|
|
楼主 |
发表于 2018-12-23 22:58:43
|
显示全部楼层
[1] Add users and others for Gnocchi in Keystone./ P3 a+ Q$ c9 a/ i: }
# add gnocchi user (set in service project)2 N+ u. W2 g* {1 Z4 R
[root@dlp ~(keystone)]# openstack user create --domain default --project service --password servicepassword gnocchi * R( n v# U6 q I, D2 k4 l: n
+---------------------+----------------------------------+& d m- m) Q4 N" Y
| Field | Value |
/ q/ _6 M7 E+ s+---------------------+----------------------------------+9 O: W5 L& N4 l! T
| default_project_id | b1da1070c8af427886d0202f8bbe414f |+ l' }$ w$ ?7 x% B" O9 P2 H
| domain_id | default |
% S6 O, B4 }$ || enabled | True |1 D* P0 v T/ [( U5 ?5 v
| id | c88a3abbad194ec9a18c101a91a60576 |& n' ?% X- |! h, @
| name | gnocchi |
& h4 ~1 e( _5 A2 H5 [) p| options | {} |
' ?, n* H2 U* |# c- c. P( n| password_expires_at | None |
7 t% `6 d; }" ^$ S, T2 E7 M+---------------------+----------------------------------+
' d3 u6 d4 x0 ~- l: S9 \' e+ D3 L2 Z3 K& `9 T% h: g% t) s
# add gnocchi user in admin role. ]8 D# r5 t, d, I
[root@dlp ~(keystone)]# openstack role add --project service --user gnocchi admin
. g: c3 j i- n+ g. M& Z, M# add service entry for gnocchi5 g. ]2 `$ s+ I" ~4 `
[root@dlp ~(keystone)]# openstack service create --name gnocchi --description "Metric Service" metric . K% |" T; A( ~+ G
+-------------+----------------------------------+& N$ z2 I$ _' d9 w
| Field | Value |1 ]) T& ~' A$ l- s. p! I7 P
+-------------+----------------------------------+: Y8 G) f' c$ a9 G) U
| description | Metric Service |
6 B2 ?+ {) d9 m, K- j| enabled | True |
: I- h$ c# x. @* c| id | c1e4e9055d38453490e6b7e283a4c547 |
+ w; {, o0 ]& s S| name | gnocchi |
$ a: J2 z! t4 _; x5 ]' ]8 D| type | metric |$ r2 n9 q2 i, H {3 Y5 D) h
+-------------+----------------------------------+
9 ]/ g5 F+ ]' [* t j5 w: {; h0 J5 P. b! d
# define keystone host
9 p) A" v% \. p. N' j7 M[root@dlp ~(keystone)]# export controller=10.0.0.30/ H* E9 o/ U2 o9 d
# add endpoint for gnocchi (public)
: `8 z& Z7 U6 y# U- X9 t[root@dlp ~(keystone)]# openstack endpoint create --region RegionOne metric public http://$controller:8041
7 }9 o5 d" \+ G l" x8 k7 f9 X3 V+--------------+----------------------------------+* i: ]4 a5 j, G/ ~+ a0 a$ m# p$ e' R
| Field | Value |
0 U/ o! r5 e& }9 h* ~7 N$ C+--------------+----------------------------------+
& j, k. N. \7 d& m3 o| enabled | True |
$ {. Z$ O" X8 A [" {8 t9 V' K| id | 1b3aa18b5d474af7915f366414fe71da |
4 G* ]( g/ k8 \+ _8 I8 w| interface | public |
& W, b/ \3 v3 G8 Z| region | RegionOne |0 ]% Z, @7 o8 M) Y! r) I9 \
| region_id | RegionOne |
/ [; B3 ?: K3 L( b/ I| service_id | c1e4e9055d38453490e6b7e283a4c547 |
