6ab205bcb1
Update keystone authentication for services. Replace 'auth_plugin' with 'auth_type' and configure use of the memcached service on the controller for caching tokens. TBD: Does inter-service authentication (nova-neutron) and trusts (heat) also require use of memcached? Requires further testing, but this patch reduces deprecation messages. Implements: bp installguide-mitaka Change-Id: I58fc11b7f81729ca0d3a23d56816ee654559866f
346 lines
11 KiB
ReStructuredText
346 lines
11 KiB
ReStructuredText
Install and configure
|
|
~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
This section describes how to install and configure the Telemetry
|
|
service, code-named ceilometer, on the controller node. The Telemetry
|
|
service collects measurements from most OpenStack services and
|
|
optionally triggers alarms.
|
|
|
|
Prerequisites
|
|
-------------
|
|
|
|
Before you install and configure the Telemetry service, you must
|
|
create a database, service credentials, and API endpoints. However,
|
|
unlike other services, the Telemetry service uses a NoSQL database.
|
|
See :ref:`environment-nosql-database` to install and configure
|
|
MongoDB before proceeding further.
|
|
|
|
.. only:: obs or ubuntu or debian
|
|
|
|
1. Create the ``ceilometer`` database:
|
|
|
|
.. code-block:: console
|
|
|
|
# mongo --host controller --eval '
|
|
db = db.getSiblingDB("ceilometer");
|
|
db.addUser({user: "ceilometer",
|
|
pwd: "CEILOMETER_DBPASS",
|
|
roles: [ "readWrite", "dbAdmin" ]})'
|
|
|
|
MongoDB shell version: 2.4.x
|
|
connecting to: controller:27017/test
|
|
{
|
|
"user" : "ceilometer",
|
|
"pwd" : "72f25aeee7ad4be52437d7cd3fc60f6f",
|
|
"roles" : [
|
|
"readWrite",
|
|
"dbAdmin"
|
|
],
|
|
"_id" : ObjectId("5489c22270d7fad1ba631dc3")
|
|
}
|
|
|
|
Replace ``CEILOMETER_DBPASS`` with a suitable password.
|
|
|
|
.. only:: rdo
|
|
|
|
1. Create the ``ceilometer`` database:
|
|
|
|
.. code-block:: console
|
|
|
|
# mongo --host controller --eval '
|
|
db = db.getSiblingDB("ceilometer");
|
|
db.createUser({user: "ceilometer",
|
|
pwd: "CEILOMETER_DBPASS",
|
|
roles: [ "readWrite", "dbAdmin" ]})'
|
|
|
|
MongoDB shell version: 2.6.x
|
|
connecting to: controller:27017/test
|
|
Successfully added user: { "user" : "ceilometer", "roles" : [ "readWrite", "dbAdmin" ] }
|
|
|
|
Replace ``CEILOMETER_DBPASS`` with a suitable password.
|
|
|
|
2. Source the ``admin`` credentials to gain access to admin-only
|
|
CLI commands:
|
|
|
|
.. code-block:: console
|
|
|
|
$ source admin-openrc.sh
|
|
|
|
3. To create the service credentials, complete these steps:
|
|
|
|
* Create the ``ceilometer`` user:
|
|
|
|
.. code-block:: console
|
|
|
|
$ openstack user create --domain default --password-prompt ceilometer
|
|
User Password:
|
|
Repeat User Password:
|
|
+-----------+----------------------------------+
|
|
| Field | Value |
|
|
+-----------+----------------------------------+
|
|
| domain_id | default |
|
|
| enabled | True |
|
|
| id | c859c96f57bd4989a8ea1a0b1d8ff7cd |
|
|
| name | ceilometer |
|
|
+-----------+----------------------------------+
|
|
|
|
* Add the ``admin`` role to the ``ceilometer`` user.
|
|
|
|
.. code-block:: console
|
|
|
|
$ openstack role add --project service --user ceilometer admin
|
|
|
|
.. note::
|
|
|
|
This command provides no output.
