openstack/puppet-gnocchi
Code Issues Proposed changes
OpenStack Gnocchi Puppet Module
524 Commits 9 Branches 109 Tags 5.4 MiB
Ruby 53.1%
Puppet 41.2%
Python 5.7%
f3c8731fcd
Go to file
Takashi Kajinami f3c8731fcd Accept system scope credentials for Keystone API request 
This change is the first step to support secure RBAC and allows usage
of system scope credentials for Keystone API request.

This change covers the following two items.
 - assignment of system scope roles to system user
 - credential parameters for authtoken middleware

Depends-on: https://review.opendev.org/804325
Change-Id: Ifbe407233c0739038f23c645f2bd544a409bb1cd
2021-11-25 21:14:45 +09:00
doc Update openstackdocstheme to the latest version 2021-09-29 16:06:50 +08:00
examples Convert all class usage to relative names 2019-12-08 23:07:12 +01:00
lib/puppet Allow customizing separator for api-paste.ini 2021-10-15 12:00:29 +09:00
manifests Accept system scope credentials for Keystone API request 2021-11-25 21:14:45 +09:00
releasenotes Accept system scope credentials for Keystone API request 2021-11-25 21:14:45 +09:00
spec Accept system scope credentials for Keystone API request 2021-11-25 21:14:45 +09:00
.gitignore Dissuade .gitignore references to personal tools 2018-10-08 11:39:23 +08:00
.gitreview OpenDev Migration Patch 2019-04-19 19:34:09 +00:00
.zuul.yaml Add Puppet Litmus 2020-09-11 10:14:25 +00:00
bindep.txt Add Puppet package to bindep, for module build 2017-10-27 13:12:41 -07:00
CHANGELOG.md Update and replace http with https for doc links 2017-09-20 19:00:52 -07:00
CONTRIBUTING.rst [ussuri][goal] Add CONTRIBUTING.rst 2020-05-10 22:38:00 +02:00
Gemfile Use openstack_spec_helper from zuul checkout 2020-08-30 22:56:36 +02:00
LICENSE First commit with basic structure 2014-12-29 13:46:13 +01:00
metadata.json Bump puppetlabs-inifile 2021-11-02 13:02:36 +09:00
Rakefile Use puppet-openstack_spec_helper for Rakefile & spec_helper_acceptance 2016-01-28 04:08:48 +00:00
README.md Fix Repository 2019-04-21 12:59:08 +08:00
setup.cfg Add information technology in the setup.cfg 2021-10-01 06:54:49 +08:00
setup.py Delete useless code for setup.py 2021-09-30 13:38:33 +08:00
tox.ini Stop configuring install_command in tox. 2021-09-29 18:05:57 +09:00

README.md

Team and repository tags

Team and repository tags

puppet-gnocchi

Table of Contents

  1. Overview - What is the gnocchi module?
  2. Module Description - What does the module do?
  3. Setup - The basics of getting started with gnocchi
  4. Implementation - An under-the-hood peek at what the module is doing
  5. Limitations - OS compatibility, etc.
  6. Development - Guide for contributing to the module
  7. Contributors - Those with commits
  8. Release Notes - Release notes for the project
  9. Repository - The project source code repository

Overview

The gnocchi module is a part of OpenStack, an effort by the OpenStack infrastructure team to provide continuous integration testing and code review for OpenStack and OpenStack community projects as part of the core software. The module itself is used to flexibly configure and manage the management service for OpenStack.

Module Description

Setup

What the gnocchi module affects:

  • Gnocchi, the HTTP API to store metrics and index resources for OpenStack (OpenStack Datapoint Service).

Installing gnocchi

puppet module install openstack/gnocchi

Implementation

gnocchi

gnocchi is a combination of Puppet manifest and ruby code to delivery configuration and extra functionality through types and providers.

Types

gnocchi_config

The gnocchi_config provider is a children of the ini_setting provider. It allows one to write an entry in the /etc/gnocchi/gnocchi.conf file.

gnocchi_config { 'DEFAULT/debug' :
  value => true,
}

This will write debug=true in the [DEFAULT] section.

name

Section/setting name to manage from gnocchi.conf

value

The value of the setting to be defined.

secret

Whether to hide the value from Puppet logs. Defaults to false.

ensure_absent_val

If value is equal to ensure_absent_val then the resource will behave as if ensure => absent was specified. Defaults to <SERVICE DEFAULT>

Limitations

Load balancing Gnocchi MySQL with HAProxy

Issue

MySQL client/server interaction causes an issue where the HAProxy server will keep a connection in TIME_WAIT. When Gnocchi is processing data it will generate a lot of connections to MySQL and exhaust all available tcp ports for a given IP address. If the HAProxy VIP is shared with other components, this can cause them to be unavailable too. Tuning of HAProxy instance is essential when using Gnocchi with a MySQL behind an HAProxy.

The sysctl parameters need tuning.

  • net.ipv4.tcp_tw_reuse = 1
  • net.core.somaxconn = 4096
  • net.ipv4.tcp_max_syn_backlog = 60000

Additionally, HAProxy can be configured to use different source IP addresses on each backend to help further mitigate the issue.

Development

Developer documentation for the entire puppet-openstack project.

Contributors

The github contributor graph.

Release Notes

Repository