Skip to content

Instantly share code, notes, and snippets.

@masayag
masayag / KESSEL_REBAC_INTEGRATION_REVIEW-composer-1.5.md
Last active March 10, 2026 19:15
Kessel ReBAC Integration — Technical Architecture & Implementation Review

Kessel ReBAC Integration — Technical Architecture & Implementation Review

Date: 2026-03-10
Reviewer: Technical Architecture Review
Scope: Kessel authorization (ReBAC) integration for Cost Management (Koku) on-prem
References: PR #5933, kessel-ocp-integration.md, rebac-bridge-design.md


1. High-Level Architecture Review

@masayag
masayag / thanos-bridge-design.md
Created March 8, 2026 19:32
Cost Management On Prem and ACM integration of metrics collection

Thanos Bridge: Centralized Metrics Collection for ACM-Managed Clusters

1. Motivation

Cost-onprem deployed on ACM (Advanced Cluster Management) hub clusters already runs MCO (multicluster-observability-operator) and Thanos to collect metrics from all managed spoke clusters. Running CMMO (koku-metrics-operator) on every spoke duplicates collection, adds operational overhead, and creates a separate data path that must be maintained independently.

The Thanos Bridge replaces the CMMO + Ingress data path for ACM-managed clusters by reading

@masayag
masayag / mco-thanos-cost-data-replacement-plan.md
Last active February 24, 2026 15:43
MCO/Thanos Cost Data Replacement Plan

MCO/Thanos Cost Data Replacement Plan

Plan for replacing CMMO + Ingress with ACM MCO/Thanos for cost-onprem-chart (OCP cost/usage data). Use this document to agree on architecture, split into work items, and assign research per option to different agents.


Architecture Decision Record (ADR-0001)

Status: Planning Date: 2025-02-15

@masayag
masayag / run_jmeter.sh
Last active November 29, 2021 12:52
Using JMeter for testing K4E scalability
#!/bin/bash
cd /home/test/apache-jmeter-5.4.1
export KUBECONFIG=/root/kubeconfig
Usage() {
echo "Usage:"
echo `basename $0` "<test-run-number> <edge-devices-count> <ramp-up-time-seconds> <iterations>"
}
@masayag
masayag / setup-cnv-chaos-cluster.sh
Last active November 20, 2020 16:55
Use assisted-installer for cnv chaos testing
# Run from a user which is a passwordless sudoer
#----------------------------------------------
# Install assisted-installer and deploy cluster
#----------------------------------------------
dnf install -y git make
git clone https://github.com/openshift/assisted-test-infra.git
cd assisted-test-infra
# for the first time only
export BM_INVENTORY_SERVER=$(hostname)
# to be run on assisted-test-infra env
alias list-nodes='sudo virsh net-dhcp-leases test-infra-net'
list-clusters() {
curl -s http://$BM_INVENTORY_SERVER:6008/api/assisted-install/v1/clusters/ | jq '.[] | {ID: .id, Name: .name}'
}
list-hosts() {
# Build CDI from source
git clone git@github.com:kubevirt/containerized-data-importer.git
cd containerized-data-importer/
make all
# Replace $USER with quay, make sure images are public or provider a secret
make manifests DOCKER_PREFIX=quay.io/$USER
make push DOCKER_PREFIX=quay.io/$USER
# Deploy CDI + CDI Operator on k8s cluster