Keystone: Endpoint controller

PROJECT

@@ -16,6 +16,14 @@ resources:
   kind: Domain
   path: github.com/k-orc/openstack-resource-controller/api/v1alpha1
   version: v1alpha1
+- api:
+    crdVersion: v1
+    namespaced: true
+  domain: k-orc.cloud
+  group: openstack
+  kind: Endpoint
+  path: github.com/k-orc/openstack-resource-controller/api/v1alpha1
+  version: v1alpha1
 - api:
     crdVersion: v1
     namespaced: true

README.md

@@ -30,7 +30,7 @@ We welcome contributions of all kinds! Whether you’re fixing bugs, adding new
 * Fork the repository.
 * Create a new branch for your changes.
 * Setup a [local development environment](https://k-orc.cloud/development/quickstart/).
-* Read the [developers guide](https://k-orc.cloud/development/).
+* Read the [developers guide](https://k-orc.cloud/development/overview/).
 * Make your changes and test thoroughly.
 * Submit a pull request with a clear description of your changes.
 
@@ -68,6 +68,7 @@ kubectl delete -f $ORC_RELEASE
 | **controller**              | **1.x** | **2.x** | **main** |
 |:---------------------------:|:-------:|:-------:|:--------:|
 | domain                      |         |    ✔    |     ✔    |
+| endpoint                    |         |    ◐    |     ◐    |
 | flavor                      |         |    ✔    |     ✔    |
 | floating ip                 |         |    ◐    |     ◐    |
 | group                       |         |    ✔    |     ✔    |
@@ -87,14 +88,13 @@ kubectl delete -f $ORC_RELEASE
 | volume type                 |         |    ◐    |     ◐    |
 
 
-
 ✔: mostly implemented
 
 ◐: partially implemented
 
 ## License
 
-Copyright 2024.
+Copyright 2026.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.

api/v1alpha1/endpoint_types.go

@@ -0,0 +1,92 @@
+/*
+Copyright 2025 The ORC Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package v1alpha1
+
+// EndpointResourceSpec contains the desired state of the resource.
+type EndpointResourceSpec struct {
+	// description is a human-readable description for the resource.
+	// +kubebuilder:validation:MinLength:=1
+	// +kubebuilder:validation:MaxLength:=255
+	// +optional
+	Description *string `json:"description,omitempty"`
+
+	// enabled indicates whether the endpoint is enabled or not.
+	// +kubebuilder:default:=true
+	// +optional
+	Enabled *bool `json:"enabled,omitempty"`
+
+	// interface indicates the visibility of the endpoint.
+	// +kubebuilder:validation:Enum:=admin;internal;public
+	// +required
+	Interface string `json:"interface,omitempty"`
+
+	// url is the endpoint URL.
+	// +kubebuilder:validation:MaxLength=1024
+	// +required
+	URL string `json:"url"`
+
+	// serviceRef is a reference to the ORC Service which this resource is associated with.
+	// +required
+	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="serviceRef is immutable"
+	ServiceRef KubernetesNameRef `json:"serviceRef,omitempty"`
+}
+
+// EndpointFilter defines an existing resource by its properties
+// +kubebuilder:validation:MinProperties:=1
+type EndpointFilter struct {
+	// interface of the existing endpoint.
+	// +kubebuilder:validation:Enum:=admin;internal;public
+	// +optional
+	Interface string `json:"interface,omitempty"`
+
+	// serviceRef is a reference to the ORC Service which this resource is associated with.
+	// +optional
+	ServiceRef *KubernetesNameRef `json:"serviceRef,omitempty"`
+
+	// url is the URL of the existing endpoint.
+	// +kubebuilder:validation:MaxLength=1024
+	// +optional
+	URL string `json:"url,omitempty"`
+}
+
+// EndpointResourceStatus represents the observed state of the resource.
+type EndpointResourceStatus struct {
+	// description is a human-readable description for the resource.
+	// +kubebuilder:validation:MinLength:=1
+	// +kubebuilder:validation:MaxLength:=255
+	// +optional
+	Description string `json:"description,omitempty"`
+
+	// enabled indicates whether the endpoint is enabled or not.
+	// +optional
+	Enabled bool `json:"enabled,omitempty"`
+
+	// interface indicates the visibility of the endpoint.
+	// +kubebuilder:validation:MaxLength=128
+	// +optional
+	Interface string `json:"interface,omitempty"`
+
+	// url is the endpoint URL.
+	// +kubebuilder:validation:MaxLength=1024
+	// +optional
+	URL string `json:"url,omitempty"`
+
+	// serviceID is the ID of the Service to which the resource is associated.
+	// +kubebuilder:validation:MaxLength=1024
+	// +optional
+	ServiceID string `json:"serviceID,omitempty"`
+}

api/v1alpha1/port_types.go

@@ -36,6 +36,16 @@ type PortFilter struct {
 	// +optional
 	ProjectRef *KubernetesNameRef `json:"projectRef,omitempty"`
 
