| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|\ \
| |/
|/| |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Rbac context is limited not by policy but is inherently built in
as we cannot enforce policy on a list.
This patch drops the dummy policy, the invalid context_is_project
and context_is_admin policies, and ensures policy rbac can restrict
on admin appropriately.
Closes-Bug: #1504495
Change-Id: Id3b1ad71aea46456c6e6c1995776b988017d4786
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This adds the CORS support middleware to Ceilometer, allowing a deployer
to optionally configure rules under which a javascript client may
break the single-origin policy and access the API directly. Included
are Ceilometer's custom headers, so that anyone activating this
middleware does not have to explicitly enable them.
The paste.ini method of deploying the middleware was
chosen, because it needs to be able to annotate responses created
by keystonemiddleware.
OpenStack CrossProject Spec:
http://specs.openstack.org/openstack/openstack-specs/specs/cors-support.html
Oslo_Middleware Docs:
http://docs.openstack.org/developer/oslo.middleware/cors.html
OpenStack Cloud Admin Guide:
http://docs.openstack.org/admin-guide-cloud/cross_project_cors.html
Change-Id: I90d2a53c40e3c353abe3cf37bd7deb3a07aeb043
|
|\ \ |
|
| |/
| |
| |
| | |
Change-Id: I282bf449486db626efa92fcce6d035106d5006bf
|
|/
|
|
|
|
| |
There's no "orchestration" type in Gnocchi, it's called "stack".
Change-Id: I28d98aee7b953d9dfb423571c297046226309602
|
|
|
|
|
|
|
| |
we added cpu.delta in liberty to capture cputime between polls.
this adds it to the metric list for instance resource.
Change-Id: Ib494f7d119cda370aa8291fd404dad38c0c53817
|
|
|
|
|
|
|
|
|
| |
Since we moved all the alarming code and subsystem to the Aodh project,
remove it from Ceilometer.
Depends-On: I3983128d2d964b0f1f3326948b27f5d94df65a04
Depends-On: I99c9f2be0bbc70f289da5c2ba22698b8b7dc4495
Change-Id: Id169a914c1d1f2f5ad03ebb515d3d052204d5c5c
|
|
|
|
|
|
|
| |
Otherwise people may think that it is available for installation. It
is not, it is for testing only.
Change-Id: Iad19536fba569c6a9d43c07c64746e7f6ffde986
|
|
|
|
|
|
|
|
| |
We don't need a separate script to wrap the oslo-config-generator. Like
other projects, we can just specify a config-generator config file to
define the namespaces.
Change-Id: I9ee06658d49163f041df18a62b33fa2804f545b8
|
|\ |
|
| |
| |
| |
| |
| |
| |
| | |
image_ref attr should match to image_ref in metadata, not image_ref_url
Closes-Bug: #1506595
Change-Id: Iddaf2f286657c108af51f761232375a6514e83f1
|
|/
|
|
|
|
|
|
|
|
| |
'split' plugin can be replaced by an jsonpath expresion
since jsonpath-rw-ext>=0.1.8.
This change deprecates it
Depends-On: I8cd971d6dd98cd6c4c3dc83696969c47e8cdd8ac
Change-Id: Iac2253c81dacaa1b2a2258569716d20916fc9920
|
|
|
|
| |
Change-Id: I3de9685dad82f02fc2f4b2b680cf4eac8fe1ca66
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
this patch adds support for a delta transformer. the transformer's
only functionality is to calculate the delta between current sample
and previous sample.
conditions:
- it will disregard any out of order samples
- a growth_only param is available to capture only positive deltas
- supports renaming to a new meter name using same schema as other
transformers.
using this transformer, we also create a cpu.delta meter which will
enable another view of cpu meter. this delta meter will allow for
(relatively) accurate cputime calculations and will cope with cputime
resets.
DocImpact
Change-Id: Iabcad20d500e3157e4d19f8b2ebffd770218165b
Closes-Bug: #1417949
|
|/
|
|
|
|
|
|
|
|
| |
This change add instance_network_interface and instance_disk to
Gnocchi dispatcher.
