openstack-k8s-operators / openstack-operator

Meta Operator for OpenStack
https://openstack-k8s-operators.github.io/openstack-operator/
Apache License 2.0
27 stars 76 forks source link

Enable TLS for glanceAPI Edge instances #802

Closed fmount closed 4 months ago

fmount commented 4 months ago

When a glanceAPI Edge instance is deployed, the glance-operator creates an internal SVC, but the public one is skipped (because these instances are not exposed outside). However, we're currently not able to enable TLS because the EnsureEndpoint function is skipped due to the different size of the generated Overrides that is compared with the service list (svcs.Items). This patch fixes the current behavior and generates an internal override only for an Edge API instance type: by doing this we're able to properly execute the EnsureEndpoint function and generate both key and cert, referenced by the Edge API.

Depends-On: https://github.com/openstack-k8s-operators/glance-operator/pull/535 Jira: OSPRH-6720

fmount commented 4 months ago

/hold beta freeze

fmount commented 4 months ago

/unhold

openshift-ci[bot] commented 4 months ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: fmount, stuggi

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/openstack-k8s-operators/openstack-operator/blob/main/OWNERS)~~ [stuggi] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
fmount commented 4 months ago

/test openstack-operator-build-deploy-kuttl