<div dir="ltr">This is a question for a best known method to configure authentication.<br><br>Which version of Gnocchi are you using<br><br>The Gnocchi and related packages installed through YUM and their versions are the following:<br><br>- gnocchi-api.noarch 4.3.2-1.el7<br>
-
gnocchi-common.noarch 4.3.2-1.el7<br>
-
gnocchi-doc.noarch 4.3.2-1.el7<br>
-
gnocchi-metricd.noarch 4.3.2-1.el7<br>
-
gnocchi-statsd.noarch 4.3.2-1.el7<br>
-
collectd.x86_64 5.8.1-1.el7<br>
-
python2-collectd-gnocchi.noarch 1.7.1-1.el7<br><br>How to reproduce your problem<br><br>The cluster is a:<br><br>
-
One controller node<br>
-
Two compute nodes<br>
-
Virtual machines instances<br>
-
Bare metal instances<br><br>OpenStack version Stein installed using PackStack with Telemetry service enabled and the following projects:<br><br>
-
Collectd<br>
-
collectd-gnocchi plugin<br><br>And our existing Gnocchi authentication method is keystone.<br><br>What is the result that you get<br><br>We are collecting data through collected, collectd-gnocchi from our controller and compute nodes without any issue, using keystone authentication method:<br><br>Gnocchi<br><br>[keystone_authtoken]<br>www_authenticate_uri=<a href="http://10.10.10.6:5000/v3">http://10.10.10.6:5000/v3</a><br>auth_uri=<a href="http://10.10.10.6:5000/v3">http://10.10.10.6:5000/v3</a><br>auth_type=password<br>auth_version=v3<br>auth_url=<a href="http://10.10.10.6:5000">http://10.10.10.6:5000</a><br>username=gnocchi<br>password=somepassword<br>user_domain_name=Default<br>project_name=services<br>project_domain_name=Default<br><br>collectd-gnocchi<br><br><Plugin python><br> <Module collectd_gnocchi><br> Auth_Mode keystone<br> Auth_Url "<a href="http://10.10.10.6:5000">http://10.10.10.6:5000</a>"<br> Username admin<br> Project_Name admin<br> Password somepassword<br> User_Domain_Name default<br> Project_Domain_Name default<br> ResourceType controller_node<br> </Module><br></Plugin><br><br>The next step is to enable the collection of data through collected, collectd-gnocchi plugin in virtual machines and bare metal instances but existing keystone configuration requires us to have the collectd-gnocchi password in plaint text.<br><br>What is result that you expected<br><br>What is the best know method to enable our virtual machines and bare metal instances send data from collected through collectd-gnocchi without exposing the gnocchi password in plain text?</div>