Simon Pasquier | 418cacc | 2016-11-24 17:19:05 +0100 | [diff] [blame] | 1 | |
| 2 | ================================== |
| 3 | aodh |
| 4 | ================================== |
| 5 | |
Nadya Shakhat | 1014c4e | 2017-04-28 16:49:27 +0400 | [diff] [blame] | 6 | Aodh is an alarming service for OpenStack. It used to be a part of Ceilometer, but starting from Mitaka it |
| 7 | is a separate project. Aodh supports several types of alarms like threshold, event, composite and gnocchi-specific. |
Dmitry Kalashnik | 69f4955 | 2017-12-07 15:56:43 +0400 | [diff] [blame] | 8 | In cluster mode, coordination is enabled via tooz with Redis backend. |
Nadya Shakhat | 1014c4e | 2017-04-28 16:49:27 +0400 | [diff] [blame] | 9 | MySQL is used as a data backend for alarms and alarm history. |
Simon Pasquier | 418cacc | 2016-11-24 17:19:05 +0100 | [diff] [blame] | 10 | |
| 11 | Sample pillars |
| 12 | ============== |
| 13 | |
Nadya Shakhat | 1014c4e | 2017-04-28 16:49:27 +0400 | [diff] [blame] | 14 | Cluster aodh service |
Simon Pasquier | 418cacc | 2016-11-24 17:19:05 +0100 | [diff] [blame] | 15 | |
| 16 | .. code-block:: yaml |
| 17 | |
| 18 | aodh: |
| 19 | server: |
| 20 | enabled: true |
Nadya Shakhat | 1014c4e | 2017-04-28 16:49:27 +0400 | [diff] [blame] | 21 | version: mitaka |
| 22 | ttl: 86400 |
Dmitry Kalashnik | 69f4955 | 2017-12-07 15:56:43 +0400 | [diff] [blame] | 23 | cluster: true |
Nadya Shakhat | 1014c4e | 2017-04-28 16:49:27 +0400 | [diff] [blame] | 24 | database: |
| 25 | engine: "mysql+pymysql" |
| 26 | host: 10.0.106.20 |
| 27 | port: 3306 |
| 28 | name: aodh |
| 29 | user: aodh |
| 30 | password: password |
| 31 | bind: |
| 32 | host: 10.0.106.20 |
| 33 | port: 8042 |
| 34 | identity: |
| 35 | engine: keystone |
Dmitry Kalashnik | 69f4955 | 2017-12-07 15:56:43 +0400 | [diff] [blame] | 36 | host: 10.0.106.20 |
Nadya Shakhat | 1014c4e | 2017-04-28 16:49:27 +0400 | [diff] [blame] | 37 | port: 35357 |
| 38 | tenant: service |
| 39 | user: aodh |
Dmitry Kalashnik | 69f4955 | 2017-12-07 15:56:43 +0400 | [diff] [blame] | 40 | password: password |
Nadya Shakhat | 1014c4e | 2017-04-28 16:49:27 +0400 | [diff] [blame] | 41 | message_queue: |
| 42 | engine: rabbitmq |
| 43 | port: 5672 |
| 44 | user: openstack |
| 45 | password: password |
| 46 | virtual_host: '/openstack' |
Petr Jediný | f643325 | 2017-06-08 18:02:41 +0200 | [diff] [blame] | 47 | cache: |
| 48 | members: |
| 49 | - host: 10.10.10.10 |
| 50 | port: 11211 |
| 51 | - host: 10.10.10.11 |
| 52 | port: 11211 |
| 53 | - host: 10.10.10.12 |
| 54 | port: 11211 |
Simon Pasquier | 418cacc | 2016-11-24 17:19:05 +0100 | [diff] [blame] | 55 | |
Mykyta Karpin | 4e6d69b | 2018-07-12 18:19:47 +0300 | [diff] [blame] | 56 | Setting alarm history cleanup |
| 57 | |
| 58 | In order to allow alarm cleanup from one node of the cluster, |
| 59 | server:role field should be set to primary and all others to |
| 60 | secondaey to avoid race conditions. On the example below |
| 61 | expirer is set to run every day at 2:00 AM. By default |
| 62 | it will be run every hour. |
| 63 | |
| 64 | .. code-block:: yaml |
| 65 | |
| 66 | aodh: |
| 67 | server: |
| 68 | role: primary |
| 69 | expirer: |
| 70 | cron: |
| 71 | minute: 0 |
