-
Notifications
You must be signed in to change notification settings - Fork 51
Application Credential support #562
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/3c44c2e9d98444ca87af3730e212b6d5 ❌ openstack-k8s-operators-content-provider FAILURE in 13m 19s |
1248d00 to
986cba8
Compare
986cba8 to
0e9fbab
Compare
0e9fbab to
5ef9b35
Compare
|
Merge Failed. This change or one of its cross-repo dependencies was unable to be automatically merged with the current state of its repository. Please rebase the change and upload a new patchset. |
5ef9b35 to
58b3259
Compare
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: Deydra71 The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/104fe5a5a91847aa8699e49e6ff38586 ❌ openstack-k8s-operators-content-provider FAILURE in 5m 24s |
58b3259 to
91ccc4a
Compare
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/14c11287bb3c4b2eb11c0a1852de2677 ✔️ openstack-k8s-operators-content-provider SUCCESS in 1h 07m 39s |
5a13343 to
7023a52
Compare
7023a52 to
51b1e07
Compare
|
Merge Failed. This change or one of its cross-repo dependencies was unable to be automatically merged with the current state of its repository. Please rebase the change and upload a new patchset. |
51b1e07 to
270eedc
Compare
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/6f5e2842f28f4217964f5fa42be1ffdc ❌ openstack-k8s-operators-content-provider FAILURE in 6m 46s |
c83b83d to
a1291f6
Compare
|
Merge Failed. This change or one of its cross-repo dependencies was unable to be automatically merged with the current state of its repository. Please rebase the change and upload a new patchset. |
a1291f6 to
e1c24a9
Compare
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/2bc43c7c5bbe4081b69e68a21bf2dafa ❌ openstack-k8s-operators-content-provider FAILURE in 6m 27s |
Signed-off-by: Veronika Fisarova <vfisarov@redhat.com>
e1c24a9 to
ef7e3d2
Compare
Jira: OSPRH-16624
This PR adds end-to-end support for consuming Keystone ApplicationCredentials (AC) in the Cinder operator, enabling Cinder API pods to use AC-based authentication when available.
API changes:
Adds an optional authentication field to the Cinder API CR:
spec.auth.applicationCredentialSecret— name of the Secret that contains the Keystone Application Credential ID and Secret (AC_ID and AC_SECRET).Reconcile behavior:
Reads
spec.auth.applicationCredentialSecretAttempts to load AC_ID / AC_SECRET from the referenced Secret (via the Keystone helper).
If the secret is missing or incomplete, it falls back to password authentication (the AppCred auth is optional, not an error).
Once the AC Secret is ready with valid AC_ID and AC_SECRET fields, templates AC credentials into Cinder configuration
Computes hash of Secret contents and stores in configVars to trigger rolling updates when credentials rotate
Depends-On: openstack-k8s-operators/keystone-operator#567