CobaltCore

Appearance

Future ​

This section collects idea sketches for the CobaltCore project: explorations of where the operators could go next, written down early enough to be discussed, challenged, and reshaped before anyone commits to an implementation.

Pages in this section are explicitly not:

  • Decided architecture. Accepted designs and their rationale live in the architecture documentation, not here. A Future page graduates by being triaged through a GitHub issue and, if accepted, turned into a proper design — at which point the sketch here is replaced by a pointer or removed.
  • Reference documentation. Nothing described here is guaranteed to exist in the codebase. Where a page describes current behavior, it does so only as the baseline for the proposed change.
  • A roadmap commitment. Phases, API shapes, and field names are working material for discussion.

Current sketches ​

  • Brownfield Keystone Adoption — adopt an existing OpenStack Keystone installation incrementally. Phase 1 has graduated: the service-less, External-mode ControlPlane is implemented, and running it is documented in Adopt an External Keystone. The page keeps the later phases (infrastructure attach, service takeover) as sketches.
  • Service Accounts on Application Credentials — switch the per-service accounts (glance, placement, barbican) from passwords to Keystone application credentials, repeating the admin-credential pattern: password demoted to a bootstrap credential, overlapping rotation without an outage window. Grounded in an upstream analysis; the K-ORC mint as a non-admin user is the open spike.
  • Hypervisor Cluster — the dedicated bare-metal compute cluster from the original architecture document: Hypervisor Operator, node agents, and the LibVirt virtualization layer. Raw form, not elaborated.
  • Storage Cluster — the dedicated Ceph cluster from the original architecture document: Rook, the External Arbiter Operator, and Prysm. Raw form, not elaborated.
  • Management Cluster — splitting GitOps, OpenBao, and ESO out of the single implemented cluster, plus Greenhouse and the Aurora Dashboard. Raw form, not elaborated.