Add cert copying steps to rgw exporter container

Author: seunghun1ee

etc/kayobe/ansible/deploy-radosgw-usage-exporter.yml

@@ -90,3 +90,40 @@
         radosgw_server: "{{ host.URL | regex_replace('(https?://)([^:/]+):([0-9]+)/.*', '\\1\\2:\\3') }}" # Drop Swift api address
       become: true
       when: stackhpc_enable_radosgw_usage_exporter
+
+    - name: Create radosgw-usage-exporter directory
+      ansible.builtin.file:
+        path: /opt/kayobe/radosgw-usage-exporter/
+        state: directory
+      when:
+        - stackhpc_enable_radosgw_usage_exporter
+        - stackhpc_radosgw_usage_exporter_cacert | length > 0
+
+    - name: Copy CA certificate to RADOS gateway usage exporter nodes
+      ansible.builtin.copy:
+        src: "{{ stackhpc_radosgw_usage_exporter_cacert }}"
+        dest: "/opt/kayobe/radosgw-usage-exporter/{{ stackhpc_radosgw_usage_exporter_cacert | basename }}"
+      register: copy_to_node_result
+      when:
+        - stackhpc_enable_radosgw_usage_exporter
+        - stackhpc_radosgw_usage_exporter_cacert | length > 0
+
+    - name: Copy CA certificate to RADOS gateway usage exporter container
+      community.docker.docker_container_copy_into:
+        container: radosgw_usage_exporter
+        path: "{{ copy_to_node_result.dest }}"
+        container_path: "/usr/local/share/ca-certificates/{{ copy_to_node_result.dest | basename }}"
+      become: true
+      when:
+        - stackhpc_enable_radosgw_usage_exporter
+        - stackhpc_radosgw_usage_exporter_cacert | length > 0
+
+    - name: Update CA certificate of RADOS gateway usage exporter container
+      community.docker.docker_container_exec:
+        container: radosgw_usage_exporter
+        command: update-ca-certificates
+        user: root
+      become: true
+      when:
+        - stackhpc_enable_radosgw_usage_exporter
+        - stackhpc_radosgw_usage_exporter_cacert | length > 0

etc/kayobe/stackhpc-monitoring.yml

@@ -62,6 +62,9 @@ stackhpc_enable_radosgw_usage_exporter: false
 # Port to expose RADOS gateway usage exporter. Default is 9242
 stackhpc_radosgw_usage_exporter_port: 9242
 
+# Path to a certificate for internal TLS in the RADOS gateway usage exporter.
+stackhpc_radosgw_usage_exporter_cacert: ""
+
 # Whether TLS certificate verification is enabled for the RADOS gateway usage
 # exporter for querying Ceph RADOS gateway APIs. Default is true
 stackhpc_radosgw_usage_exporter_verify: true