Rename nova-operator to workloads-operator and add cleanup logic

Update openstack-operator to deploy and manage workloads-operator instead of
nova-operator. The nova-operator has been renamed to workloads-operator to
reflect its expanded scope managing multiple OpenStack workload services
(Nova, Placement, and Cyborg).

Changes include:
- Added cleanupNovaOperator() function to remove old nova-operator resources
  during upgrade (deployment, service account, RBAC, certificates)
- Renamed bindata/services from nova-operator-services.yaml to
  workloads-operator-services.yaml
- Updated all K8s resource names from nova-operator to workloads-operator
  (deployments, services, roles, rolebindings, certificates, issuers)
- Renamed RELATED_IMAGE_NOVA_OPERATOR_MANAGER_IMAGE_URL to
  RELATED_IMAGE_WORKLOADS_OPERATOR_MANAGER_IMAGE_URL
- Updated CRD documentation comments to reference workloads-operator
- Updated internal comments to reference workloads-operator

The cleanup logic follows the same pattern used for placement-operator
migration, removing only namespaced resources while leaving cluster-scoped
RBAC intact to avoid breaking user-installed operators in other namespaces.

Signed-off-by: Amartya Sinha <amsinha@redhat.com>
Assisted-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: amartyasinha

api/bases/operator.openstack.org_openstacks.yaml

@@ -136,7 +136,7 @@ spec:
                       - manila
                       - mariadb
                       - neutron
-                      - nova
+                      - workloads
                       - octavia
                       - openstack-baremetal
                       - ovn

api/go.mod

@@ -119,6 +119,9 @@ require (
 	sigs.k8s.io/yaml v1.6.0 // indirect
 )
 
+// Temporarily point to fork for testing nova->workloads rename
+replace github.com/openstack-k8s-operators/nova-operator/api => github.com/amartyasinha/nova-operator/api v0.0.0-20260825092843-bc74868a5955
+
 // mschuppert: map to latest commit from release-4.20 tag
 // must consistent within modules and service operators
 replace github.com/openshift/api => github.com/openshift/api v0.0.0-20260710141509-36dec0bfafe4 //allow-merging

api/go.sum

@@ -1,5 +1,7 @@
 github.com/Masterminds/semver/v3 v3.4.0 h1:Zog+i5UMtVoCU8oKka5P7i9q9HgrJeGzI9SA1Xbatp0=
 github.com/Masterminds/semver/v3 v3.4.0/go.mod h1:4V+yj/TJE1HU9XfppCwVMZq3I84lprf4nC11bSS5beM=
+github.com/amartyasinha/nova-operator/api v0.0.0-20260825092843-bc74868a5955 h1:pUUZKKpF2++ySLK89oL3+fvhwbFIsEbM/ZLvAGCZNlM=
+github.com/amartyasinha/nova-operator/api v0.0.0-20260825092843-bc74868a5955/go.mod h1:6Kk+XtByMkeQj7cKrRQxHsWFCHCyq1o0i4ls/niFBW4=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
 github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
 github.com/blang/semver/v4 v4.0.0 h1:1PFHFE6yCCTv8C1TeyNNarDzntLi7wMI5i/pzqYIsAM=
@@ -164,8 +166,6 @@ github.com/openstack-k8s-operators/mariadb-operator/api v0.6.1-0.20260815095432-
 github.com/openstack-k8s-operators/mariadb-operator/api v0.6.1-0.20260815095432-ee0e4a46015e/go.mod h1:f3KPR3QM0jPbWGhXougv1BxnW+Bnc2vLE4TvBlYTLdo=
 github.com/openstack-k8s-operators/neutron-operator/api v0.6.1-0.20260815100037-cd2ac3283266 h1:JlEZxQLMck1GrXbYSX7BCZVWe2JGWVpLftG0/BX0DmM=
 github.com/openstack-k8s-operators/neutron-operator/api v0.6.1-0.20260815100037-cd2ac3283266/go.mod h1:MqaSkvkEeMCLR3/tVAPg8jlB7nJw2pHymfGJ9mNgjHg=
-github.com/openstack-k8s-operators/nova-operator/api v0.6.1-0.20260814001024-80a63d2d555f h1:p71R2Iji6NPJHlJ9S0DeVqo58n+9GFgojheYIP/fYS4=
-github.com/openstack-k8s-operators/nova-operator/api v0.6.1-0.20260814001024-80a63d2d555f/go.mod h1:/xrb6NvHRgj38XXz5RJjtqsrLBEgkaZ+6WTPpL5X3Rw=
 github.com/openstack-k8s-operators/octavia-operator/api v0.6.1-0.20260815074607-ebcbe88dc375 h1:A+BwSwm/oSOvBEbPz3tQwhi4ucvRceSBepk3tZ91STU=
 github.com/openstack-k8s-operators/octavia-operator/api v0.6.1-0.20260815074607-ebcbe88dc375/go.mod h1:BtUafbYGalxauqo4tRJRSDeas7OXWsPQgZLKR1JrXhc=
 github.com/openstack-k8s-operators/openstack-baremetal-operator/api v0.6.1-0.20260815053044-b1de07d3dec3 h1:Mrx9sDELzfO8JJEeeSbMdCWqdpG3SfY9ZTVlDLBklJ8=

