OpenStack Ceilometer Charm

Charm does not support setting username/password when relating to mongodb

Bug #1462333 reported by Mario Splivalo
38
This bug affects 7 people
Affects Status Importance Assigned to Milestone
Graylog Charm
Won't Fix
Wishlist
Unassigned
OpenStack Ceilometer Charm
Triaged
Medium
Unassigned
ceilometer (Juju Charms Collection)
Invalid
Medium
Unassigned

Bug Description

Currently Ceilometer charm relates to mongodb without setting special user inside mongodb. Moreover, one can not set username/password for connecting to mongodb.

This is partially mongodb charm issue as it creates mongodb service which is world accessible. Still, ceilometer charm should create user in mongodb and then create ceilometer database accessible only by that user.

Edit: This is exactly the same situation for Graylog charm.

See original description
Nobuto Murata (nobuto)
Changed in ceilometer (Juju Charms Collection):
status: New → Confirmed
Nobuto Murata (nobuto)
tags: added: cpec
Liam Young (gnuoy)
Changed in ceilometer (Juju Charms Collection):
importance: Undecided → Medium
James Page (james-page)
Changed in charm-ceilometer:
importance: Undecided → Medium
status: New → Confirmed
Changed in ceilometer (Juju Charms Collection):
status: Confirmed → Invalid
Ante Karamatić (ivoks)
tags: added: cpe-onsite
removed: cpec
Alvaro Uria (aluria)
tags: added: canonical-bootstack
Revision history for this message
Alvaro Uria (aluria) wrote :

We've hit this bug, too. We want to give read-only access to mongodb so that users can backup or access the collected data directly. However, ceilometer itself accesses the DB without authentication.

Related links:
https://github.com/openstack/charm-ceilometer/blob/master/lib/ceilometer_contexts.py#L46
https://github.com/openstack/charm-ceilometer/blob/master/templates/ocata/ceilometer.conf#L43
https://docs.openstack.org/mitaka/install-guide-ubuntu/ceilometer-install.html
https://docs.openstack.org/mitaka/config-reference/telemetry/telemetry-config-options.html

MongoDB links (v3.6 and v2.4):
https://docs.mongodb.com/manual/administration/configuration/#security-considerations
https://docs.mongodb.com/v2.4/administration/configuration/#security-considerations

Xav Paice (xavpaice)
description: updated
Revision history for this message
Xav Paice (xavpaice) wrote :

I've marked this as new for Ceilometer, and added Graylog because that's affected the same way.

For ceilometer, from Queens onward, this is no longer relevant as we don't use Mongo (gnocchi instead), but we need to make a clear choice about whether we want to fix this for older versions or mark as wontfix.

summary: - Ceilometer charm does not support setting username/password when
- relating to mongodb
+ Charm does not support setting username/password when relating to
+ mongodb
Changed in charm-ceilometer:
status: Confirmed → New
James Page (james-page)
Changed in charm-ceilometer:
status: New → Triaged
Giuseppe Petralia (peppepetra)
Changed in graylog-charm:
importance: Undecided → Wishlist
status: New → Triaged
Revision history for this message
Robert Gildein (rgildein) wrote :

The `auth` and `bind_ip` configuration options are
already in charm-mongodb, but they do not work properly.
That's why I reported these two bugs [1] and [2].

However we will not fix them, because charm-mongodb is
deprecated. Instead, we'll use the new mongodb-operator
charm and add the necessary functionality there.

---
[1]: https://bugs.launchpad.net/charm-mongodb/+bug/1995492
[2]: https://bugs.launchpad.net/charm-mongodb/+bug/1995493

Eric Chen (eric-chen)
Changed in charm-graylog:
status: Triaged → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.