" P* J1 i D" a) b2 @| service_name | gnocchi |
; R- D" T/ b1 R' L* j( a4 w8 }* I: M| service_type | metric |
- j: \( f( {' t4 k| url | http://10.0.0.30:8041 |
0 U i# v) J& P6 E" _% A7 |( l6 J' l; S+--------------+----------------------------------+' c6 s1 P* |' F. ]& k6 ~
& M$ V# s) \$ g" X! M6 q8 {
# add endpoint for gnocchi (internal)
4 _! ?& |3 Y* [6 w O1 ~[root@dlp ~(keystone)]# openstack endpoint create --region RegionOne metric internal http://$controller:8041
, H9 J2 f: g& H( D+--------------+----------------------------------+6 H7 p. S, o' D
| Field | Value |
" S8 }: R8 J$ `- }2 t0 U5 T; b+--------------+----------------------------------+
4 S/ Q, X8 Q) t$ v7 E/ M8 ^| enabled | True |/ G( f. \& R0 m! { M) O
| id | 88fcc0e358124e46bc196e9bf2d5d73a |
5 ]8 R+ L9 ?! B4 q| interface | internal |
4 b0 N4 Q* g' a) R| region | RegionOne |
" {: R5 C, d" _1 ^6 k ]| region_id | RegionOne |
: |' B. ^6 `6 ?4 F: A| service_id | c1e4e9055d38453490e6b7e283a4c547 |$ s* M5 M# ]0 f+ A
| service_name | gnocchi |+ J+ R2 a' Y+ C$ ?! T$ l; x
| service_type | metric |
' ^! N c& x: T+ L+ d| url | http://10.0.0.30:8041 |" I* `/ u& H, q+ V/ s% ^
+--------------+----------------------------------+0 Y4 Q' a8 ?1 F8 t, U' M3 U/ N
! y3 ~# X9 C6 d# |, X
# add endpoint for gnocchi (admin)' _6 r2 v( \: t/ u4 I) a
[root@dlp ~(keystone)]# openstack endpoint create --region RegionOne metric admin http://$controller:8041 1 l4 j$ t, G: ~
+--------------+----------------------------------++ A2 w& c! C+ `& ^3 n6 ?% ~5 `
| Field | Value |
1 \% o9 g1 T+ ~6 T3 J+--------------+----------------------------------+
; l) V+ R. g1 r$ ]- X* m| enabled | True |
' r% E: l( p) u) q. v| id | f7d7e9d8dd3c464a8a579b7defd2e575 |, h/ _3 s* m3 B: }5 m2 J# U+ P
| interface | admin |% X6 B+ r0 d- i& `# |5 m+ t
| region | RegionOne |! C# n4 j. C6 Z4 {* J
| region_id | RegionOne |% C5 V: }' K4 f
| service_id | c1e4e9055d38453490e6b7e283a4c547 |1 e# G9 F1 U7 e& ?4 f; c2 k* D+ u
| service_name | gnocchi |, v2 Q4 G5 ^' a6 Y M/ N( G, e
| service_type | metric |
) J/ z+ j% P4 R* s3 C| url | http://10.0.0.30:8041 |& X4 F* K) f8 R# ?
+--------------+----------------------------------+; R6 ?! q. U8 e; Y- `, V
[2] Add a User and Database on MariaDB for Gnocchi.3 a6 z: A2 P% ?+ j* W" V$ I
[root@dlp ~(keystone)]# mysql -u root -p
3 K/ [( E/ a" I. dEnter password:$ ]3 @" ^3 F7 e+ _! q* u/ f1 N
Welcome to the MariaDB monitor. Commands end with ; or \g. Q6 J' N$ |, x* t/ ~+ b$ x
Your MariaDB connection id is 710 T8 N9 t1 `' m @+ w- t& d* k
Server version: 10.1.20-MariaDB MariaDB Server4 R! u( h; x& H4 A n" Y
5 k( ~) ?+ V0 i# g9 E
Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others.$ X* i" V2 p2 M* k4 v* T
