prepare_openstack.sh

#!/bin/bash
. ~/.capi-settings
export OS_CLOUD=$(yq eval '.OPENSTACK_CLOUD' ~/cluster-defaults/clusterctl.yaml)

#install Openstack CLI
sudo apt-get install --no-install-recommends --no-install-suggests -y python3-openstackclient python3-octaviaclient
# fix bug 1876317
sudo patch -p2 -N -d /usr/lib/python3/dist-packages/keystoneauth1 < /tmp/fix-keystoneauth-plugins-unversioned.diff

# convenience
echo "export OS_CLOUD=\"$OS_CLOUD\"" >> $HOME/.bash_aliases
echo "export CLIFF_FIT_WIDTH=1" >> $HOME/.bash_aliases

# Determine project ID and inject into cloud.conf
PROJECTID=$(openstack application credential show "${PREFIX}-appcred" -f value -c project_id)
echo "Set tenant-id to $PROJECTID for $OS_CLOUD"
if ! grep '^tenant.id' ~/cluster-defaults/cloud.conf >/dev/null; then
  sed -i "/^application.credential.secret/atenant-id=$PROJECTID"  ~/cluster-defaults/cloud.conf
fi

# Determine cacert and inject into cloud.conf and cluster-template.yaml
CACERT=$(print-cloud.py | yq eval '.clouds."'"$OS_CLOUD"'".cacert // "null"' -)
if test "$CACERT" != "null"; then
  CADEST="/etc/ssl/certs/$(basename "$CACERT")" # path for OCCM
  echo "Set ca-file to $CADEST for $OS_CLOUD"
  sed -i "/^application.credential.secret/aca-file=$CADEST" ~/cluster-defaults/cloud.conf
  inject_custom_ca.sh ~/cluster-defaults/cluster-template.yaml "$CADEST"
fi