feat: introduce ceilometer helm chart overrides

docs/openstack-ceilometer.md

@@ -0,0 +1,80 @@
+# Deploy Ceilometer
+
+## Create Secrets
+
+```shell
+kubectl --namespace openstack create secret generic ceilometer-keystone-admin-password \
+        --type Opaque \
+        --from-literal=password="$(< /dev/urandom tr -dc _A-Za-z0-9 | head -c${1:-32};echo;)"
+kubectl --namespace openstack create secret generic ceilometer-keystone-test-password \
+        --type Opaque \
+        --from-literal=password="$(< /dev/urandom tr -dc _A-Za-z0-9 | head -c${1:-32};echo;)"
+kubectl --namespace openstack create secret generic ceilometer-rabbitmq-password \
+        --type Opaque \
+        --from-literal=password="$(< /dev/urandom tr -dc _A-Za-z0-9 | head -c${1:-32};echo;)"
+```
+
+## Run the package deployment
+
+```shell
+cd /opt/genestack/submodules/openstack-helm
+helm upgrade --install ceilometer ./ceilometer \
+    --namespace=openstack \
+    --wait \
+    --timeout 10m \
+    -f /opt/genestack/helm-configs/ceilometer/ceilometer-helm-overrides.yaml \
+    --set endpoints.identity.auth.admin.password="$(kubectl --namespace openstack get secret keystone-admin -o jsonpath='{.data.password}' | base64 -d)" \
+    --set endpoints.identity.auth.ceilometer.password="$(kubectl --namespace openstack get secret ceilometer-keystone-admin-password -o jsonpath='{.data.password}' | base64 -d)" \
+    --set endpoints.identity.auth.test.password="$(kubectl --namespace openstack get secret ceilometer-keystone-test-password -o jsonpath='{.data.password}' | base64 -d)" \
+    --set endpoints.oslo_messaging.auth.admin.username="$(kubectl --namespace openstack get secret rabbitmq-default-user -o jsonpath='{.data.username}' | base64 -d)" \
+    --set endpoints.oslo_messaging.auth.admin.password="$(kubectl --namespace openstack get secret rabbitmq-default-user -o jsonpath='{.data.password}' | base64 -d)" \
+    --set endpoints.oslo_messaging.auth.ceilometer.password="$(kubectl --namespace openstack get secret ceilometer-rabbitmq-password -o jsonpath='{.data.password}' | base64 -d)" \
+    --set conf.ceilometer.oslo_messaging_notifications.transport_url="\
+rabbit://ceilometer:$(kubectl --namespace openstack get secret ceilometer-rabbitmq-password -o jsonpath='{.data.password}' | base64 -d)@rabbitmq.openstack.svc.cluster.local:5672/ceilometer"\
+    --set conf.ceilometer.notification.messaging_urls.values="{\
+rabbit://ceilometer:$(kubectl --namespace openstack get secret ceilometer-rabbitmq-password -o jsonpath='{.data.password}' | base64 -d)@rabbitmq.openstack.svc.cluster.local:5672/ceilometer,\
+rabbit://cinder:$(kubectl --namespace openstack get secret cinder-rabbitmq-password -o jsonpath='{.data.password}' | base64 -d)@rabbitmq.openstack.svc.cluster.local:5672/cinder,\
+rabbit://glance:$(kubectl --namespace openstack get secret glance-rabbitmq-password -o jsonpath='{.data.password}' | base64 -d)@rabbitmq.openstack.svc.cluster.local:5672/glance,\
+rabbit://heat:$(kubectl --namespace openstack get secret heat-rabbitmq-password -o jsonpath='{.data.password}' | base64 -d)@rabbitmq.openstack.svc.cluster.local:5672/heat,\
+rabbit://keystone:$(kubectl --namespace openstack get secret keystone-rabbitmq-password -o jsonpath='{.data.password}' | base64 -d)@rabbitmq.openstack.svc.cluster.local:5672/keystone,\
+rabbit://neutron:$(kubectl --namespace openstack get secret neutron-rabbitmq-password -o jsonpath='{.data.password}' | base64 -d)@rabbitmq.openstack.svc.cluster.local:5672/neutron,\
+rabbit://nova:$(kubectl --namespace openstack get secret nova-rabbitmq-password -o jsonpath='{.data.password}' | base64 -d)@rabbitmq.openstack.svc.cluster.local:5672/nova}"
+```
+
+!!! tip
+
+    In a production like environment you may need to include production specific files like the example variable file found in `helm-configs/prod-example-openstack-overrides.yaml`.
+
+## Verify Ceilometer Workers
+
+As there is no Ceilometer API, we will do a quick validation against the
+Gnocchi API via a series of `openstack metric` commands to confirm that
+Ceilometer workers are ingesting metric and event data then persisting them
+storage.
+
+### Verify metric resource types exist
+
+The Ceilomter db-sync job will create the various resource types in Gnocchi.
+Without them, metrics can't be stored, so let's verify they exist. The
+output should include named resource types and some attributes for resources
+like `instance`, `instance_disk`, `network`, `volume`, etc.
+
+```shell
+kubectl exec -it openstack-admin-client -n openstack -- openstack metric resource-type list
+```
+
+### Verify metric resources
+
+Confirm that resources are populating in Gnocchi
+
+```shell
+kubectl exec -it openstack-admin-client -n openstack -- openstack metric resource list
+```
+
+### Verify metrics
+
+Confirm that metrics can be retrieved from Gnocchi
+
+```shell
+kubectl exec -it openstack-admin-client -n openstack -- openstack metric list
+```