It also adds some missing metadata to samples to build the Gnocchi
resource.
Change-Id: Ic7babe73befbe0fff741d0c0c764ded493dc8c8e
|
|
|
|
|
|
|
|
| |
With the new Image-Volume cache added in to Cinder there will be some
new notifications sent from the Cinder services. This adds new event
definitions for them.
Change-Id: Ice70049dd13018be863eee8f3ba02d977e5ab88c
Closes-Bug: #1493960
|
|\ |
|
| |
| |
| |
| | |
Change-Id: I5f953217f616e1c2d62d884fd808746c65a66436
|
|\ \
| |/
|/| |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The ceilometer audit events stored at the ceilometer database
currently don't have user_id/project_id associated with them
even though this information is available as part of the event
message payload. The user_id and project_id information has to
be stored as traits so that there's user/project context for each
event and these traits are required to apply RBAC-based rules
and filters on events. For eg., presence of these traits enable
db queries - like get all events for a project/user against events.
The audit event definition in the events yaml file already stores
payload.initiator.id as initiator_id but the initiator_id trait
is not a common trait across all events and thus this trait cannot
be used to apply RBAC filter against events.This changeset will
thus add user_id and project_id traits to the audit events namely
*.http.* and add useri_id and project_id as default traits for all
events.
DocImpact
Change-Id: If4034342c4e60d519f0ec96ae8895dcf78f8ad3b
blueprint: events-rbac
|
|/
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The ceilometer events RBAC is currently hard-coded so
that only an admin user can view events.The end-user
should be able to customize who should be able to view
events rather than hard-coding the control to admins.
This changeset adds two new rules into the policy.json
so that RBAC for events index and show methods can be
configured using the policy.json file.
DocImpact
Change-Id: I7bf4d385b9ee8fa8f1097b6400cbbc4135f2a9b6
blueprint: events-rbac
|
|
|
|
|
|
|
|
|
| |
This change use jsonpath_rw_ext instead of jsonpath_rw
It also remove the useless attributes list by a dict in the
yaml configuration.
Change-Id: I6014181d6d4d45ffa9769da9670b11d79d6910fc
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Include the new entry point for meters notifications
and deprecate the migrated ones. Also add the exchange
controls to the notification agent directly.
As a first step, this commit converts glance, magnetodb
and orchestration meters.
Partially Implements: blueprint declarative-notifications
Depends-On: I9de94c5ac6349c3b46adbacb77fc877b5201285c
Change-Id: I45ea9ab20bbed1ec12b91a20977e8adb52bf59da
|
|
|
|
|
|
| |
add missing meters and fix incorrect mappings.
Change-Id: I2ae7a3dcb6571cf84d2070dc2bc2ff819649feec
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Transformation of samples to gnocchi resources/metrics is
just json2json think, so do it in a declarative ways like we do
for event and declarative notification.
Implements blueprint gnocchi-declarative-resources
Change-Id: I5a202c30614d06821063e243d4e2330736aba5fd
|
|\ \
| |/
|/| |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Ceilometer handles Designate CRUD notifications
as events, but not the exists notification.
This fix handles the exists notification as
event and sample for measurable audit interval.
Change-Id: I53d63cc4c8bcc6924afb0560bd8482d94e564895
Closes-Bug: 1474608
|
|\ \
| |/
|/| |
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
direct publisher is mainly for testing and was used for event
pipeline to maintain consistency with previous functionality. this
patch makes notifier default to move storage load to collector
where it should be.
Change-Id: I2b12ac8afcd6e66e36d03276198f2d8e310b518f
|
|\ \ |
|
| |/
| |
| |
| |
| |
| |
| |
| |
| | |
this patch adds support for Trove crud notifications
as events in ceilometer, and a notification plugin to
emit sample for the trove exists event.
Change-Id: I932941c88e7c8e9f059c97ec41ac098263e38803
Partially-Implements: blueprint track-dbaas-notifications
|
|\ \
| |/
|/| |
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This is the initial support to migrate some basic meters to
leverage declarative approach.
