Application Credential support#610
Application Credential support#610openshift-merge-bot[bot] merged 1 commit intoopenstack-k8s-operators:mainfrom
Conversation
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/d17db98c48cf4b168dc923febc5a85fa ❌ openstack-k8s-operators-content-provider FAILURE in 7m 17s |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/27fec0fb087b4313b44ea6ecd371cea9 ❌ openstack-k8s-operators-content-provider FAILURE in 6m 45s |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/cde2e04603834b228d365c71d968df3e ❌ openstack-k8s-operators-content-provider FAILURE in 8m 38s |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/d361bd95bf444cae8e21987c4946ff2e ❌ openstack-k8s-operators-content-provider FAILURE in 8m 27s |
|
/recheck |
|
/retest |
|
Please squash all 7 commits to a single one. |
xek
force-pushed
the
zdpr
branch
2 times, most recently
from
3ec0025 to
9b39afc
Compare
|
/retest |
xek
force-pushed
the
zdpr
branch
2 times, most recently
from
e3ddd59 to
745eccc
Compare
|
Merge Failed. This change or one of its cross-repo dependencies was unable to be automatically merged with the current state of its repository. Please rebase the change and upload a new patchset. |
|
/retest |
rabi
left a comment
rabi
left a comment
There was a problem hiding this comment.
few nits otherwise look good.
|
/retest |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/53bf2dd43a6e4fc295d1ad278bf4dcb0 ✔️ openstack-k8s-operators-content-provider SUCCESS in 40m 11s |
|
recheck |
Co-authored-by: Cursor <cursoragent@cursor.com>
|
/lgtm |
|
/approve |
|
/approve |
1 similar comment
|
/approve |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: afaranha, fmount, lmiccini, stuggi The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
openshift-merge-bot
bot
merged commit 97ee6ba
into
openstack-k8s-operators:main
9 participants
Jira: OSPRH-20520
This PR adds end-to-end support for consuming Keystone ApplicationCredentials (AC) in the Heat operator, enabling Heat pods to use AC-based authentication when available.
API changes:
Adds an optional authentication field to the Heat CR:
spec.auth.applicationCredentialSecret — name of the Secret that contains the Keystone Application Credential ID and Secret (AC_ID and AC_SECRET).
Reconcile behavior:
Reads spec.auth.applicationCredentialSecret
Attempts to load AC_ID / AC_SECRET from the referenced Secret (via the Keystone helper). If the secret is missing or incomplete, it falls back to password authentication (the AppCred auth is optional, not an error).
Once the AC Secret is ready with valid AC_ID and AC_SECRET fields, templates AC credentials into Heat configuration
Computes hash of Secret contents and stores in configVars to trigger rolling updates when credentials rotate
Depends-On: openstack-k8s-operators/keystone-operator#567