Add missing tls params to nova custom service

It's required with tls enabled, [1] already enabled tls by default so need to include the missing certs. The issue should be visible once dataplane-operator is updated[2] or tlsEnabled flag is explicitly set in the nodeset. [1] openstack-k8s-operators/dataplane-operator#754 [2] openstack-k8s-operators/openstack-operator#732
karelyatin · Apr 8, 2024 · 7a722d2 · 7a722d2
1 parent dd24288
commit 7a722d2
Show file tree

Hide file tree

Showing 4 changed files with 32 additions and 0 deletions.
diff --git a/va/hci/edpm-post-ceph/nova_ceph.yaml b/va/hci/edpm-post-ceph/nova_ceph.yaml
@@ -18,3 +18,11 @@ spec:
     - nova-cell1-compute-config
     - nova-migration-ssh-key
   playbook: osp.edpm.nova
+  tlsCert:
+    contents:
+      - dnsnames
+      - ips
+    networks:
+      - ctlplane
+    issuer: osp-rootca-issuer-internal
+  caCerts: combined-ca-bundle
diff --git a/va/nfv/ovs-dpdk-sriov/edpm/nova_ovs_dpdk_sriov.yaml b/va/nfv/ovs-dpdk-sriov/edpm/nova_ovs_dpdk_sriov.yaml
@@ -26,3 +26,11 @@ spec:
     - nova-cell1-compute-config
     - nova-migration-ssh-key
   playbook: osp.edpm.nova
+  tlsCert:
+    contents:
+      - dnsnames
+      - ips
+    networks:
+      - ctlplane
+    issuer: osp-rootca-issuer-internal
+  caCerts: combined-ca-bundle
diff --git a/va/nfv/ovs-dpdk/edpm/nova_ovs_dpdk.yaml b/va/nfv/ovs-dpdk/edpm/nova_ovs_dpdk.yaml
@@ -18,3 +18,11 @@ spec:
     - nova-cell1-compute-config
     - nova-migration-ssh-key
   playbook: osp.edpm.nova
+  tlsCert:
+    contents:
+      - dnsnames
+      - ips
+    networks:
+      - ctlplane
+    issuer: osp-rootca-issuer-internal
+  caCerts: combined-ca-bundle
diff --git a/va/nfv/sriov/edpm/nova_sriov.yaml b/va/nfv/sriov/edpm/nova_sriov.yaml
@@ -26,3 +26,11 @@ spec:
     - nova-cell1-compute-config
     - nova-migration-ssh-key
   playbook: osp.edpm.nova
+  tlsCert:
+    contents:
+      - dnsnames
+      - ips
+    networks:
+      - ctlplane
+    issuer: osp-rootca-issuer-internal
+  caCerts: combined-ca-bundle