OpenStack Xena : Configure Gnocchi2021/10/11 |
|
Install TDBaaS (Time Series Database as a Service), Gnocchi.
This example is based on the environment like follows.
------------+---------------------------+---------------------------+------------
| | |
eth0|10.0.0.30 eth0|10.0.0.50 eth0|10.0.0.51
+-----------+-----------+ +-----------+-----------+ +-----------+-----------+
| [ Control Node ] | | [ Storage Node ] | | [ Compute Node ] |
| | | | | |
| MariaDB RabbitMQ | | Open vSwitch | | Libvirt |
| Memcached httpd | | Neutron Server | | Nova Compute |
| Keystone Glance | | OVN-Northd | | Open vSwitch |
| Nova API | | Cinder Volume | | OVN Metadata Agent |
| Cinder API | | Heat API/Engine | | OVN-Controller |
| | | Gnocchi httpd | | |
+-----------------------+ +-----------------------+ +-----------------------+
|
| [1] | Add users and others for Gnocchi in Keystone. |
|
# create [gnocchi] user in [service] project root@dlp ~(keystone)# openstack user create --domain default --project service --password servicepassword gnocchi
+---------------------+----------------------------------+
| Field | Value |
+---------------------+----------------------------------+
| default_project_id | 611e3ba8938b475fb9dd8124603f18d3 |
| domain_id | default |
| enabled | True |
| id | b82510960a5f4502ab607a86b27bd0c5 |
| name | gnocchi |
| options | {} |
| password_expires_at | None |
+---------------------+----------------------------------+
# add [gnocchi] user in [admin] role root@dlp ~(keystone)# openstack role add --project service --user gnocchi admin
# create service entry for [gnocchi] root@dlp ~(keystone)# openstack service create --name gnocchi --description "Metric Service" metric +-------------+----------------------------------+ | Field | Value | +-------------+----------------------------------+ | description | Metric Service | | enabled | True | | id | 884748d272f948b1952194d005ab86ff | | name | gnocchi | | type | metric | +-------------+----------------------------------+ # define Gnocchi API Host root@dlp ~(keystone)# export controller=10.0.0.50
# create endpoint for [gnocchi] (public) root@dlp ~(keystone)# openstack endpoint create --region RegionOne metric public http://$controller:8041 +--------------+----------------------------------+ | Field | Value | +--------------+----------------------------------+ | enabled | True | | id | 33f9c8f038944fd79922e2fa3ec819e7 | | interface | public | | region | RegionOne | | region_id | RegionOne | | service_id | 884748d272f948b1952194d005ab86ff | | service_name | gnocchi | | service_type | metric | | url | http://10.0.0.50:8041 | +--------------+----------------------------------+ # create endpoint for [gnocchi] (internal) root@dlp ~(keystone)# openstack endpoint create --region RegionOne metric internal http://$controller:8041 +--------------+----------------------------------+ | Field | Value | +--------------+----------------------------------+ | enabled | True | | id | ab995d5598274537a44162f426c80b13 | | interface | internal | | region | RegionOne | | region_id | RegionOne | | service_id | 884748d272f948b1952194d005ab86ff | | service_name | gnocchi | | service_type | metric | | url | http://10.0.0.50:8041 | +--------------+----------------------------------+ # create endpoint for [gnocchi] (admin) root@dlp ~(keystone)# openstack endpoint create --region RegionOne metric admin http://$controller:8041 +--------------+----------------------------------+ | Field | Value | +--------------+----------------------------------+ | enabled | True | | id | f86858506766471896967d2e24a61cc7 | | interface | admin | | region | RegionOne | | region_id | RegionOne | | service_id | 884748d272f948b1952194d005ab86ff | | service_name | gnocchi | | service_type | metric | | url | http://10.0.0.50:8041 | +--------------+----------------------------------+ |
| [2] | Add a User and Database on MariaDB for Gnocchi. |