| 72 | hour: 2 |
Simon Pasquier | 418cacc | 2016-11-24 17:19:05 +0100 | [diff] [blame] | 73 | |
Dmitry Kalashnik | 69f4955 | 2017-12-07 15:56:43 +0400 | [diff] [blame] | 74 | Enhanced logging with logging.conf |
| 75 | ---------------------------------- |
| 76 | |
| 77 | By default logging.conf is disabled. |
| 78 | |
| 79 | That is possible to enable per-binary logging.conf with new variables: |
| 80 | * openstack_log_appender - set it to true to enable log_config_append for all OpenStack services; |
| 81 | * openstack_fluentd_handler_enabled - set to true to enable FluentHandler for all Openstack services. |
Oleksii Chupryn | 2ac6700 | 2018-05-04 14:06:32 +0300 | [diff] [blame] | 82 | * openstack_ossyslog_handler_enabled - set to true to enable OSSysLogHandler for all Openstack services. |
Dmitry Kalashnik | 69f4955 | 2017-12-07 15:56:43 +0400 | [diff] [blame] | 83 | |
Oleksii Chupryn | 2ac6700 | 2018-05-04 14:06:32 +0300 | [diff] [blame] | 84 | Only WatchedFileHandler, OSSysLogHandler and FluentHandler are available. |
Dmitry Kalashnik | 69f4955 | 2017-12-07 15:56:43 +0400 | [diff] [blame] | 85 | |
| 86 | Also it is possible to configure this with pillar: |
| 87 | |
| 88 | .. code-block:: yaml |
| 89 | |
| 90 | aodh: |
| 91 | server: |
| 92 | logging: |
| 93 | log_appender: true |
| 94 | log_handlers: |
| 95 | watchedfile: |
| 96 | enabled: true |
| 97 | fluentd: |
| 98 | enabled: true |
Oleksii Chupryn | 2ac6700 | 2018-05-04 14:06:32 +0300 | [diff] [blame] | 99 | ossyslog: |
| 100 | enabled: true |
Dmitry Kalashnik | 69f4955 | 2017-12-07 15:56:43 +0400 | [diff] [blame] | 101 | |
Oleksandr Shyshko | 0b912d8 | 2018-09-04 18:47:40 +0300 | [diff] [blame] | 102 | Enable x509 and ssl communication between Aodh and Galera cluster. |
| 103 | --------------------- |
| 104 | By default communication between Aodh and Galera is unsecure. |
| 105 | |
| 106 | aodh: |
| 107 | server: |
| 108 | database: |
| 109 | x509: |
| 110 | enabled: True |
| 111 | |
| 112 | You able to set custom certificates in pillar: |
| 113 | |
| 114 | aodh: |
| 115 | server: |
| 116 | database: |
| 117 | x509: |
| 118 | cacert: (certificate content) |
| 119 | cert: (certificate content) |
| 120 | key: (certificate content) |
| 121 | |
| 122 | You can read more about it here: |
| 123 | https://docs.openstack.org/security-guide/databases/database-access-control.html |
| 124 | |
Oleksandr Bryndzii | 152fbfc | 2018-10-04 11:40:58 +0300 | [diff] [blame] | 125 | Aodh server with memcached caching and security strategy: |
| 126 | |
| 127 | .. code-block:: yaml |
| 128 | |
| 129 | aodh: |
| 130 | server: |
| 131 | enabled: true |
| 132 | ... |
| 133 | cache: |
| 134 | engine: memcached |
| 135 | members: |
| 136 | - host: 127.0.0.1 |
| 137 | port: 11211 |
| 138 | - host: 127.0.0.1 |
| 139 | port: 11211 |
| 140 | security: |
| 141 | enabled: true |
| 142 | strategy: ENCRYPT |
| 143 | secret_key: secret |
| 144 | |
Simon Pasquier | 418cacc | 2016-11-24 17:19:05 +0100 | [diff] [blame] | 145 | Development and testing |
| 146 | ======================= |
| 147 | |
| 148 | Development and test workflow with `Test Kitchen <http://kitchen.ci>`_ and |
