diff --git a/blazar/templates/secret-keystone.yaml b/blazar/templates/secret-keystone.yaml index 4932a81964..d92641d699 100644 --- a/blazar/templates/secret-keystone.yaml +++ b/blazar/templates/secret-keystone.yaml @@ -14,7 +14,7 @@ limitations under the License. {{- if .Values.manifests.secret_keystone }} {{- $envAll := . }} -{{- range $userClass, $val := $envAll.Values.endpoints.identity.auth }} +{{- range $key1, $userClass := tuple "admin" "blazar" "service" "test" }} {{- $secretName := index $envAll.Values.secrets.identity $userClass }} --- apiVersion: v1 diff --git a/blazar/values.yaml b/blazar/values.yaml index c737c0f471..aff22924a2 100644 --- a/blazar/values.yaml +++ b/blazar/values.yaml @@ -61,8 +61,8 @@ network: nginx.ingress.kubernetes.io/rewrite-target: / external_policy_local: false node_port: - enabled: true - port: 30778 + enabled: false + port: 30788 manager: ingress: public: true @@ -73,8 +73,8 @@ network: nginx.ingress.kubernetes.io/rewrite-target: / external_policy_local: false node_port: - enabled: true - port: 30779 + enabled: false + port: 30789 dependencies: dynamic: @@ -212,7 +212,7 @@ endpoints: user_domain_name: default project_domain_name: default blazar: - role: admin,service + role: admin region_name: RegionOne username: blazar password: password @@ -351,9 +351,30 @@ endpoints: default: 80 internal: 8774 public: 80 - network: - public_network_id: "public" - floating_network_id: "public" + # NOTE(tp6510): these endpoints allow for things like DNS lookups and ingress + # They are using to enable the Egress K8s network policy. + kube_dns: + namespace: kube-system + name: kubernetes-dns + hosts: + default: kube-dns + host_fqdn_override: + default: null + path: + default: null + scheme: http + port: + dns: + default: 53 + protocol: UDP + ingress: + namespace: null + name: ingress + hosts: + default: ingress + port: + ingress: + default: 80 pod: probes: diff --git a/releasenotes/notes/blazar-b7fc5016b49c8f59.yaml b/releasenotes/notes/blazar-b7fc5016b49c8f59.yaml new file mode 100644 index 0000000000..f7fe83f57d --- /dev/null +++ b/releasenotes/notes/blazar-b7fc5016b49c8f59.yaml @@ -0,0 +1,7 @@ +--- +blazar: + - | + Updating secret-keystone.yaml to make it similar to other services. Also updating + values.yaml to use unique ports and disabling node_port to make it similar to other + services, and for DNS lookups and ingress support. +...