|
|
|
|
* Create the ``ceilometer`` service entity:
|
|
|
|
.. code-block:: console
|
|
|
|
$ openstack service create --name ceilometer \
|
|
--description "Telemetry" metering
|
|
+-------------+----------------------------------+
|
|
| Field | Value |
|
|
+-------------+----------------------------------+
|
|
| description | Telemetry |
|
|
| enabled | True |
|
|
| id | 5fb7fd1bb2954fddb378d4031c28c0e4 |
|
|
| name | ceilometer |
|
|
| type | metering |
|
|
+-------------+----------------------------------+
|
|
|
|
4. Create the Telemetry service API endpoints:
|
|
|
|
.. code-block:: console
|
|
|
|
$ openstack endpoint create --region RegionOne \
|
|
metering public http://controller:8777
|
|
+--------------+----------------------------------+
|
|
| Field | Value |
|
|
+--------------+----------------------------------+
|
|
| enabled | True |
|
|
| id | b808b67b848d443e9eaaa5e5d796970c |
|
|
| interface | public |
|
|
| region | RegionOne |
|
|
| region_id | RegionOne |
|
|
| service_id | 5fb7fd1bb2954fddb378d4031c28c0e4 |
|
|
| service_name | ceilometer |
|
|
| service_type | metering |
|
|
| url | http://controller:8777 |
|
|
+--------------+----------------------------------+
|
|
|
|
$ openstack endpoint create --region RegionOne \
|
|
metering internal http://controller:8777
|
|
+--------------+----------------------------------+
|
|
| Field | Value |
|
|
+--------------+----------------------------------+
|
|
| enabled | True |
|
|
| id | c7009b1c2ee54b71b771fa3d0ae4f948 |
|
|
| interface | internal |
|
|
| region | RegionOne |
|
|
| region_id | RegionOne |
|
|
| service_id | 5fb7fd1bb2954fddb378d4031c28c0e4 |
|
|
| service_name | ceilometer |
|
|
| service_type | metering |
|
|
| url | http://controller:8777 |
|
|
+--------------+----------------------------------+
|
|
|
|
$ openstack endpoint create --region RegionOne \
|
|
metering admin http://controller:8777
|
|
+--------------+----------------------------------+
|
|
| Field | Value |
|
|
+--------------+----------------------------------+
|
|
| enabled | True |
|
|
| id | b2c00566d0604551b5fe1540c699db3d |
|
|
| interface | admin |
|
|
| region | RegionOne |
|
|
| region_id | RegionOne |
|
|
| service_id | 5fb7fd1bb2954fddb378d4031c28c0e4 |
|
|
| service_name | ceilometer |
|
|
| service_type | metering |
|
|
| url | http://controller:8777 |
|
|
+--------------+----------------------------------+
|
|
|
|
Install and configure components
|
|
--------------------------------
|
|
|
|
.. only:: obs
|
|
|
|
#. Install the packages:
|
|
|
|
.. code-block:: console
|
|
|
|
# zypper install openstack-ceilometer-api \
|
|
openstack-ceilometer-collector \
|
|
openstack-ceilometer-agent-notification \
|
|
openstack-ceilometer-agent-central python-ceilometerclient
|
|
|
|
.. only:: rdo
|
|
|
|
#. Install the packages:
|
|
|
|
.. code-block:: console
|
|
|
|
# yum install openstack-ceilometer-api \
|
|
openstack-ceilometer-collector openstack-ceilometer-notification \
|
|
openstack-ceilometer-central python-ceilometerclient
|
|
|
|
.. only:: ubuntu or debian
|
|
|
|
#. Install the packages:
|
|
|
|
.. code-block:: console
|
|
|
|
# apt-get install ceilometer-api ceilometer-collector \
|
|
ceilometer-agent-central ceilometer-agent-notification
|
|
python-ceilometerclient
|
|
|
|
.. only:: debian
|
|
|
|
Respond to prompts for
|
|
:doc:`Identity service credentials <debconf/debconf-keystone-authtoken>`,
|
|
:doc:`service endpoint registration <debconf/debconf-api-endpoints>`,
|
|
and :doc:`message broker credentials <debconf/debconf-rabbitmq>`.
|
|
|
|
2. Edit the ``/etc/ceilometer/ceilometer.conf`` file and complete
|
|
the following actions:
|
|
|
|
* In the ``[database]`` section, configure database access:
|
|
|
|
.. code-block:: ini
|
|
|
|
[database]
|
|
...
|
|
connection = mongodb://ceilometer:CEILOMETER_DBPASS@controller:27017/ceilometer
|
|
|
|
Replace ``CEILOMETER_DBPASS`` with the password you chose for the
|
|
Telemetry service database. You must escape special characters such
|
|
as ':', '/', '+', and '@' in the connection string in accordance
|
|
with `RFC2396 <https://www.ietf.org/rfc/rfc2396.txt>`_.