+	// adminStateUp is the administrative state of the port,
+	// which is up (true) or down (false).
+	// +optional
+	AdminStateUp *bool `json:"adminStateUp,omitempty"`
+
+	// macAddress is the MAC address of the port.
+	// +kubebuilder:validation:MaxLength=32
+	// +optional
+	MACAddress string `json:"macAddress,omitempty"`
+
 	FilterByNeutronTags `json:",inline"`
 }
 
@@ -126,6 +136,12 @@ type PortResourceSpec struct {
 	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="addresses is immutable"
 	Addresses []Address `json:"addresses,omitempty"`
 
+	// adminStateUp is the administrative state of the port,
+	// which is up (true) or down (false). The default value is true.
+	// +kubebuilder:default:=true
+	// +optional
+	AdminStateUp *bool `json:"adminStateUp,omitempty"`
+
 	// securityGroupRefs are the names of the security groups associated
 	// with this port.
 	// +kubebuilder:validation:MaxItems:=64
@@ -159,6 +175,16 @@ type PortResourceSpec struct {
 	// +optional
 	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="projectRef is immutable"
 	ProjectRef *KubernetesNameRef `json:"projectRef,omitempty"`
+
+	// macAddress is the MAC address of the port.
+	// +kubebuilder:validation:MaxLength=32
+	// +optional
+	MACAddress string `json:"macAddress,omitempty"`
+
+	// hostID is the ID of host where the port resides.
+	// +kubebuilder:validation:MaxLength=36
+	// +optional
+	HostID string `json:"hostID,omitempty"`
 }
 
 type PortResourceStatus struct {
@@ -251,6 +277,11 @@ type PortResourceStatus struct {
 	// +optional
 	PortSecurityEnabled *bool `json:"portSecurityEnabled,omitempty"`
 
+	// hostID is the ID of host where the port resides.
+	// +kubebuilder:validation:MaxLength=128
+	// +optional
+	HostID string `json:"hostID,omitempty"`
+
 	NeutronStatusMetadata `json:",inline"`
 }
 

api/v1alpha1/server_types.go

@@ -181,6 +181,34 @@ type ServerResourceSpec struct {
 	// +listType=set
 	// +optional
 	Tags []ServerTag `json:"tags,omitempty"`
+
+	// metadata is a list of metadata key-value pairs which will be set on the server.
+	// +kubebuilder:validation:MaxItems:=128
+	// +listType=atomic
+	// +optional
+	Metadata []ServerMetadata `json:"metadata,omitempty"`
+
+	// configDrive specifies whether to attach a config drive to the server.
+	// When true, configuration data will be available via a special drive
+	// instead of the metadata service.
+	// +optional
+	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="configDrive is immutable"
+	ConfigDrive *bool `json:"configDrive,omitempty"`
+}
+
+// ServerMetadata represents a key-value pair for server metadata.
+type ServerMetadata struct {
+	// key is the metadata key.
+	// +kubebuilder:validation:MinLength:=1
+	// +kubebuilder:validation:MaxLength:=255
+	// +required
+	Key string `json:"key,omitempty"`
+
+	// value is the metadata value.
+	// +kubebuilder:validation:MaxLength:=255
+	// +kubebuilder:validation:MinLength:=1
+	// +required
+	Value string `json:"value,omitempty"`
 }
 
 // +kubebuilder:validation:MinProperties:=1
@@ -261,4 +289,27 @@ type ServerResourceStatus struct {
 	// +listType=atomic
 	// +optional
 	Tags []string `json:"tags,omitempty"`
+
+	// metadata is the list of metadata key-value pairs on the resource.
+	// +kubebuilder:validation:MaxItems:=128
+	// +listType=atomic
+	// +optional
+	Metadata []ServerMetadataStatus `json:"metadata,omitempty"`
+
+	// configDrive indicates whether the server was booted with a config drive.
+	// +optional
+	ConfigDrive bool `json:"configDrive,omitempty"`
+}
+
+// ServerMetadataStatus represents a key-value pair for server metadata in status.
+type ServerMetadataStatus struct {
+	// key is the metadata key.
+	// +kubebuilder:validation:MaxLength:=255
+	// +optional
+	Key string `json:"key,omitempty"`
+
+	// value is the metadata value.
+	// +kubebuilder:validation:MaxLength:=255
+	// +optional
+	Value string `json:"value,omitempty"`
 }