Date: 2026-03-10
Reviewer: Technical Architecture Review
Scope: Kessel authorization (ReBAC) integration for Cost Management (Koku) on-prem
References: PR #5933, kessel-ocp-integration.md, rebac-bridge-design.md
Cost-onprem deployed on ACM (Advanced Cluster Management) hub clusters already runs MCO (multicluster-observability-operator) and Thanos to collect metrics from all managed spoke clusters. Running CMMO (koku-metrics-operator) on every spoke duplicates collection, adds operational overhead, and creates a separate data path that must be maintained independently.
The Thanos Bridge replaces the CMMO + Ingress data path for ACM-managed clusters by reading
Plan for replacing CMMO + Ingress with ACM MCO/Thanos for cost-onprem-chart (OCP cost/usage data). Use this document to agree on architecture, split into work items, and assign research per option to different agents.
Status: Planning Date: 2025-02-15
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| cd /home/test/apache-jmeter-5.4.1 | |
| export KUBECONFIG=/root/kubeconfig | |
| Usage() { | |
| echo "Usage:" | |
| echo `basename $0` "<test-run-number> <edge-devices-count> <ramp-up-time-seconds> <iterations>" | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Run from a user which is a passwordless sudoer | |
| #---------------------------------------------- | |
| # Install assisted-installer and deploy cluster | |
| #---------------------------------------------- | |
| dnf install -y git make | |
| git clone https://github.com/openshift/assisted-test-infra.git | |
| cd assisted-test-infra | |
| # for the first time only |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| export BM_INVENTORY_SERVER=$(hostname) | |
| # to be run on assisted-test-infra env | |
| alias list-nodes='sudo virsh net-dhcp-leases test-infra-net' | |
| list-clusters() { | |
| curl -s http://$BM_INVENTORY_SERVER:6008/api/assisted-install/v1/clusters/ | jq '.[] | {ID: .id, Name: .name}' | |
| } | |
| list-hosts() { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Build CDI from source | |
| git clone git@github.com:kubevirt/containerized-data-importer.git | |
| cd containerized-data-importer/ | |
| make all | |
| # Replace $USER with quay, make sure images are public or provider a secret | |
| make manifests DOCKER_PREFIX=quay.io/$USER | |
| make push DOCKER_PREFIX=quay.io/$USER | |
| # Deploy CDI + CDI Operator on k8s cluster |