|
|
|
|
.. only:: obs or rdo or ubuntu
|
|
|
|
* In the ``[DEFAULT]`` and ``[oslo_messaging_rabbit]`` sections,
|
|
configure ``RabbitMQ`` message queue access:
|
|
|
|
.. code-block:: ini
|
|
|
|
[DEFAULT]
|
|
...
|
|
rpc_backend = rabbit
|
|
|
|
[oslo_messaging_rabbit]
|
|
...
|
|
rabbit_host = controller
|
|
rabbit_userid = openstack
|
|
rabbit_password = RABBIT_PASS
|
|
|
|
Replace ``RABBIT_PASS`` with the password you chose for the
|
|
``openstack`` account in ``RabbitMQ``.
|
|
|
|
* In the ``[DEFAULT]`` and ``[keystone_authtoken]`` sections,
|
|
configure Identity service access:
|
|
|
|
.. code-block:: ini
|
|
|
|
[DEFAULT]
|
|
...
|
|
auth_strategy = keystone
|
|
|
|
[keystone_authtoken]
|
|
...
|
|
auth_uri = http://controller:5000
|
|
auth_url = http://controller:35357
|
|
memcached_servers = controller:11211
|
|
auth_type = password
|
|
project_domain_id = default
|
|
user_domain_id = default
|
|
project_name = service
|
|
username = ceilometer
|
|
password = CEILOMETER_PASS
|
|
|
|
Replace ``CEILOMETER_PASS`` with the password you chose for
|
|
the ``ceilometer`` user in the Identity service.
|
|
|
|
* In the ``[service_credentials]`` section, configure service credentials:
|
|
|
|
.. code-block:: ini
|
|
|
|
[service_credentials]
|
|
...
|
|
os_auth_url = http://controller:5000/v2.0
|
|
os_username = ceilometer
|
|
os_tenant_name = service
|
|
os_password = CEILOMETER_PASS
|
|
os_endpoint_type = internalURL
|
|
os_region_name = RegionOne
|
|
|
|
Replace ``CEILOMETER_PASS`` with the password you chose for
|
|
the ``ceilometer`` user in the Identity service.
|
|
|
|
.. only:: obs
|
|
|
|
* In the ``[collector]`` section, configure the dispatcher:
|
|
|
|
.. code-block:: ini
|
|
|
|
[collector]
|
|
...
|
|
dispatcher = database
|
|
|
|
* (Optional) To assist with troubleshooting, enable verbose
|
|
logging in the ``[DEFAULT]`` section:
|
|
|
|
.. code-block:: ini
|
|
|
|
[DEFAULT]
|
|
...
|
|
verbose = True
|
|
|
|
Finalize installation
|
|
---------------------
|
|
|
|
.. only:: obs
|
|
|
|
* Start the Telemetry services and configure them to start when the
|
|
system boots:
|
|
|
|
.. code-block:: console
|
|
|
|
# systemctl enable openstack-ceilometer-api.service \
|
|
openstack-ceilometer-agent-notification.service \
|
|
openstack-ceilometer-agent-central.service \
|
|
openstack-ceilometer-collector.service
|
|
# systemctl start openstack-ceilometer-api.service \
|
|
openstack-ceilometer-agent-notification.service \
|
|
openstack-ceilometer-agent-central.service \
|
|
openstack-ceilometer-collector.service
|
|
|
|
.. only:: rdo
|
|
|
|
* Start the Telemetry services and configure them to start when the
|
|
system boots:
|
|
|
|
.. code-block:: console
|
|
|
|
# systemctl enable openstack-ceilometer-api.service \
|
|
openstack-ceilometer-notification.service \
|
|
openstack-ceilometer-central.service \
|
|
openstack-ceilometer-collector.service
|
|
# systemctl start openstack-ceilometer-api.service \
|
|
openstack-ceilometer-notification.service \
|
|
openstack-ceilometer-central.service \
|
|
openstack-ceilometer-collector.service
|
|
|
|
.. only:: ubuntu or debian
|
|
|
|
* Restart the Telemetry services:
|
|
|
|
.. code-block:: console
|
|
|
|
# service ceilometer-agent-central restart
|
|
# service ceilometer-agent-notification restart
|
|
# service ceilometer-api restart
|
|
# service ceilometer-collector restart
|