name: barbican-k8s
display-name: Barbican
summary: Openstack Key Manager service
description: |
  Barbican is the OpenStack Key Manager service.
  It provides secure storage, provisioning and management of secret data.
  This includes keying material such as Symmetric Keys, Asymmetric Keys, Certificates and raw binary data.
maintainer: Openstack Charmers <openstack-charmers@lists.ubuntu.com>
source: https://opendev.org/openstack/charm-barbican-k8s
issues: https://bugs.launchpad.net/charm-barbican-k8s

bases:
  - name: ubuntu
    channel: 22.04/stable

assumes:
  - k8s-api
  - juju >= 3.1
tags:
  - openstack
  - secrets
  - misc

requires:
  ingress-internal:
    interface: ingress
    limit: 1
    optional: true
  ingress-public:
    interface: ingress
    limit: 1
  database:
    interface: mysql_client
    limit: 1
  identity-service:
    interface: keystone
  identity-ops:
    interface: keystone-resources
    optional: true
  amqp:
    interface: rabbitmq
  vault-kv:
    interface: vault-kv
    limit: 1

peers:
  peers:
    interface: barbican-peer

containers:
  barbican-api:
    resource: barbican-api-image
  barbican-worker:
    resource: barbican-worker-image

resources:
  barbican-api-image:
    type: oci-image
    description: OCI image for OpenStack Barbican API
    upstream-source: ghcr.io/canonical/barbican-consolidated:2023.2
  barbican-worker-image:
    type: oci-image
    description: OCI image for OpenStack Barbican worker
    upstream-source: ghcr.io/canonical/barbican-consolidated:2023.2