| 149 | `kitchen-salt <https://github.com/simonmcc/kitchen-salt>`_ provisioner plugin. |
| 150 | |
| 151 | Test Kitchen is a test harness tool to execute your configured code on one or more platforms in isolation. |
| 152 | There is a ``.kitchen.yml`` in main directory that defines *platforms* to be tested and *suites* to execute on them. |
| 153 | |
| 154 | Kitchen CI can spin instances locally or remote, based on used *driver*. |
| 155 | For local development ``.kitchen.yml`` defines a `vagrant <https://github.com/test-kitchen/kitchen-vagrant>`_ or |
| 156 | `docker <https://github.com/test-kitchen/kitchen-docker>`_ driver. |
| 157 | |
| 158 | To use backend drivers or implement your CI follow the section `INTEGRATION.rst#Continuous Integration`__. |
| 159 | |
| 160 | The `Busser <https://github.com/test-kitchen/busser>`_ *Verifier* is used to setup and run tests |
| 161 | implementated in `<repo>/test/integration`. It installs the particular driver to tested instance |
| 162 | (`Serverspec <https://github.com/neillturner/kitchen-verifier-serverspec>`_, |
| 163 | `InSpec <https://github.com/chef/kitchen-inspec>`_, Shell, Bats, ...) prior the verification is executed. |
| 164 | |
| 165 | Usage: |
| 166 | |
| 167 | .. code-block:: shell |
| 168 | |
| 169 | # list instances and status |
| 170 | kitchen list |
| 171 | |
| 172 | # manually execute integration tests |
| 173 | kitchen [test || [create|converge|verify|exec|login|destroy|...]] [instance] -t tests/integration |
| 174 | |
| 175 | # use with provided Makefile (ie: within CI pipeline) |
| 176 | make kitchen |
| 177 | |
| 178 | |
| 179 | |
| 180 | Read more |
| 181 | ========= |
| 182 | |
Nadya Shakhat | 1014c4e | 2017-04-28 16:49:27 +0400 | [diff] [blame] | 183 | * https://docs.openstack.org/cli-reference/aodh.html |
| 184 | * https://docs.openstack.org/developer/aodh/ |
Filip Pytloun | 744de4b | 2017-02-02 12:52:17 +0100 | [diff] [blame] | 185 | |
| 186 | Documentation and Bugs |
| 187 | ====================== |
| 188 | |
| 189 | To learn how to install and update salt-formulas, consult the documentation |
| 190 | available online at: |
| 191 | |
| 192 | http://salt-formulas.readthedocs.io/ |
| 193 | |
| 194 | In the unfortunate event that bugs are discovered, they should be reported to |
| 195 | the appropriate issue tracker. Use Github issue tracker for specific salt |
| 196 | formula: |
| 197 | |
| 198 | https://github.com/salt-formulas/salt-formula-aodh/issues |
| 199 | |
| 200 | For feature requests, bug reports or blueprints affecting entire ecosystem, |
| 201 | use Launchpad salt-formulas project: |
| 202 | |
| 203 | https://launchpad.net/salt-formulas |
| 204 | |
| 205 | You can also join salt-formulas-users team and subscribe to mailing list: |
| 206 | |
| 207 | https://launchpad.net/~salt-formulas-users |
| 208 | |
| 209 | Developers wishing to work on the salt-formulas projects should always base |
| 210 | their work on master branch and submit pull request against specific formula. |
| 211 | |
| 212 | https://github.com/salt-formulas/salt-formula-aodh |
| 213 | |
| 214 | Any questions or feedback is always welcome so feel free to join our IRC |
| 215 | channel: |
| 216 | |
| 217 | #salt-formulas @ irc.freenode.net |