Partially Implements: blueprint declarative-notifications
Change-Id: I64a4b2925981cfa14dc22ae30acd1f17821c9a2c
|
|/
|
|
|
|
|
|
| |
the old pipeline format was deprecated as of icehouse. this patch
switches all tests to use current pipeline format and drops support
for old pipeline.
Change-Id: Ide53c1c5beab4a586324c4727dba3a9e200f8082
|
|
|
|
|
|
| |
Moving dispatcher code from gnocchi to ceilometer.
Change-Id: Iaa9c31a4330b1bf40617afbab8be152a4103fca0
|
|
|
|
|
|
|
|
| |
this patch adds support for dns crud notifications
as events in ceilometer.
Change-Id: I7287a160b510bdb91a68594874bbbba45e6a210f
Partially-Implements: blueprint dns-service-notifications
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This updates the mod_wsgi configuration and installation information
to be more in line with current usage. It also makes the
recommendation to use mod_wsgi more strongly than has been made in
the past. In general we don't want people to be running
ceilometer-api at all, but it is good for them to have the option.
Also an effort has been made to clarify the difference between rpm
and deb installations of Apache.
DocImpact
Change-Id: I11f92d91f4bdea884c266b91b52f9d012abd33b9
Partially-Implements: blueprint remove-web-eventlet
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The Oslo libraries have moved all of their code out of the 'oslo'
namespace package into per-library packages. The namespace package was
retained during kilo for backwards compatibility, but will be removed by
the liberty-2 milestone. This change removes the use of the namespace
package, replacing it with the new package names.
The patches in the libraries will be put on hold until application
patches have landed, or L2, whichever comes first. At that point, new
versions of the libraries without namespace packages will be released as
a major version update.
Please merge this patch, or an equivalent, before L2 to avoid problems
with those library releases.
Blueprint: remove-namespace-packages
https://blueprints.launchpad.net/oslo-incubator/+spec/remove-namespace-packages
Change-Id: I2eeef93ee2e61a721c69f62add819f93f62f077d
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The default rule is broken in the current implementation of
ceilometer rbac, because ceilometer rbac.py does not leverage
the support provided by oslo_policy . It instead tries to
loop through all the rules in the policy.json to check if the
rule corresponding to the requested REST api matches with the
any in the policy.json. In this process, it completely ignores
the existence of the default rule.
Closes-Bug: 1435855
Change-Id: Icab626b28d14514b0f024df447a8e7f35c52257c
|
|/
|
|
|
|
|
|
|
|
| |
The event definition for an authenticate event is simply:
identity.authenticate
there is no trailing period.
Change-Id: Ie9c3fd66abea2b02411e6f3a01051f59a94bf284
Closes-Bug: 1439538
|
|
|
|
|
|
|
| |
Notifications for identity CRUD events will now include the project
id (or domain id if a domain scoped token is used).
Change-Id: I467bc1b66bf35b98b34c9ab9026937fe1bd228e5
|
|
|
|
|
|
|
| |
The event type that is defined by default is incorrect, it's missing
an asterisk, that will pick up the 'create' and 'delete' keywords.
Change-Id: I93175f7beaca3b7961d0431fd8c6ba819b3f164b
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| | |
this patch adds the remaining 'existence' meters we generate from
notifications.
Change-Id: I7695f4967944eee0d1e20acf3c9b9bc9c32a6a4a
Partial-Bug: #1384874
|
|/
|
|
|
|
|
|
| |
Keystone has started to emit events for CRUD events on more
resources, specifically: regions, policy, endpoint and service.
Change-Id: I6d5f21474dd8f7694ea28b91544ad93c0b421bf9
Closes-Bug: 1429337
|
|
|
|
|
|
|
|
|
|
| |
Since the Keystone team will be moving to CADF events, where the
initiator is included, we should attempt to retrieve the id if
it's available.
Closes-Bug: 1429339
Change-Id: Ia5c3723cdb587aa87c3e3083c03c9de3f799772b
|