feat: Implements TLS in Litmus backend

backend/README.md

@@ -1,11 +1,10 @@
-# Litmus Operator
+# Litmus Backend K8s Operator
 
 [![CharmHub Badge](https://charmhub.io/litmus-backend-k8s/badge.svg)](https://charmhub.io/litmus-backend-k8s)
 [![Release](https://github.com/canonical/litmus-operators/actions/workflows/release.yaml/badge.svg)](https://github.com/canonical/litmus-operators/actions/workflows/release.yaml)
 [![Discourse Status](https://img.shields.io/discourse/status?server=https%3A%2F%2Fdiscourse.charmhub.io&style=flat&label=CharmHub%20Discourse)](https://discourse.charmhub.io)
 
-This directory contains the source code for a Charmed Operator that partially drives [LitmusChaos] on Kubernetes. It is designed to work together with other charms to deploy and operate the control plane of LitmusChaos, an open source platform for chaos testing.
-
+This directory contains the source code for a Charmed Litmus Backend K8s Operator that partially drives [LitmusChaos] on Kubernetes. It is designed to work together with other charms to deploy and operate the control plane of LitmusChaos, an open source platform for chaos testing.
 
 ## Usage
 
@@ -15,8 +14,18 @@ Assuming you have access to a bootstrapped Juju controller on Kubernetes, you ca
 $ juju deploy litmus-backend-k8s # --trust (use when cluster has RBAC enabled)
 ```
 
+### Enabling Transport Layer Security (TLS)
+
+Litmus Backend K8s Operator supports integration with TLS certificates over the `tls-certificates` charm interface. Example:
+
+```bash
+$ juju deploy self-signed-certificates --channel=1/stable
+$ juju integrate litmus-backend-k8s self-signed-certificates
+```
+
 ## OCI Images
 
+**litmuschaos-server**: ubuntu/litmuschaos-server:3-24.04_edge
 
 ## Contributing
 

backend/charmcraft.yaml

@@ -18,13 +18,20 @@ summary: |
 containers:
   backend:
     resource: litmus-backend-image
+    mounts:
+      - storage: certs
+        location: /etc/tls
 
 resources:
   litmus-backend-image:
     type: oci-image
     description: OCI image for Litmus Backend server 
     upstream-source: ubuntu/litmuschaos-server:3-24.04_edge
 
+storage:
+  certs:
+    type: filesystem
+    minimum-size: 1M
 
 links:
   documentation: https://discourse.charmhub.io/t/18790
@@ -48,6 +55,12 @@ requires:
     limit: 1
     description: |
       Exchange the gRPC server endpoints of the auth and backend components.
+  tls-certificates:
+    optional: true
+    interface: tls-certificates
+    limit: 1
+    description: |
+      Receive TLS certificates.
 
 provides:
   http-api:
@@ -64,7 +77,14 @@ parts:
   charm:
     source: .
     plugin: uv
-    build-packages: [git] # handy for git+ dependencies during development
+    build-packages:
+      - git # handy for git+ dependencies during development
+      # Required by the tls_certificates_interface
+      - cargo
+      - libffi-dev
+      - libssl-dev
+      - pkg-config
+      - rustc
     build-snaps: [astral-uv]
     # FIXME: override-build with "git describe --always > $CRAFT_PART_INSTALL/version" causes
     # charm pack to fail "fatal: not a git repository (or any of the parent directories): .git"