apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: openstack
patches:
- patch: |-
    apiVersion: core.openstack.org/v1beta1
    kind: OpenStackControlPlane
    metadata:
      name: unused
    spec:
      cinder:
        template:
          cinderAPI:
            customServiceConfig: |
              [DEFAULT]
              api_paste_config = "/etc/cinder/custom/api-paste.ini"
          extraMounts:
          - name: audit-config-files
            region: r1
            extraVol:
            - mounts:
              - mountPath: /etc/cinder/custom
                name: audit
                readOnly: true
              volumes:
              - name: audit
                secret:
                  secretName: cinder-audit-config-secret
      glance:
        template:

          customServiceConfig: |
            [DEFAULT]
            enabled_backends = default_backend:swift
            [glance_store]
            default_backend = default_backend
            [default_backend]
            swift_store_create_container_on_put = True
            swift_store_auth_version = 3
            swift_store_auth_address = {{ .KeystoneInternalURL }}
            swift_store_endpoint_type = internalURL
            swift_store_user = service:glance
            swift_store_key = {{ .ServicePassword }}
            [paste_deploy]
            config_file = /etc/glance/custom/glance-api-paste.ini
          extraMounts:
          - name: audit-config-files
            region: r1
            extraVol:
            - mounts:
              - mountPath: /etc/glance/custom
                name: audit
                readOnly: true
              volumes:
              - name: audit
                secret:
                  secretName: glance-audit-config-secret
      keystone:
        template:
          customServiceConfig: |
            [DEFAULT]
            notification_opt_out=""
            [oslo_messaging_notifications]
            driver = messagingv2
            driver = log
      neutron:
        template:
          customServiceConfig: |
            [DEFAULT]
            api_paste_config = /etc/neutron/custom/api-paste.ini
          extraMounts:
          - extraVol:
            - mounts:
              - mountPath: /etc/neutron/custom
                name: audit
                readOnly: true
              volumes:
              - name: audit
                secret:
                  secretName: neutron-audit-config-secret
  target:
    kind: OpenStackControlPlane