When we deploy overcloud with disbale-ceilometer-api.yaml , it skips the cceilometer-api service. But that ties in with ceilometer user. So ceilometer user is not created in keystone. But since we still configure ceilometer.conf with ceilometer user, keystone auth fails when ceilometer-upgrade is run to talk to gnocchi. Need to figure out how we can decouple ceilometer user creation from ceilometer API. This seems to be in puppet-tripleo https://github.com/openstack/puppet-tripleo/blob/master/manifests/profile/base/keystone.pp#L249-L251
Note more than ceilometer-upgrade fails, including agents when dispatching data.
For Beta of OSP 11 we can not disable ceilometer api due to this bug.
Sanity tests with ceilo api disabled passed
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:1245