Add SSL verification for rgw to keystone communication

hemanthnakkina commented 3 months ago

Add Certificate Transfer relation to metadata. Update the rgw config flag rgw_keystone_verify_ssl based on keystone auth url scheme. Copy the CA certificate received via certificate_transfer interface to /etc/ssl/certs and run update-ca-certificates. microceph snap services will pick the certificates from /etc/ssl/certs

Updated unit tests to add the new relation and add more test cases. Removed the assertions where the number of configs are updated since the function configure_rgw_configs can be called multiple times based on how the events are triggered from juju.

Type of change

[x] New feature (non-breaking change which adds functionality)

How Has This Been Tested?

Manual Testing with sunbeam (Failed with error https://pastebin.canonical.com/p/td5prPYPrW/) Unit testing

Contributor's Checklist

Please check that you have:

[x] self-reviewed the code in this PR.
[x] added code comments, particularly in hard-to-understand areas.
[x] updated the user documentation with corresponding changes.
[x] added tests to verify effectiveness of this change.

hemanthnakkina commented 3 months ago

https://review.opendev.org/c/openstack/sunbeam-charms/+/923374 fixes the issues in Juju cluster test and Juju Upgrade test. Lets wait for the above PR to get merged.

hemanthnakkina commented 3 months ago

https://review.opendev.org/c/openstack/sunbeam-charms/+/923374 fixes the issues in Juju cluster test and Juju Upgrade test. Lets wait for the above PR to get merged.

PR merged and retriggered all CI jobs

canonical / charm-microceph