fix: externalize core charts

Signed-off-by: Chris Butler <chris.butler@redhat.com>

Author: butler54

.github/workflows/validate-defaults.yaml

@@ -0,0 +1,34 @@
+---
+name: Validate defaults apply
+
+on: [push, pull_request]
+
+jobs:
+  validate_defaults:
+    name: Json Schema tests
+    strategy:
+      matrix:
+        python-version: [3.11]
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+
+      - name: Install yq
+        uses: chrisdickinson/setup-yq@latest
+        with:
+          yq-version: v4.30.7
+
+      - name: Validate clusterGroupName is simple
+        run: |
+          if [ "$(yq '.main.clusterGroupName' values-global.yaml)" != "simple" ]; then
+            echo "main.clusterGroupName must be 'simple'"
+            exit 1
+          fi

ansible/gen-certificate.yaml

@@ -5,10 +5,10 @@ version = "0.1.0"
 "aa.toml" = '''
 [token_configs]
 [token_configs.coco_as]
-url = "https://kbs-trustee-operator-system.{{ hub_domain }}"
+url = "https://kbs.{{ hub_domain }}"
 
 [token_configs.kbs]
-url = "https://kbs-trustee-operator-system.{{ hub_domain }}"
+url = "https://kbs.{{ hub_domain }}"
 cert = """
 {{ trustee_cert }}
 """
@@ -20,7 +20,7 @@ credentials = []
 
 [kbc]
 name = "cc_kbc"
-url = "https://kbs-trustee-operator-system.{{ hub_domain }}"
+url = "https://kbs.{{ hub_domain }}"
 kbs_cert = """ 
 {{ trustee_cert }}
 """