Currently the CSP has to (in addition to running and maintaining the cluster-api management cluster) manage and provide one namespace per tenant with the following Resources:
basic:
namespace
IaaS Credentials (for the capi controller)
IaaS Credentials in the OCCM-format
Clusterresourceset
extended:
ServiceAccount/kubeconfig + RBAC (tenant should only see tenants namespace)
Clusterclass and ClusterAddons
OR
clusterstack
These resources could be bundled in a helmchart, as input a clouds.yaml that can be gathered from openstack can be a starting point
Currently the CSP has to (in addition to running and maintaining the cluster-api management cluster) manage and provide one namespace per tenant with the following Resources:
basic:
extended:
These resources could be bundled in a helmchart, as input a clouds.yaml that can be gathered from openstack can be a starting point