<commit_before>apiVersion: "openstack.stable.sap.cc/v1"
kind: "OpenstackSeed"
metadata:
  name: octavia-seed
  labels:
    app: {{ template "fullname" . }}
    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
    release: "{{ .Release.Name }}"
    heritage: "{{ .Release.Service }}"
spec:
  requires:
  - {{ default .Release.Namespace .Values.global.keystoneNamespace }}/keystone-seed
  - monsoon3/domain-monsoon3-seed

  roles:
  - name: loadbalancer_admin
  - name: loadbalancer_viewer
  - name: loadbalancer_poolmemberadmin
  - name: cloud_network_admin
  - name: cloud_keymanager_admin

  services:
  - name: octavia
    type: load-balancer
    description: Openstack Loadbalancer as a Service
    endpoints:
    - interface: admin
      region: '{{.Values.global.region}}'
      url: 'http://{{include "octavia_api_endpoint_host_admin" .}}:{{.Values.api_port_internal}}'
    - interface: public
      region: '{{.Values.global.region}}'
      url: 'https://{{include "octavia_api_endpoint_host_public" .}}'
    - interface: internal
      region: '{{.Values.global.region}}'
      url: 'http://{{include "octavia_api_endpoint_host_internal" .}}:{{.Values.api_port_internal}}'

  domains:
  - name: Default
    users:
    - name: octavia
      description: 'Octavia Service'
      password: {{ .Values.global.octavia_service_password | default (tuple . .Release.Name | include "identity.password_for_user") | replace "$" "$$" | quote }}
      role_assignments:
      - project: service
        role: service
      - project: service
        role: cloud_network_admin
      - project: service
        role: cloud_keymanager_admin
    - name: admin
      role_assignments:
      - domain: Default
        role: cloud_network_admin
      - project: admin
        role: cloud_network_admin
    groups:
    - name: administrators
      role_assignments:
      - domain: Default
        role: cloud_network_admin
      - project: admin
        role: cloud_network_admin

  - name: monsoon3
    groups:
    - name: MONSOON3_DOMAIN_ADMINS
      role_assignments:
      - project: cc-demo
        role: loadbalancer_admin
    - name: MONSOON3_API_SUPPORT
      role_assignments:
      - project: api_support
        role: loadbalancer_admin
      - domain: monsoon3
        role: loadbalancer_admin
        inherited: true
      - domain: monsoon3
        role: loadbalancer_pooladmin
        inherited: true
    - name: MONSOON3_COMPUTE_SUPPORT
      role_assignments:
      - project: compute_support
        role: loadbalancer_admin
      - domain: monsoon3
        role: sharedfilesystem_viewer
        inherited: true
      - domain: monsoon3
        role: loadbalancer_pooladmin
        inherited: true
    - name: MONSOON3_NETWORK_SUPPORT
      role_assignments:
      - project: network_support
        role: loadbalancer_admin
      - domain: monsoon3
        role: sharedfilesystem_viewer
        inherited: true
      - domain: monsoon3
        role: loadbalancer_pooladmin
        inherited: true
    - name: MONSOON3_STORAGE_SUPPORT
      role_assignments:
      - project: storage_support
        role: loadbalancer_admin
      - domain: monsoon3
        role: loadbalancer_admin
        inherited: true
      - domain: monsoon3
        role: loadbalancer_pooladmin
        inherited: true
    - name: MONSOON3_SERVICE_DESK
      role_assignments:
      - project: service_desk
        role: loadbalancer_admin
      - domain: monsoon3
        role: sharedfilesystem_viewer
        inherited: true
      - domain: monsoon3
        role: loadbalancer_pooladmin
        inherited: true        <commit_msg>[octavia] seed: Remove role assignments except for Default domain<commit_after>apiVersion: "openstack.stable.sap.cc/v1"
kind: "OpenstackSeed"
metadata:
  name: octavia-seed
  labels:
    app: {{ template "fullname" . }}
    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
    release: "{{ .Release.Name }}"
    heritage: "{{ .Release.Service }}"
spec:
  requires:
  - {{ default .Release.Namespace .Values.global.keystoneNamespace }}/keystone-seed
  - monsoon3/domain-monsoon3-seed

  roles:
  - name: loadbalancer_admin
  - name: loadbalancer_viewer
  - name: loadbalancer_poolmemberadmin
  - name: cloud_network_admin
  - name: cloud_keymanager_admin

  services:
  - name: octavia
    type: load-balancer
    description: Openstack Loadbalancer as a Service
    endpoints:
    - interface: admin
      region: '{{.Values.global.region}}'
      url: 'http://{{include "octavia_api_endpoint_host_admin" .}}:{{.Values.api_port_internal}}'
    - interface: public
      region: '{{.Values.global.region}}'
      url: 'https://{{include "octavia_api_endpoint_host_public" .}}'
    - interface: internal
      region: '{{.Values.global.region}}'
      url: 'http://{{include "octavia_api_endpoint_host_internal" .}}:{{.Values.api_port_internal}}'

  domains:
  - name: Default
    users:
    - name: octavia
      description: 'Octavia Service'
      password: {{ .Values.global.octavia_service_password | default (tuple . .Release.Name | include "identity.password_for_user") | replace "$" "$$" | quote }}
      role_assignments:
      - project: service
        role: service
      - project: service
        role: cloud_network_admin
      - project: service
        role: cloud_keymanager_admin

# all other group role assignments are granted by neutron seed, because
# network_* is functionally equivalent to loadbalancer_*, due to the Octavia
# policy

{'fraction_non_alphanumeric': 0.10409806073911453, 'fraction_numerical': 0.004207830223197951, 'mean_word_length': 2.7599724896836313, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 2, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5705010', 'n_tokens_mistral': 1685, 'n_tokens_neox': 1660, 'n_words': 362}