Nomaxscale

[aedan]

Removed maxscale from the picture and updated all openstack components to use a primary and secondary connection to talk to the DB

[LukeRepko]

@aedan Can you rebase when you have some time? Maxscale removal is already merged. Also, I'm not seeing anything here that makes use of that secondary connection, is that still a WIP?

[aedan]

the secondary goes into the docs. because it has to pull the secret during install
like this:

helm upgrade --install keystone ./keystone
--namespace=openstack
--wait
--timeout 120m
-f /opt/genestack/helm-configs/keystone/keystone-helm-overrides.yaml
--set endpoints.identity.auth.admin.password="$(kubectl --namespace openstack get secret keystone-admin -o jsonpath='{.data.password}' | base64 -d)"
--set endpoints.oslo_db.auth.admin.password="$(kubectl --namespace openstack get secret mariadb -o jsonpath='{.data.root-password}' | base64 -d)"
--set endpoints.oslo_db.auth.keystone.password="$(kubectl --namespace openstack get secret keystone-db-password -o jsonpath='{.data.password}' | base64 -d)"
--set endpoints.oslo_messaging.auth.admin.password="$(kubectl --namespace openstack get secret rabbitmq-default-user -o jsonpath='{.data.password}' | base64 -d)"
--set conf.keystone.database.slave_connection="mysql+pymysql://keystone:$(kubectl --namespace openstack get secret keystone-db-password -o jsonpath='{.data.password}' | base64 -d)@mariadb-galera-secondary.openstack.svc.cluster.local:3306/keystone"
--set endpoints.oslo_messaging.auth.keystone.password="$(kubectl --namespace openstack get secret keystone-rabbitmq-password -o jsonpath='{.data.password}' | base64 -d)"
--post-renderer /opt/genestack/kustomize/kustomize.sh
--post-renderer-args keystone/base

[aedan]

Most of the maxscale removal is already in main. Closing and will add what is still needed in a different PR.