bundle: kubernetes

applications:
  traefik:
    charm: ch:traefik-k8s
    channel: 1.0/candidate
    base: ubuntu@20.04
    scale: 1
    trust: true
    options:
      kubernetes-service-annotations: metallb.universe.tf/address-pool=public
  mysql:
    charm: ch:mysql-k8s
    channel: 8.0/stable
    base: ubuntu@22.04
    scale: 1
    trust: true
    options:
      profile-limit-memory: 2560
      experimental-max-connections: 150
  ldap-server:
    charm: ch:ldap-test-fixture-k8s
    channel: edge
    base: ubuntu@22.04
    scale: 1
  rabbitmq:
    charm: ch:rabbitmq-k8s
    channel: 3.12/edge
    base: ubuntu@24.04
    scale: 1
    trust: true
    options:
      minimum-replicas: 1
  keystone:
    {% if keystone_k8s is defined and keystone_k8s is sameas true -%}
    charm: ../../../keystone-k8s.charm
    {% else -%}
    charm: ch:keystone-k8s
    channel: 2024.1/edge
    {% endif -%}
    base: ubuntu@24.04
    scale: 1
    trust: true
    storage:
      fernet-keys: 5M
      credential-keys: 5M
    resources:
      keystone-image: ghcr.io/canonical/keystone:2024.1
  designate-bind:
    {% if designate_bind_k8s is defined and designate_bind_k8s is sameas true -%}
    charm: ../../../designate-bind-k8s.charm
    {% else -%}
    charm: ch:designate-bind-k8s
    channel: 9/edge
    {% endif -%}
    base: ubuntu@24.04
    scale: 1
    trust: false
    resources:
      designate-bind-image: ubuntu/bind9:9.18-22.04_beta
  designate:
    {% if designate_k8s is defined and designate_k8s is sameas true -%}
    charm: ../../../designate-k8s.charm
    {% else -%}
    charm: ch:designate-k8s
    channel: 2024.1/edge
    {% endif -%}
    base: ubuntu@24.04
    scale: 1
    trust: false
    resources:
      designate-image: ghcr.io/canonical/designate-consolidated:2024.1
  keystone-ldap:
    {% if keystone_ldap_k8s is defined and keystone_ldap_k8s is sameas true -%}
    charm: ../../../keystone-ldap-k8s.charm
    {% else -%}
    charm: ch:keystone-ldap-k8s
    channel: 2024.1/edge
    {% endif -%}
    base: ubuntu@24.04
    scale: 1
  openstack-exporter:
    {% if openstack_exporter_k8s is defined and openstack_exporter_k8s is sameas true -%}
    charm: ../../../openstack-exporter-k8s.charm
    {% else -%}
    charm: ch:openstack-exporter-k8s
    channel: 2024.1/edge
    {% endif -%}
    base: ubuntu@24.04
    scale: 1
    resources:
      openstack-exporter-image: ghcr.io/canonical/openstack-exporter:1.7.0-3be9ddb
  horizon:
    {% if horizon_k8s is defined and horizon_k8s is sameas true -%}
    charm: ../../../horizon-k8s.charm
    {% else -%}
    charm: ch:horizon-k8s
    channel: 2024.1/edge
    {% endif -%}
    base: ubuntu@24.04
    scale: 1
    trust: true
    resources:
      horizon-image: ghcr.io/canonical/horizon:2024.1
  masakari:
    {% if masakari_k8s is defined and masakari_k8s is sameas true -%}
    charm: ../../../masakari-k8s.charm
    {% else -%}
    charm: ch:masakari-k8s
    channel: 2024.1/edge
    {% endif -%}
    base: ubuntu@24.04
    scale: 1
    trust: true
    resources:
      masakari-image: ghcr.io/canonical/masakari-consolidated:2024.1
  consul:
    charm: consul-k8s
    channel: 1.19/edge
    base: ubuntu@24.04
    scale: 1
    trust: true
    resources:
      consul-image: ghcr.io/canonical/consul:1.19.2

relations:
- - mysql:database
  - keystone:database
- - traefik:ingress
  - keystone:ingress-internal

- - mysql:database
  - designate:database
- - rabbitmq:amqp
  - designate:amqp
- - keystone:identity-service
  - designate:identity-service
- - traefik:ingress
  - designate:ingress-internal
- - designate-bind:dns-backend
  - designate:dns-backend
- - keystone:send-ca-cert
  - designate:receive-ca-cert

- - keystone:domain-config
  - keystone-ldap:domain-config

- - keystone:identity-ops
  - openstack-exporter:identity-ops

- - mysql:database
  - horizon:database
- - keystone:identity-credentials
  - horizon:identity-credentials
- - traefik:ingress
  - horizon:ingress-internal
- - keystone:send-ca-cert
  - horizon:receive-ca-cert

- - mysql:database
  - masakari:database
- - rabbitmq:amqp
  - masakari:amqp
- - keystone:identity-service
  - masakari:identity-service
- - traefik:ingress
  - masakari:ingress-internal

- - masakari:consul-management
  - consul:consul-cluster