[AISOS-376] Add drift detection and periodic resync for OpenStack resources

.gitignore

@@ -42,3 +42,6 @@ __pycache__/
 
 /bundle/
 bundle.Dockerfile
+
+# Forge workflow state (do not commit)
+.forge/

api/v1alpha1/common_types.go

@@ -98,6 +98,18 @@ type NeutronStatusMetadata struct {
 // +kubebuilder:validation:MaxLength:=253
 type KubernetesNameRef string
 
+// CommonStatus defines status fields that are common to all ORC resources.
+type CommonStatus struct {
+	// lastSyncTime is the timestamp of the last successful reconciliation
+	// that fetched state from OpenStack. It is updated each time the
+	// controller successfully reads the resource state from the OpenStack
+	// API. It is not updated on reconciliations that do not contact
+	// OpenStack (e.g. when the object is being deleted and is waiting for
+	// dependents to be removed).
+	// +optional
+	LastSyncTime *metav1.Time `json:"lastSyncTime,omitempty"`
+}
+
 // +kubebuilder:validation:MinLength:=1
 // +kubebuilder:validation:MaxLength:=64
 type KeystoneName string

api/v1alpha1/controller_options.go

@@ -16,6 +16,10 @@ limitations under the License.
 
 package v1alpha1
 
+import (
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+)
+
 // +kubebuilder:validation:Enum:=managed;unmanaged
 type ManagementPolicy string
 
@@ -63,3 +67,24 @@ func (o *ManagedOptions) GetOnDelete() OnDelete {
 	}
 	return o.OnDelete
 }
+
+// CommonOptions defines options which apply to all ORC objects regardless of
+// management policy.
+type CommonOptions struct {
+	// resyncPeriod defines how frequently the controller will re-reconcile this
+	// resource even when no changes have been detected. This implements a
+	// three-tier resolution: the per-resource value takes precedence over the
+	// global controller default; if neither is set, periodic resync is
+	// disabled. The value must be a valid Go duration string, e.g. "10m", "1h".
+	// +optional
+	ResyncPeriod *metav1.Duration `json:"resyncPeriod,omitempty"` //nolint:kubeapilinter // metav1.Duration is appropriate for user-facing duration config
+}
+
+// GetResyncPeriod returns the resync period from CommonOptions. If called on a
+// nil receiver it safely returns nil.
+func (o *CommonOptions) GetResyncPeriod() *metav1.Duration {
+	if o == nil {
+		return nil
+	}
+	return o.ResyncPeriod
+}