[openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

Jay Faulkner jay at jvf.cc
Wed Mar 26 17:39:50 UTC 2014


Comments inline.

On 3/26/14, 10:28 AM, Eoghan Glynn wrote:
>
>> On 3/25/2014 1:50 PM, Matt Wagner wrote:
>>> This would argue to me that the easiest thing for Ceilometer might be
>>> to query us for IPMI stats, if the credential store is pluggable.
>>> "Fetch these bare metal statistics" doesn't seem too off-course for
>>> Ironic to me. The alternative is that Ceilometer and Ironic would both
>>> have to be configured for the same pluggable credential store.
>> There is already a blueprint with a proposed patch here for Ironic to do
>> the querying:
>> https://blueprints.launchpad.net/ironic/+spec/send-data-to-ceilometer.
> Yes, so I guess there are two fundamentally different approaches that
> could be taken here:
>
> 1. ironic controls the cadence of IPMI polling, emitting notifications
>    at whatever frequency it decides, carrying whatever level of
>    detail/formatting it deems appropriate, which are then consumed by
>    ceilometer which massages these provided data into usable samples
>
> 2. ceilometer acquires the IPMI credentials either via ironic or
>    directly from keystone/barbican, before calling out over IPMI at
>    whatever cadence it wants and transforming these raw data into
>    usable samples
>
> IIUC approach #1 is envisaged by the ironic BP[1].
>
> The advantage of approach #2 OTOH is that ceilometer is in the driving
> seat as far as cadence is concerned, and the model is far more
> consistent with how we currently acquire data from the hypervisor layer
> and SNMP daemons.
Approach #1 permits there to be possible other systems monitoring this
information. Many organizations already have significant hardware
monitoring systems setup, and would not like to replace them with
Ceilometer in order to monitor BMCs registered with Ironic.

I think, especially for Ironic, being able to play nicely with things
outside of Openstack is essential as most users aren't going to replace
their entire datacenter management toolset with Openstack... at least
not yet :).

Thanks,
Jay
> Cheers,
> Eoghan
>
>
> [1]  https://blueprints.launchpad.net/ironic/+spec/send-data-to-ceilometer
>  
>> I think, for terms of credential storage (and, for that matter, metrics
>> gathering as I noted in that blueprint), it's very useful to have things
>> pluggable. Ironic, in particular, has many different use cases: bare
>> metal private cloud, bare metal public cloud, and triple-o. I could
>> easily see all three being different enough to call for different forms
>> of credential storage.
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 601 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140326/ed093f4d/attachment.pgp>


More information about the OpenStack-dev mailing list