Dashboard Guide Red Hat Ceph Storage 8 Monitoring Ceph Cluster with Ceph Dashboard Red Hat Ceph Storage Documentation Team

Commands:
URL: https://host01:8443/ User: admin Password: zbiql951ar
cephadm bootstrap --mon-ip 127.0.0.1 --registry-json cephadm.txt --initial-dashboard-user admin --initial-dashboard-password zbiql951ar --dashboard-password-noupdate --allow-fqdn-hostname
https:// HOST_NAME : PORT
https://host01:8443
ceph mgr services
ssh-copy-id -f -i /etc/ceph/ceph.pub root@ HOST_NAME
ssh-copy-id -f -i /etc/ceph/ceph.pub root@host02 ssh-copy-id -f -i /etc/ceph/ceph.pub root@host03
cephadm shell
ceph -s
dnf udpate cephadm
dnf udpate cephadm-ansible
ansible-playbook -i INVENTORY_FILE cephadm-preflight.yml --extra-vars "ceph_origin=custom upgrade_ceph_packages=true"
ceph health mute DAEMON_OLD_VERSION --sticky ceph osd set noout ceph osd set noscrub ceph osd set nodeep-scrub
ceph osd unset noout ceph osd unset noscrub ceph osd unset nodeep-scrub
cephadm shell
ceph dashboard feature status
ceph dashboard feature disable rgw
ceph dashboard feature enable cephfs
https:// HOST_NAME :8443
cephadm shell
touch dashboard_password.yml
vi dashboard_password.yml
ceph dashboard ac-user-set-password DASHBOARD_USERNAME -i PASSWORD_FILE
ceph dashboard ac-user-set-password admin -i dashboard_password.yml {"username": "admin", "password": "USD2bUSD12USDi5RmvN1PolR61Fay0mPgt.GDpcga1QpYsaHUbJfoqaHd1rfFFx7XS", "roles": ["administrator"], "name": null, "email": null, "lastUpdate": , "enabled": true, "pwdExpirationDate": null, "pwdUpdateRequired": false}
service_type: grafana spec: initial_admin_password: PASSWORD
service_type: grafana spec: initial_admin_password: mypassword
cephadm shell --mount grafana.yml:/var/lib/ceph/grafana.yml
ceph mgr module ls
ceph mgr module enable dashboard
ceph orch apply -i FILE_NAME .yml
ceph orch apply -i /var/lib/ceph/grafana.yml
ceph orch redeploy grafana
https:// HOST_NAME : PORT
https://host01:3000/
cephadm shell
ceph mgr services { "prometheus": "http://10.8.0.101:9283/" }
ceph mgr module enable dashboard
ceph dashboard create-self-signed-cert
ceph mgr services { "dashboard": "https://10.8.0.101:8443/", "prometheus": "http://10.8.0.101:9283/" }
echo -n " PASSWORD " > PASSWORD_FILE ceph dashboard ac-user-create admin -i PASSWORD_FILE administrator
echo -n "p@ssw0rd" > password.txt ceph dashboard ac-user-create admin -i password.txt administrator
unzip rhsso-7.4.0.zip
cd standalone/configuration vi standalone.xml
./add-user-keycloak.sh -u admin
./standalone.sh
cephadm shell CEPH_MGR_HOST ceph dashboard sso setup saml2 CEPH_DASHBOARD_BASE_URL IDP_METADATA IDP_USERNAME_ATTRIBUTE IDP_ENTITY_ID SP_X_509_CERT SP_PRIVATE_KEY
cephadm shell host01 ceph dashboard sso setup saml2 https://dashboard_hostname.ceph.redhat.com:8443 idp-metadata.xml username https://10.70.59.125:8080/auth/realms/realm_name /home/certificate.txt /home/private-key.txt
cephadm shell CEPH_MGR_HOST ceph dashboard sso show saml2
cephadm shell host01 ceph dashboard sso show saml2
cephadm shell CEPH_MGR_HOST ceph dashboard sso enable saml2 SSO is "enabled" with "SAML2" protocol.
