OpenKeel: the sovereign French Cloud solution of the inherent group, with a European reach Discover inherent
Components · Services and orchestration
Rating (FinOps): usage collected from Prometheus, priced by hashmap rules and CEL scripts, rated history in InfluxDB; with openkeel-pricing (cost and carbon quotes), it feeds Skyline's FinOps / GreenOps page.
OpenKeel implementation in Go of OpenStack CloudKitty, the rating service (cloudkitty-api and cloudkitty-processor), generated from the reverse-specification of branch stable/2026.2 (reverse-spec-cloudkitty/, files 00–07 and _rewrite/) by the generate-go-from-spec skill. It replaces the Python service without its clients noticing (python-cloudkittyclient, cloudkitty-dashboard): same routes (66 operations of v1, hashmap, pyscripts and v2), status codes, WSME and flask-restful error bodies, and policies.
What it does: the processor lists the scopes (Keystone projects with the rating role, Prometheus label values or a static list), collects their usage from Prometheus every period, prices it with the enabled rating modules (hashmap rules, CEL scripts in place of PyScripts), and stores the rated data in InfluxDB (1.x or 2.x); the API manages the rules and returns summaries, rated data frames and instant quotes.
OpenKeel decisions (details and reasons in docs/CONFORMANCE.md):
exec); tools/pyscript2cel.py translates the scripts written in the documented pattern; skip_datapoints_expression is CEL too.GET /v2/rating/modules, quotes with a flat desc, InfluxQL built from escaped literals, no unverified Keystone call, reprocessing and reset windows. What is reproduced and what differs is in docs/CONFORMANCE.md; the security checklist is in docs/SECURITY.md.github.com/openkeel/openkeel-cloudkittycloudkitty-api (API on port 8889, health and metrics on 9090) and cloudkitty-processor (health on 9090)Excerpt from openkeel-cloudkitty/README.md (in English).
66 operations of the original REST API (routes and body actions), and their state in OpenKeel.
CloudKitty's three gabbi suites are replayed against the Go service, with hashmap vectors recorded from the Python tests and a lab deployment read back through the ingress.
223 exchanges of 19 gabbi files (v1, hashmap, pyscripts, v2) give the same status and body.
make e2e, also on MariaDB 11.4 (E2E_MYSQL_DSN); strict mode passes with the known differences listed.
Latest result 153 / 223 identical; the 70 others are explained (Python test fakes, storage v1, CORS, Python scripts refused).
Source: openkeel-cloudkitty/docs/CONFORMANCE.md
24 hashmap rating vectors recorded from cloudkitty.tests.test_hashmap price to the digit, decimals checked against CPython.
go test ./... (19 packages).
Latest result 24 / 24 identical.
Source: openkeel-cloudkitty/docs/CONFORMANCE.md
Catalog type rating, modules, hashmap rules, quotes, a Python script refused and a CEL one accepted, dataframes pushed then read back by /v2/summary; the processor rates from the month start.
okadm install --mode lab with cloudkitty, calls through the ingress with an admin token; Skyline's FinOps / GreenOps page.
Latest result Pass, 0 rating failure.
Source: openkeel-cloudkitty/docs/CONFORMANCE.md
python-cloudkittyclient, cloudkitty-dashboard and cloudkitty-tempest-plugin.
Not reverse-specified yet.
Latest result Not run.
Source: openkeel-cloudkitty/docs/CONFORMANCE.md
CloudKitty keeps its 66 API operations and its rating; it collects from Prometheus and stores in InfluxDB only, and PyScripts become CEL expressions.
Taken over by CEL
Running operators' Python with exec is arbitrary code in the service; CEL has no statements and no I/O, with cost and time limits.
Same rating per data point; scripts written in the documented pattern are translated by tools/pyscript2cel.py, others are rewritten.
Source: openkeel-cloudkitty/docs/CONFORMANCE.md
Taken over by Prometheus
OpenKeel deploys no Gnocchi: usage comes from Prometheus (kube-prometheus-stack, openstack-exporter).
Same rated data from the Prometheus metrics; the collectors can be added on demand.
Source: openkeel-cloudkitty/docs/CONFORMANCE.md
Taken over by InfluxDB
The rated history goes to InfluxDB 1.x or 2.x; the other back ends are not deployed.
Summaries and dataframes as with storage v2; the upstream scope-filter defects of those back ends cannot happen.
Source: openkeel-cloudkitty/docs/CONFORMANCE.md
Taken over by Kubernetes Leases
Quotes are computed in the API with the same rating code; scope resets go to the processor through the database; one active processor holds a Lease.
Same API behaviour, one dependency less, correct on several hosts.
Source: openkeel-cloudkitty/docs/CONFORMANCE.md
Only what was left out by design is listed here; the work not done yet is in the Known gaps of the module's docs/CONFORMANCE.md. Every module
Branch stable-2026.2 · 9 files
Read the reverse-spec