6 G& u" W- E- W! NType 'help;' or '\h' for help. Type '\c' to clear the current input statement.
& A: h7 b. x) u. M# T- f$ R1 u1 H' o: O# c* s0 L. I
MariaDB [(none)]> create database gnocchi; 5 z" N- T1 ~- ^+ o0 S. h* K
Query OK, 1 row affected (0.00 sec): L0 M% B- j `3 }; e* i7 j3 h
MariaDB [(none)]> grant all privileges on gnocchi.* to gnocchi@'localhost' identified by 'password';
& V7 @6 d; c$ p3 tQuery OK, 0 rows affected (0.00 sec)$ U' K8 h' F% E' T1 ]0 J
MariaDB [(none)]> grant all privileges on gnocchi.* to gnocchi@'%' identified by 'password';
' ?" _8 ~$ ^0 o3 k5 h% a) ]8 \7 F9 XQuery OK, 0 rows affected (0.00 sec)9 R4 V6 F( p' N' P6 w7 D
MariaDB [(none)]> flush privileges;
$ ]& T' G: ^& p7 x: X5 S( O+ wQuery OK, 0 rows affected (0.00 sec)
) C. X+ @) @1 N, j0 GMariaDB [(none)]> exit 1 H! k* G; m- n" D$ r, h) r1 L
Bye
/ Z5 r% b. P9 z4 w2 p; V[3] Install Gnocchi.
& ^" a- m4 u* N$ |# install from Queens, EPEL) P7 B+ E3 b. @9 F G! s: N# g% {: X
[root@dlp ~(keystone)]# yum --enablerepo=centos-openstack-queens,epel -y install openstack-gnocchi-api openstack-gnocchi-metricd python2-gnocchiclient/ ~) w6 g4 i9 p6 k$ e4 [& h7 t
[4] Configure Gnocchi.
G! T7 _8 l3 W$ M, M$ b[root@dlp ~(keystone)]# mv /etc/gnocchi/gnocchi.conf /etc/gnocchi/gnocchi.conf.org ! e4 C( k4 p+ ^4 y( p
[root@dlp ~(keystone)]# vi /etc/gnocchi/gnocchi.conf9 ^9 e0 A$ H( u
# create new, x8 \/ u$ H4 R
[DEFAULT]8 x Y1 ~0 Q/ E( T- ]
log_dir = /var/log/gnocchi* |8 ~" p) M. J6 s+ U) _
% j! w5 u9 p3 h2 u. z4 c1 u
[api]
6 _) a, S" D W9 e3 hauth_mode = keystone
+ g) P( ] V& e+ `' h. R0 B4 M6 r0 l7 A. f- {" m' a" k; ~
[database]
0 C( Q; s. V; X2 r+ c7 c( r0 X. Kbackend = sqlalchemy2 v' x* l5 Q( V% O# T O/ o# a$ m, C$ k
% X$ L* _* I: d5 K1 `
# MariaDB connection info
. A3 ]6 I/ S6 D' h$ v: Z[indexer]" @7 Q! d+ D$ r( d6 ~ G1 O0 E
url = mysql+pymysql://gnocchi:password@10.0.0.30/gnocchi2 C$ X( v' V4 m o/ ~1 ]
F- D/ A; g( i9 s8 B
[storage]
1 U3 e) i$ y8 a ddriver = file
3 `; y; k1 e' r- o' W# L0 b% S8 Vfile_basepath = /var/lib/gnocchi, c: ]/ T' f! y5 ^
9 o& `3 a) _! q0 u0 H+ D6 l, r1 D# Keystone auth info
! z$ n$ z! p" A( t z$ Z7 {* W$ a% R8 E[keystone_authtoken]
/ w# `% ? U' i6 owww_authenticate_uri = http://10.0.0.30:5000
* w1 a( e& A4 m) [: f2 q, cauth_url = http://10.0.0.30:5000
4 g5 E* U5 \. @- c7 }memcached_servers = 10.0.0.30:11211
' G# S; j* V+ a& R( iauth_type = password
7 _. i( [( o3 x0 B3 o' b, X# uproject_domain_name = default
) L+ \1 q% _- o* Ruser_domain_name = default8 ?! }7 V0 U& l) F+ Y v
project_name = service
6 Q, M, f! b* B5 M1 nusername = gnocchi
; b( o9 ~1 l/ U! q; D+ P7 R: J5 gpassword = servicepassword
