204fb83a27
This change adds SAML2 support through the use of a new keystone SAML integrator charm (keystone-saml-k8s). Needed changes have also been made in the keystone charm to make use of the new relation. A new option has also been added to keystone-k8s through which a secret can be specified which should contain the x509 certificate an the corresponding key from which it was derived, used to generate the keystone SP metadata file. Change-Id: Id9b6ab2a51891ac378a2cb406dbe3a456bc24fc4 Signed-off-by: Gabriel Adrian Samfira <gsamfira@cloudbasesolutions.com>
horizon-k8s
Description
horizon-k8s is an operator to manage the OpenStack dashboard service on a Kubernetes based environment.
Usage
Deployment
horizon-k8s is deployed using below command:
juju deploy horizon-k8s horizon --trust
Now connect the horizon operator to existing database and Keystone operators:
juju relate mysql:database horizon:database
juju relate keystone:identity-credentials horizon:identity-credentials
Configuration
This section covers common and/or important configuration options. See file
config.yaml for the full list of options, along with their descriptions and
default values. See the Juju documentation for details
on configuring applications.
Actions
This section covers Juju actions supported by the charm.
Actions allow specific operations to be performed on a per-unit basis. To
display action descriptions run juju actions horizon. If the charm is not
deployed then see file actions.yaml.
Relations
horizon-k8s requires the following relations:
database: To connect to MySQL
identity-credentials: To register cloud users in Keystone
ingress-internal: To expose service on underlying internal network
ingress-public: To expose service on public network
OCI Images
The charm by default uses ghcr.io/canonical/horizon:2025.1 image.
Contributing
Please see the Juju SDK docs for guidelines on enhancements to this charm following best practice guidelines, and CONTRIBUTING.md for developer guidance.
Bugs
Please report bugs on Launchpad.