Multi-namespace test by vakwetu · Pull Request #693 · openstack-k8s-operators/architecture

vakwetu · 2026-02-06T19:05:47Z

Add multi-namespace SKMO support

Configure the multi-namespace SKMO scenario with:

SKMO-specific control-plane kustomization for the central region
with barbican-keystone-listener pool_name and RabbitMQ memory
reduction (4Gi -> 2Gi) for compact clusters
Barbican keystone listener pool_name configuration for both
central (regionOne) and leaf (regionTwo) regions
Automation stages updated to reference SKMO-specific paths
Post-stage hook for populating cross-region transport URL
Wait conditions adjusted for parallel deployment
Correct keystone endpoint values for leaf region
CA trust configuration between central and leaf regions

Depends-On: openstack-k8s-operators/ci-framework#3684

softwarefactory-project-zuul · 2026-02-09T20:20:49Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/7722c30130f04cd09027a0b3923bf965

✔️ noop SUCCESS in 0s
❌ rhoso-architecture-validate-multi-namespace-skmo FAILURE in 3m 42s

softwarefactory-project-zuul · 2026-02-13T21:39:43Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/b7107ca6b6b9463abb5f2e6a1502b487

✔️ noop SUCCESS in 0s
❌ rhoso-architecture-validate-multi-namespace-skmo FAILURE in 3m 20s

softwarefactory-project-zuul · 2026-03-03T17:30:14Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/e80052b9e68442a1bc0f660dfab2f580

✔️ noop SUCCESS in 0s
❌ rhoso-architecture-validate-multi-namespace-skmo FAILURE in 4m 08s

softwarefactory-project-zuul · 2026-03-07T07:12:47Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/2b22395d6dcb4815b5a96d9bf4ea949f

✔️ noop SUCCESS in 0s
❌ rhoso-architecture-validate-multi-namespace-skmo FAILURE in 3m 26s

softwarefactory-project-zuul · 2026-03-10T20:51:48Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/f23489c0613b4c5e99b5b475942ddecb

✔️ noop SUCCESS in 0s
❌ rhoso-architecture-validate-multi-namespace-skmo FAILURE in 3m 52s

softwarefactory-project-zuul · 2026-03-10T21:57:32Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/bfaeb55987b540058763ff4030f3d2e0

✔️ noop SUCCESS in 0s
❌ rhoso-architecture-validate-multi-namespace-skmo FAILURE in 3m 50s

softwarefactory-project-zuul · 2026-03-10T22:15:29Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/b87d1836b34846cfa9469f80cb3c9327

✔️ noop SUCCESS in 0s
❌ rhoso-architecture-validate-multi-namespace-skmo FAILURE in 3m 13s

vakwetu · 2026-03-10T22:39:08Z

recheck

softwarefactory-project-zuul · 2026-03-10T22:43:09Z

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/0de17485fe724363b91a0ed36ca28816

✔️ noop SUCCESS in 0s
❌ rhoso-architecture-validate-multi-namespace-skmo FAILURE in 3m 24s

abays · 2026-03-23T10:34:43Z

+                # Allow src_file paths to traverse outside the stage path
+                _path = (source / f).resolve()


@fultonj What do you think about this? See https://github.com/openstack-k8s-operators/architecture/pull/693/changes#diff-4f3f430f947b93ad5cc30274ea06d33908e6c1af52012f9955e60f2429cd6550R86 to see how it's used.

Approving this sets precedence that .. traversal in src_file is an acceptable pattern.

I think that's OK. I think it's good to promote DRY instead of requiring the same files to be copied (avoid drift).

An alternative is to do a symlink, but I think that would make things more messy. Let's just be clear that there will be cases where from other VAs/DTs could be used.

abays · 2026-03-23T10:35:35Z

@vakwetu Would you prefer to merge this first, or do you want to just bundle everything together in #716 like it seems you are doing?

vakwetu · 2026-03-23T14:05:53Z

@abays I'm still testing #716 so I'd prefer to go ahead and merge this first. In 716, I was just getting a head start in case I got it all tested beforehand.

softwarefactory-project-zuul · 2026-03-23T16:05:06Z

This change depends on a change that failed to merge.

Change openstack-k8s-operators/ci-framework#3684 is needed.

fultonj

This looks like a good VA and a bulk of the work is done. I'd like to request some markdown files however.

There's no markdown files in this PR explaining what it is and what it does.

Please add them. Use this as an example:

https://github.com/openstack-k8s-operators/architecture/blob/main/examples/va/hci/README.md

Anyone should be able to clone this repo and use kustomize to build the example CRs by following the read README files. We shouldn't require people to read automation/vars/multi-namespace-skmo.yaml

fultonj · 2026-03-23T18:32:44Z

+                # Allow src_file paths to traverse outside the stage path
+                _path = (source / f).resolve()


Approving this sets precedence that .. traversal in src_file is an acceptable pattern.

I think that's OK. I think it's good to promote DRY instead of requiring the same files to be copied (avoid drift).

An alternative is to do a symlink, but I think that would make things more messy. Let's just be clear that there will be cases where from other VAs/DTs could be used.