api/operator/v1beta1/openstack_types.go

@@ -39,7 +39,7 @@ const (
 	ManilaOperatorName             = "manila"
 	MariaDBOperatorName            = "mariadb"
 	NeutronOperatorName            = "neutron"
-	NovaOperatorName               = "nova"
+	NovaOperatorName               = "workloads"
 	OctaviaOperatorName            = "octavia"
 	OpenStackBaremetalOperatorName = "openstack-baremetal"
 	OvnOperatorName                = "ovn"
@@ -184,7 +184,7 @@ type OpenStackSpec struct {
 type OperatorSpec struct {
 	// +kubebuilder:validation:Required
 	// +kubebuilder:validation:MinLength=1
-	// +kubebuilder:validation:Enum:=openstack;barbican;cinder;designate;glance;heat;horizon;infra;ironic;keystone;manila;mariadb;neutron;nova;octavia;openstack-baremetal;ovn;swift;telemetry;test;watcher
+	// +kubebuilder:validation:Enum:=openstack;barbican;cinder;designate;glance;heat;horizon;infra;ironic;keystone;manila;mariadb;neutron;workloads;octavia;openstack-baremetal;ovn;swift;telemetry;test;watcher
 	// Name of the service operators.
 	Name string `json:"name"`
 

bindata/crds/nova.openstack.org_novaapis.yaml

@@ -508,7 +508,7 @@ spec:
                 description: |-
                   Secret is the name of the Secret instance containing password
                   information for the nova-api service. This secret is expected to be
-                  generated by the nova-operator based on the information passed to the
+                  generated by the workloads-operator based on the information passed to the
                   Nova CR.
                 type: string
               serviceAccount:

bindata/crds/nova.openstack.org_novacells.yaml

@@ -1562,7 +1562,7 @@ spec:
                 description: |-
                   Secret is the name of the Secret instance containing password
                   information for the nova cell. This secret is expected to be
-                  generated by the nova-operator based on the information passed to the
+                  generated by the workloads-operator based on the information passed to the
                   Nova CR.
                 type: string
               serviceAccount:

bindata/crds/nova.openstack.org_novacomputes.yaml

@@ -321,7 +321,7 @@ spec:
                 description: |-
                   Secret is the name of the Secret instance containing password
                   information for the NovaCompute service. This secret is expected to be
-                  generated by the nova-operator based on the information passed to the
+                  generated by the workloads-operator based on the information passed to the
                   Nova CR.
                 type: string
               serviceAccount:

bindata/crds/nova.openstack.org_novaconductors.yaml

@@ -363,7 +363,7 @@ spec:
                 description: |-
                   Secret is the name of the Secret instance containing password
                   information for the nova-conductor service. This secret is expected to
-                  be generated by the nova-operator based on the information passed to the
+                  be generated by the workloads-operator based on the information passed to the
                   Nova CR.
                 type: string
               serviceAccount:

bindata/crds/nova.openstack.org_novametadata.yaml

@@ -504,7 +504,7 @@ spec:
                 description: |-
                   Secret is the name of the Secret instance containing password
                   information for the nova-conductor service. This secret is expected to
-                  be generated by the nova-operator based on the information passed to the
+                  be generated by the workloads-operator based on the information passed to the
                   Nova CR.
                 type: string
               serviceAccount:

bindata/crds/nova.openstack.org_novanovncproxies.yaml

@@ -469,7 +469,7 @@ spec:
                 description: |-
                   Secret is the name of the Secret instance containing password
                   information for the nova-novncproxy service. This secret is expected to
-                  be generated by the nova-operator based on the information passed to the
+                  be generated by the workloads-operator based on the information passed to the
                   Nova CR.
                 type: string
               serviceAccount: