openstackhelm/heat:xena-ubuntu_focal"
+ placement_db_sync: "docker.io/openstackhelm/placement:xena-ubuntu_focal"
+ dep_check: "quay.io/airshipit/kubernetes-entrypoint:v1.0.0"
+ image_repo_sync: "docker.io/docker:17.07.0"
+dependencies:
+ static:
+ db_sync:
+ jobs:
+ - placement-db-init
+...
diff --git a/charts/placement/values_overrides/yoga-ubuntu_focal.yaml b/charts/placement/values_overrides/yoga-ubuntu_focal.yaml
new file mode 100644
index 0000000..46fdb90
--- /dev/null
+++ b/charts/placement/values_overrides/yoga-ubuntu_focal.yaml
@@ -0,0 +1,19 @@
+---
+images:
+ pull_policy: IfNotPresent
+ tags:
+ placement: "docker.io/openstackhelm/placement:yoga-ubuntu_focal"
+ ks_user: "docker.io/openstackhelm/heat:yoga-ubuntu_focal"
+ ks_service: "docker.io/openstackhelm/heat:yoga-ubuntu_focal"
+ ks_endpoints: "docker.io/openstackhelm/heat:yoga-ubuntu_focal"
+ db_init: "docker.io/openstackhelm/heat:yoga-ubuntu_focal"
+ db_drop: "docker.io/openstackhelm/heat:yoga-ubuntu_focal"
+ placement_db_sync: "docker.io/openstackhelm/placement:yoga-ubuntu_focal"
+ dep_check: "quay.io/airshipit/kubernetes-entrypoint:v1.0.0"
+ image_repo_sync: "docker.io/docker:17.07.0"
+dependencies:
+ static:
+ db_sync:
+ jobs:
+ - placement-db-init
+...
diff --git a/charts/placement/values_overrides/zed-ubuntu_focal.yaml b/charts/placement/values_overrides/zed-ubuntu_focal.yaml
new file mode 100644
index 0000000..901bc96
--- /dev/null
+++ b/charts/placement/values_overrides/zed-ubuntu_focal.yaml
@@ -0,0 +1,19 @@
+---
+images:
+ pull_policy: IfNotPresent
+ tags:
+ placement: "docker.io/openstackhelm/placement:zed-ubuntu_focal"
+ ks_user: "docker.io/openstackhelm/heat:zed-ubuntu_focal"
+ ks_service: "docker.io/openstackhelm/heat:zed-ubuntu_focal"
+ ks_endpoints: "docker.io/openstackhelm/heat:zed-ubuntu_focal"
+ db_init: "docker.io/openstackhelm/heat:zed-ubuntu_focal"
+ db_drop: "docker.io/openstackhelm/heat:zed-ubuntu_focal"
+ placement_db_sync: "docker.io/openstackhelm/placement:zed-ubuntu_focal"
+ dep_check: "quay.io/airshipit/kubernetes-entrypoint:v1.0.0"
+ image_repo_sync: "docker.io/docker:17.07.0"
+dependencies:
+ static:
+ db_sync:
+ jobs:
+ - placement-db-init
+...
diff --git a/charts/placement/values_overrides/zed-ubuntu_jammy.yaml b/charts/placement/values_overrides/zed-ubuntu_jammy.yaml
new file mode 100644
index 0000000..debe2b0
--- /dev/null
+++ b/charts/placement/values_overrides/zed-ubuntu_jammy.yaml
@@ -0,0 +1,19 @@
+---
+images:
+ pull_policy: IfNotPresent
+ tags:
+ placement: "docker.io/openstackhelm/placement:zed-ubuntu_jammy"
+ ks_user: "docker.io/openstackhelm/heat:zed-ubuntu_jammy"
+ ks_service: "docker.io/openstackhelm/heat:zed-ubuntu_jammy"
+ ks_endpoints: "docker.io/openstackhelm/heat:zed-ubuntu_jammy"
+ db_init: "docker.io/openstackhelm/heat:zed-ubuntu_jammy"
+ db_drop: "docker.io/openstackhelm/heat:zed-ubuntu_jammy"
+ placement_db_sync: "docker.io/openstackhelm/placement:zed-ubuntu_jammy"
+ dep_check: "quay.io/airshipit/kubernetes-entrypoint:v1.0.0"
+ image_repo_sync: "docker.io/docker:17.07.0"
+dependencies:
+ static:
+ db_sync:
+ jobs:
+ - placement-db-init
+...
diff --git a/charts/senlin/requirements.lock b/charts/senlin/requirements.lock
index 3ca3b38..d43449c 100644
--- a/charts/senlin/requirements.lock
+++ b/charts/senlin/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:45.132338353Z"
+generated: "2023-11-22T20:15:02.349435177Z"
diff --git a/charts/tempest/requirements.lock b/charts/tempest/requirements.lock
index 4c65511..cc2292f 100644
--- a/charts/tempest/requirements.lock
+++ b/charts/tempest/requirements.lock
@@ -3,4 +3,4 @@
repository: file://../../openstack-helm-infra/helm-toolkit
version: 0.2.55
digest: sha256:f25556fa4f0b285a96cbf853e72555c04e65772daf0ffa6b518321e5e249f5ca
-generated: "2023-10-27T21:53:47.115677738Z"
+generated: "2023-11-22T20:15:05.422266295Z"