Configure the multi-namespace SKMO scenario with: - SKMO-specific control-plane kustomization for the central region with barbican-keystone-listener pool_name and RabbitMQ memory reduction (4Gi -> 2Gi) for compact clusters - Barbican keystone listener pool_name configuration for both central (regionOne) and leaf (regionTwo) regions - Automation stages updated to reference SKMO-specific paths - Post-stage hooks for cross-region CA trust, transport URL setup, and barbican-keystone-listener configuration - Wait conditions adjusted for parallel deployment - Correct keystone endpoint values for leaf region - CA trust configuration between central and leaf regions - Symlink net-env for SKMO to reuse multi-namespace networking - README documenting the SKMO scenario and deployment stages Depends-On: openstack-k8s-operators/ci-framework#3684 Co-Authored-By: Claude <noreply@anthropic.com> Signed-off-by: Ade Lee <alee@redhat.com>

openshift-ci · 2026-03-23T21:20:03Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: vakwetu
Once this PR has been reviewed and has the lgtm label, please ask for approval from fultonj. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

softwarefactory-project-zuul · 2026-03-23T21:20:22Z

This change depends on a change that failed to merge.

Change openstack-k8s-operators/ci-framework#3684 is needed.

vakwetu · 2026-03-23T21:23:55Z

comments addressed. added wip till testing is complete

vakwetu · 2026-03-23T21:24:00Z

recheck

vakwetu · 2026-03-27T22:52:45Z

This PR was superseded by #716

openshift-ci bot requested review from cjeanner and karelyatin February 6, 2026 19:05

vakwetu added the do-not-merge/work-in-progress label Feb 6, 2026

vakwetu force-pushed the add-skmo branch 2 times, most recently from 57912c6 to 55539c5 Compare February 9, 2026 20:16

vakwetu force-pushed the add-skmo branch from 55539c5 to da48daf Compare February 13, 2026 21:35

vakwetu force-pushed the add-skmo branch from da48daf to c040f39 Compare March 3, 2026 17:25

vakwetu force-pushed the add-skmo branch from dd6fc5b to 61987cc Compare March 10, 2026 20:47

vakwetu changed the title ~~Initial multi-namespace test~~ Multi-namespace test Mar 10, 2026

openshift-ci bot removed the do-not-merge/work-in-progress label Mar 10, 2026

vakwetu force-pushed the add-skmo branch from 61987cc to 2ee7cdf Compare March 10, 2026 21:52

vakwetu force-pushed the add-skmo branch from 2ee7cdf to fda05db Compare March 10, 2026 22:12

vakwetu force-pushed the add-skmo branch from fda05db to d7f384a Compare March 10, 2026 22:55

vakwetu requested review from abays and fultonj March 12, 2026 14:19

vakwetu force-pushed the add-skmo branch from d7f384a to ca831c6 Compare March 12, 2026 15:08

abays reviewed Mar 12, 2026

View reviewed changes

Comment thread automation/vars/multi-namespace-skmo.yaml

abays mentioned this pull request Mar 16, 2026

Add federation to skmo #716

Merged

vakwetu force-pushed the add-skmo branch from ca831c6 to bb6f9e2 Compare March 20, 2026 18:56

abays reviewed Mar 23, 2026

View reviewed changes

vakwetu force-pushed the add-skmo branch from bb6f9e2 to 97520e2 Compare March 23, 2026 16:02

fultonj requested changes Mar 23, 2026

View reviewed changes

openshift-ci bot assigned fultonj Mar 23, 2026

vakwetu force-pushed the add-skmo branch from 97520e2 to 4e7c43b Compare March 23, 2026 21:19

vakwetu added the do-not-merge/work-in-progress label Mar 23, 2026

vakwetu closed this Mar 27, 2026

		# Allow src_file paths to traverse outside the stage path
		_path = (source / f).resolve()

Conversation

vakwetu commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

softwarefactory-project-zuul bot commented Feb 9, 2026

Uh oh!

softwarefactory-project-zuul bot commented Feb 13, 2026

Uh oh!

softwarefactory-project-zuul bot commented Mar 3, 2026

Uh oh!

softwarefactory-project-zuul bot commented Mar 7, 2026

Uh oh!

softwarefactory-project-zuul bot commented Mar 10, 2026

Uh oh!

softwarefactory-project-zuul bot commented Mar 10, 2026

Uh oh!

softwarefactory-project-zuul bot commented Mar 10, 2026

Uh oh!

vakwetu commented Mar 10, 2026

Uh oh!

softwarefactory-project-zuul bot commented Mar 10, 2026

Uh oh!

Uh oh!

abays Mar 23, 2026

Choose a reason for hiding this comment

Uh oh!

fultonj Mar 23, 2026

Choose a reason for hiding this comment

Uh oh!

abays commented Mar 23, 2026

Uh oh!

vakwetu commented Mar 23, 2026

Uh oh!

softwarefactory-project-zuul bot commented Mar 23, 2026

Uh oh!

fultonj left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

fultonj Mar 23, 2026

Choose a reason for hiding this comment

Uh oh!

openshift-ci bot commented Mar 23, 2026

Uh oh!

softwarefactory-project-zuul bot commented Mar 23, 2026

Uh oh!

vakwetu commented Mar 23, 2026

Uh oh!

vakwetu commented Mar 23, 2026

Uh oh!

vakwetu commented Mar 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

vakwetu commented Feb 6, 2026 •

edited

Loading