charmcraft.yaml

name: notary-k8s
type: charm
title: Notary
summary: Certificate management made easy

description: |
  Notary helps you manage certificate requests and their associated certificates.
  Charmed Notary helps you automatically receive CSRs and distribute certificates to the applications
  you've deployed in your model.

links:
  documentation: https://discourse.charmhub.io/t/gocert-docs-index/15216
  issues: 
    - https://github.com/canonical/notary-k8s-operator/issues
  source: 
    - https://github.com/canonical/notary-k8s-operator
  website: 
    - https://charmhub.io/notary-k8s
  
base: ubuntu@24.04
platforms:
  amd64:

provides:
  certificates:
    interface: tls-certificates
  metrics:
    interface: prometheus_scrape
  grafana-dashboard:
    interface: grafana_dashboard
  send-ca-cert:
    interface: certificate_transfer
    description: |
      Send our CA certificate so clients can trust the CA by means of forming a relation.

requires:
  access-certificates:
    limit: 1
    interface: tls-certificates
  logging:
    interface: loki_push_api
  ingress:
    interface: ingress
    limit: 1
  tracing:
    interface: tracing
    limit: 1

containers:
  notary:
    resource: notary-image
    mounts:
    - storage: config
      location: /etc/notary/config
    - storage: database
      location: /var/lib/notary/database

storage:
  config:
    type: filesystem
    minimum-size: 5M
  database:
    type: filesystem
    minimum-size: 1G

resources:
  notary-image:
    type: oci-image
    description: OCI image for the Notary application
    upstream-source: ghcr.io/canonical/notary:0.0.3

parts:
  charm:
    source: .
    plugin: charm
    charm-requirements:
      - requirements.txt
    build-packages:
      - libffi-dev
      - libssl-dev
      - pkg-config
    build-snaps:
      - astral-uv
      - rustup
    override-build: |
      rustup default stable
      uv export --frozen --no-dev -o requirements.txt
      craftctl default