Add variable number of Fernet keys

Add configuration for specifying the number of
fernet keys stored in the keystone secret.

Author: afaranha

api/bases/keystone.openstack.org_keystoneapis.yaml

@@ -365,6 +365,10 @@ spec:
                 description: Secret containing OpenStack password information for
                   keystone AdminPassword
                 type: string
+              numberFernetKeys:
+                default: 2
+                description: Number of Fernet keys
+                type: integer
               tls:
                 description: TLS - Parameters related to the TLS
                 properties:

api/v1beta1/keystoneapi_types.go

@@ -168,6 +168,11 @@ type KeystoneAPISpecCore struct {
 	// +operator-sdk:csv:customresourcedefinitions:type=spec
 	// TLS - Parameters related to the TLS
 	TLS tls.API `json:"tls,omitempty"`
+
+	// +kubebuilder:validation:Optional
+	// +kubebuilder:default=2
+	// Number of Fernet keys
+	FernetKeys *int32 `json:"numberFernetKeys"`
 }
 
 // APIOverrideSpec to override the generated manifest of several child resources.

config/crd/bases/keystone.openstack.org_keystoneapis.yaml

@@ -365,6 +365,10 @@ spec:
                 description: Secret containing OpenStack password information for
                   keystone AdminPassword
                 type: string
+              numberFernetKeys:
+                default: 2
+                description: Number of Fernet keys
+                type: integer
               tls:
                 description: TLS - Parameters related to the TLS
                 properties:

controllers/keystoneapi_controller.go

@@ -1339,11 +1339,12 @@ func (r *KeystoneAPIReconciler) ensureFernetKeys(
 		return err
 	} else if k8s_errors.IsNotFound(err) {
 		fernetKeys := map[string]string{
-			"FernetKeys0":     keystone.GenerateFernetKey(),
-			"FernetKeys1":     keystone.GenerateFernetKey(),
 			"CredentialKeys0": keystone.GenerateFernetKey(),
 			"CredentialKeys1": keystone.GenerateFernetKey(),
 		}
+		for i := range instance.Spec.FernetKeys {
+			fernetKeys[fmt.Sprintf("FernetKeys%d", i)] = keystone.GenerateFernetKey()
+		}
 
 		tmpl := []util.Template{
 			{