* a9 T6 E3 o+ W% W3 Tservice_token_roles_required = true
5 \. y; H$ g# v' l" R! D5 s- t0 c7 A# U
[root@dlp ~(keystone)]# vi /etc/httpd/conf.d/10-gnocchi_wsgi.conf3 H6 V) m% l! ?6 {* F8 f
# create new: s1 h- m8 U: t
Listen 8041' P- h4 s+ \5 `* U2 p
<VirtualHost *:8041>1 P/ Q, E7 r' V+ B& }
DocumentRoot /var/www/cgi-bin/gnocchi
. z. i5 `/ |: P! |; x( r* i5 _$ i+ }( V7 L/ _$ z
<Directory /var/www/cgi-bin/gnocchi>( B) V# Q) W/ h. v4 D; ]8 U& X
AllowOverride None- p9 W3 a* C3 A% `
Require all granted2 w& b1 R8 `5 t9 R, D4 u' y
</Directory>3 U. i* B4 a( f% M/ z( c
* M6 E5 s$ C/ j1 ]. q7 Q CustomLog /var/log/httpd/gnocchi_wsgi_access.log combined9 K! {" `) c4 {2 h' i7 ~- G$ D
ErrorLog /var/log/httpd/gnocchi_wsgi_error.log
; y4 L, T; Y& x( X SetEnvIf X-Forwarded-Proto https HTTPS=1
, |4 E- N& l8 ]- F WSGIApplicationGroup %{GLOBAL}/ P- {4 {" M$ n0 T
WSGIDaemonProcess gnocchi display-name=gnocchi_wsgi user=gnocchi group=gnocchi processes=6 threads=6
5 j* s; D5 H! m9 |- P/ m) w WSGIProcessGroup gnocchi
. J9 s6 D( q4 U9 U0 ] WSGIScriptAlias / /var/www/cgi-bin/gnocchi/app
; x& V$ B& E6 b7 ~</VirtualHost>
1 c) Z, P9 F ^% d/ I# @
9 q# @" j5 H) p q& H- ]3 }3 ~[root@dlp ~(keystone)]# chmod 640 /etc/gnocchi/gnocchi.conf 8 {2 g: R: s0 {, g) a0 A9 c
[root@dlp ~(keystone)]# chgrp gnocchi /etc/gnocchi/gnocchi.conf 3 p3 [. U1 c! k% j
[root@dlp ~(keystone)]# mkdir /var/www/cgi-bin/gnocchi
: l% ~' i- }0 R* z3 |6 K/ N[root@dlp ~(keystone)]# cp /usr/lib/python2.7/site-packages/gnocchi/rest/gnocchi-api /var/www/cgi-bin/gnocchi/app
- ?; Z4 \2 N; n8 e; x; W: ~[root@dlp ~(keystone)]# chown -R gnocchi. /var/www/cgi-bin/gnocchi
2 o! R3 m6 D2 e3 K/ U[root@dlp ~(keystone)]# su -s /bin/bash gnocchi -c "gnocchi-upgrade"
% i) k# T1 V2 L. ~9 i. c8 q# [[root@dlp ~(keystone)]# systemctl start openstack-gnocchi-metricd
* u5 [& R& E3 n/ [[root@dlp ~(keystone)]# systemctl enable openstack-gnocchi-metricd
. B+ c4 u# `9 \* c[root@dlp ~(keystone)]# systemctl restart httpd
0 ]' i8 Z. X& D4 b k2 \# show status
, d' B) n% D9 Z% M; I+ E" Droot@dlp ~(keystone)# export OS_AUTH_TYPE=password - Y; X) h) F; i5 C
root@dlp ~(keystone)# gnocchi resource list, ^1 }: ?, v0 \: H$ c2 O
# no problem if no error is shown
! }& d6 t( \( `- D, v[5] If SELinux is enabled, change policy.
( r; C v2 `' i# H' O; D[root@dlp ~(keystone)]# semanage port -a -t http_port_t -p tcp 8041 " @8 G* \$ c8 ?4 ?6 N1 G
[6] If Firewalld is running, allow service port.9 N) D7 j; w5 m2 s
[root@dlp ~(keystone)]# firewall-cmd --add-port=8041/tcp --permanent 8 i. U6 N& J; i- ?
success4 o% n' Y) U2 j# _5 u5 F8 d+ H- b& V3 p
[root@dlp ~(keystone)]# firewall-cmd --reload
$ }( W- z7 {" x- wsuccess |
|
发表于 2018-12-23 22:56:33