metadata.yaml

# Copyright 2021 Canonical Ltd.
# See LICENSE file for licensing details.

name: keystone-k8s
summary: OpenStack identity service
maintainer: Openstack Charmers <openstack-charmers@lists.ubuntu.com>
description: |
  Keystone is an OpenStack project that provides Identity, Token, Catalog and
  Policy services for use specifically by projects in the OpenStack family. It
  implements OpenStack's Identity API.
version: 3
bases:
  - name: ubuntu
    channel: 20.04/stable
tags:
  - openstack
  - identity
  - misc

provides:
  identity-service:
    interface: keystone
  identity-credentials:
    interface: keystone-credentials

requires:
  shared-db:
    interface: mysql_datastore
    limit: 1
  ingress-internal:
    interface: ingress
    limit: 1
  ingress-public:
    interface: ingress
    optional: true
    limit: 1

peers:
  peers:
    interface: keystone-peer

storage:
  fernet-keys:
    type: filesystem
    description: |
      Persistent storage for the location of fernet tokens
    minimum-size: 5M

  credential-keys:
    type: filesystem
    description: |
      Persistent storage for the location of credential keys
    minimum-size: 5M

containers:
  # The primary container that runs the keystone services
  keystone:
    resource: keystone-image
    mounts:
      - storage: fernet-keys
        # The fernet keys used for generated tokens are stored here. With a
        # mounted storage option, the fernet keys are persisted across
        # container restarts.
        location: /etc/keystone/fernet-keys/

      - storage: credential-keys
        # The credential keys used for generated credentials are stored here.
        # With a mounted storage option, the credential keys are persisted
        # across container restarts.
        location: /etc/keystone/credential-keys/

resources:
  keystone-image:
    type: oci-image
    description: Kolla based docker image for keystone
    upstream-source: docker.io/kolla/ubuntu-binary-keystone:xena