Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,83 @@
---
apiVersion: rabbitmq.com/v1beta1
kind: User
metadata:
name: ceilometer-swift
namespace: openstack
labels:
app.kubernetes.io/managed-by: "Helm"
annotations:
helm.sh/resource-policy: keep
meta.helm.sh/release-name: "ceilometer"
meta.helm.sh/release-namespace: "openstack"
spec:
tags:
- management # available tags are 'management', 'policymaker', 'monitoring' and 'administrator'
- policymaker
rabbitmqClusterReference:
name: rabbitmq # rabbitmqCluster must exist in the same namespace as this resource
namespace: openstack
importCredentialsSecret:
name: ceilometer-swift-rabbitmq-password
---
apiVersion: rabbitmq.com/v1beta1
kind: Vhost
metadata:
name: ceilometer-swift-vhost
namespace: openstack
labels:
app.kubernetes.io/managed-by: "Helm"
annotations:
helm.sh/resource-policy: keep
meta.helm.sh/release-name: "ceilometer"
meta.helm.sh/release-namespace: "openstack"
spec:
name: "ceilometer-swift" # vhost name; required and cannot be updated
defaultQueueType: quorum # default queue type for this vhost; require RabbitMQ version 3.11.12 or above
rabbitmqClusterReference:
name: rabbitmq # rabbitmqCluster must exist in the same namespace as this resource
namespace: openstack
---
apiVersion: rabbitmq.com/v1beta1
kind: Queue
metadata:
name: ceilometer-swift-queue
namespace: openstack
labels:
app.kubernetes.io/managed-by: "Helm"
annotations:
helm.sh/resource-policy: keep
meta.helm.sh/release-name: "ceilometer"
meta.helm.sh/release-namespace: "openstack"
spec:
name: ceilometer-swift-qq # name of the queue
vhost: "ceilometer-swift" # default to '/' if not provided
type: quorum # without providing a queue type, rabbitmq creates a classic queue
autoDelete: false
durable: true # setting 'durable' to false means this queue won't survive a server restart
rabbitmqClusterReference:
name: rabbitmq # rabbitmqCluster must exist in the same namespace as this resource
namespace: openstack
---
apiVersion: rabbitmq.com/v1beta1
kind: Permission
metadata:
name: ceilometer-swift-permission
namespace: openstack
labels:
app.kubernetes.io/managed-by: "Helm"
annotations:
helm.sh/resource-policy: keep
meta.helm.sh/release-name: "ceilometer"
meta.helm.sh/release-namespace: "openstack"
spec:
vhost: "ceilometer-swift" # name of a vhost
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can this following the standard openstack service vhost naming convention?

userReference:
name: "ceilometer-swift" # name of a user.rabbitmq.com in the same namespace; must specify either spec.userReference or spec.user
permissions:
write: ".*"
configure: ".*"
read: ".*"
rabbitmqClusterReference:
name: rabbitmq # rabbitmqCluster must exist in the same namespace as this resource
namespace: openstack
2 changes: 2 additions & 0 deletions base-kustomize/ceilometer/base/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,9 @@
---
sortOptions:
order: fifo
resources:
- all.yaml
- hpa-ceilometer-notification.yaml
- ceilometer-rabbitmq-queue.yaml
- ceilometer-swift-rabbitmq-queue.yaml
- policies.yaml
11 changes: 11 additions & 0 deletions bin/create-secrets.sh
Original file line number Diff line number Diff line change
Expand Up @@ -97,6 +97,7 @@ gnocchi_pgsql_password=$(generate_password 32)
ceilometer_keystone_admin_password=$(generate_password 32)
ceilometer_keystone_test_password=$(generate_password 32)
ceilometer_rabbitmq_password=$(generate_password 32)
ceilometer_swift_rabbitmq_password=$(generate_password 32)
memcached_shared_secret=$(generate_password 32)
grafana_secret=$(generate_password 32)
grafana_root_secret=$(generate_password 32)
Expand Down Expand Up @@ -686,6 +687,16 @@ data:
---
apiVersion: v1
kind: Secret
metadata:
name: ceilometer-swift-rabbitmq-password
namespace: openstack
type: Opaque
data:
username: $(echo -n "ceilometer-swift" | base64)
password: $(echo -n $ceilometer_swift_rabbitmq_password | base64 -w0)
---
apiVersion: v1
kind: Secret
metadata:
name: os-memcached
namespace: openstack
Expand Down