Merge pull request #76667 from JoeAldinger/OSDOCS-9991

OSDOCS-9991: adds metrics for (B)ANP

Author: JoeAldinger

_topic_maps/_topic_map.yml

@@ -1286,6 +1286,8 @@ Topics:
       File: ovn-k-anp
     - Name: About BaselineAdminNetworkPolicy
       File: ovn-k-banp
+    - Name: Metrics for AdminNetworkPolicy
+      File: ovn-k-anp-banp-metrics
   - Name: Network policy
     Dir: network_policy
     Distros: openshift-enterprise, openshift-origin

modules/nw-anp-banp-metrics.adoc

@@ -0,0 +1,39 @@
+// Module included in the following assemblies:
+//
+// * list of assemblies where this module is included:
+// networking/network_security/AdminNetworkPolicy/nw-ovn-k-anp-banp-metric.adoc
+
+:_mod-docs-content-type: CONCEPT
+[id="anp-banp-metrics_{context}"]
+= Metrics for AdminNetworkPolicy
+
+[cols="1,1a,1"]
+|===
+| Name | Description |Explanation
+
+|`ovnkube_controller_admin_network_policies`
+|Not applicable
+|The total number of `AdminNetworkPolicy` resources in the cluster.
+
+|`ovnkube_controller_baseline_admin_network_policies`
+|Not applicable
+|The total number of `BaselineAdminNetworkPolicy` resources in the cluster. The value should be 0 or 1.
+
+|`ovnkube_controller_admin_network_policies_rules`
+|* `direction`: specifies either `Ingress` or `Egress`.
+* `action`: specifies either `Pass`, `Allow`, or `Deny`.
+|The total number of rules across all ANP policies in the cluster grouped by `direction` and `action`.
+
+|`ovnkube_controller_baseline_admin_network_policies_rules`
+|* `direction`: specifies either `Ingress` or `Egress`.
+* `action`: specifies either `Allow` or `Deny`.
+|The total number of rules across all BANP policies in the cluster grouped by `direction` and `action`.
+
+|`ovnkube_controller_admin_network_policies_db_objects`
+|`table_name`: specifies either `ACL` or `Address_Set`
+|The total number of OVN Northbound database (nbdb) objects that are created by all the ANP in the cluster grouped by the `table_name`.
+
+|`ovnkube_controller_baseline_admin_network_policies_db_objects`
+|`table_name`: specifies either `ACL` or `Address_Set`
+|The total number of OVN Northbound database (nbdb) objects that are created by all the BANP in the cluster grouped by the `table_name`.
+|===

networking/network_security/AdminNetworkPolicy/ovn-k-anp-banp-metrics.adoc

@@ -0,0 +1,11 @@
+:_mod-docs-content-type: ASSEMBLY
+[id="ovn-k-anp-banp-metrics"]
+= Monitoring ANP and BANP
+include::_attributes/common-attributes.adoc[]
+:context: ovn-k-anp-banp-metrics
+
+toc::[]
+
+`AdminNetworkPolicy` and `BaselineAdminNetworkPolicy` resources have metrics that can be used for monitoring and managing your policies. See the following table for more details on the metrics.
+
+include::modules/nw-anp-banp-metrics.adoc[leveloffset=+1]