|
root@dlp ~(keystone)# mysql Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 109 Server version: 10.3.31-MariaDB-0ubuntu0.20.04.1 Ubuntu 20.04 Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MariaDB [(none)]> create database gnocchi; Query OK, 1 row affected (0.00 sec) MariaDB [(none)]> grant all privileges on gnocchi.* to gnocchi@'localhost' identified by 'password'; Query OK, 0 rows affected (0.00 sec) MariaDB [(none)]> grant all privileges on gnocchi.* to gnocchi@'%' identified by 'password'; Query OK, 0 rows affected (0.00 sec) MariaDB [(none)]> flush privileges; Query OK, 0 rows affected (0.00 sec) MariaDB [(none)]> exit Bye |
| [3] | Install Gnocchi on Network Node. For questions duruing the installation, it's OK with [No] to all. |
|
root@network:~# apt -y install gnocchi-api gnocchi-metricd python3-gnocchiclient
|
| [4] | Configure Gnocchi. |
|
root@network:~# mv /etc/gnocchi/gnocchi.conf /etc/gnocchi/gnocchi.conf.org
root@network:~#
vi /etc/gnocchi/gnocchi.conf # create new [DEFAULT] log_dir = /var/log/gnocchi [api] auth_mode = keystone [database] backend = sqlalchemy # MariaDB connection info [indexer] url = mysql+pymysql://gnocchi:password@10.0.0.30/gnocchi [storage] driver = file file_basepath = /var/lib/gnocchi # Keystone auth info [keystone_authtoken] www_authenticate_uri = http://10.0.0.30:5000 auth_url = http://10.0.0.30:5000 memcached_servers = 10.0.0.30:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = gnocchi password = servicepassword service_token_roles_required = true
root@network:~#
vi /etc/gnocchi/policy.json # add policies
{
"admin_or_creator": "role:admin or user:%(creator)s or project_id:%(created_by_project_id)s",
"resource_owner": "project_id:%(project_id)s",
"metric_owner": "project_id:%(resource.project_id)s",
"get status": "role:admin",
"create resource": "",
"get resource": "rule:admin_or_creator or rule:resource_owner",
"update resource": "rule:admin_or_creator",
"delete resource": "rule:admin_or_creator",
"delete resources": "rule:admin_or_creator",
"list resource": "rule:admin_or_creator or rule:resource_owner",
"search resource": "rule:admin_or_creator or rule:resource_owner",
"create resource type": "role:admin",
"delete resource type": "role:admin",
"update resource type": "role:admin",
"list resource type": "",
"get resource type": "",
"get archive policy": "",
"list archive policy": "",
"create archive policy": "role:admin",
"update archive policy": "role:admin",
"delete archive policy": "role:admin",
"create archive policy rule": "role:admin",
"get archive policy rule": "",
"list archive policy rule": "",
"update archive policy rule": "role:admin",
"delete archive policy rule": "role:admin",
"create metric": "",
"delete metric": "rule:admin_or_creator",
"get metric": "rule:admin_or_creator or rule:metric_owner",
"search metric": "rule:admin_or_creator or rule:metric_owner",
"list metric": "rule:admin_or_creator or rule:metric_owner",
"get measures": "rule:admin_or_creator or rule:metric_owner",
"post measures": "rule:admin_or_creator"
}
root@network:~# chmod 640 /etc/gnocchi/gnocchi.conf root@network:~# chgrp gnocchi /etc/gnocchi/gnocchi.conf root@network:~# su -s /bin/bash gnocchi -c "gnocchi-upgrade" root@network:~# systemctl restart gnocchi-metricd apache2 root@network:~# systemctl enable gnocchi-metricd |
| [4] | Verify state on Control Node. |
|
root@dlp ~(keystone)#
apt -y install python3-gnocchiclient root@dlp ~(keystone)# export OS_AUTH_TYPE=password root@dlp ~(keystone)# gnocchi resource list
# OK if no error is shown |
| Sponsored Link |