cephadm shell host01 ceph dashboard sso enable saml2
https://dashboard_hostname.ceph.redhat.com:8443
ceph dashboard sso enable oauth2
ceph dashboard sso enable oauth2 SSO is "enabled" with "oauth2" protocol.
https:// HOST_NAME | IP_ADDRESS /oauth2/callback
https://dashboard_hostname.ceph.redhat.com:8443
cephadm shell ceph dashboard sso status SSO is "enabled" with "oauth2" protocol.
cephadm shell CEPH_MGR_HOST ceph dashboard sso status
cephadm shell host01 ceph dashboard sso status SSO is "enabled" with "SAML2" protocol.
cephadm shell CEPH_MGR_HOST ceph dashboard sso disable SSO is "disabled".
cephadm shell host01 ceph dashboard sso disable
[localhost:~]USD cat import.keyring [client.test11] key = AQD9S29kmjgJFxAAkvhFar6Af3AWKDY2DsULRg== caps mds = "allow *" caps mgr = "allow *" caps mon = "allow *" caps osd = "allow r"
[localhost:~]USD cat exported.keyring [client.test11] key = AQD9S29kmjgJFxAAkvhFar6Af3AWKDY2DsULRg== caps mds = "allow *" caps mgr = "allow *" caps mon = "allow *" caps osd = "allow r"
https:// DASHBOARD_URL :3000
https://dashboard_url:3000
ceph config set client.rgw rgw_enable_ops_log true
cephadm shell
ceph dashboard set-alertmanager-api-host ALERTMANAGER_API_HOST : PORT
ceph dashboard set-alertmanager-api-host http://10.0.0.101:9093 Option ALERTMANAGER_API_HOST updated
ceph dashboard set-prometheus-api-host PROMETHEUS_API_HOST : PORT
ceph dashboard set-prometheus-api-host http://10.0.0.101:9095 Option PROMETHEUS_API_HOST updated
ceph dashboard set-grafana-api-url GRAFANA_API_URL : PORT
ceph dashboard set-grafana-api-url https://10.0.0.101:3000 Option GRAFANA_API_URL updated
ceph dashboard get-alertmanager-api-host http://10.0.0.101:9093 ceph dashboard get-prometheus-api-host http://10.0.0.101:9095 ceph dashboard get-grafana-api-url http://10.0.0.101:3000
ceph dashboard set-prometheus-api-ssl-verify False
ceph dashboard set-alertmanager-api-ssl-verify False
ceph dashboard set-grafana-api-ssl-verify False
ceph dashboard get-prometheus-api-ssl-verify ceph dashboard get-alertmanager-api-ssl-verify ceph dashboard get-grafana-api-ssl-verify
ceph mgr module disable dashboard ceph mgr module enable dashboard
cephadm shell
ceph config-key set mgr/cephadm/grafana_key -i USDPWD/key.pem ceph config-key set mgr/cephadm/grafana_crt -i USDPWD/certificate.pem
ceph orch reconfig grafana
mkdir /root/internalca cd /root/internalca
openssl ecparam -genkey -name secp384r1 -out USD(date +%F).key
openssl ec -text -in USD(date +%F).key | less
umask 077; openssl req -config openssl-san.cnf -new -sha256 -key USD(date +%F).key -out USD(date +%F).csr
openssl req -text -in USD(date +%F).csr | less
openssl ca -extensions v3_req -in USD(date +%F).csr -out USD(date +%F).crt -extfile openssl-san.cnf
openssl x509 -text -in USD(date +%F).crt -noout | less
cephadm shell
service_type: alertmanager spec: user_data: default_webhook_urls: - "_URLS_"
service_type: alertmanager spec: user_data: webhook_configs: - url: 'http:127.0.0.10:8080'
ceph orch reconfig alertmanager
using: https://chat.googleapis.com/v1/spaces/(xx- space identifyer -xx)/messages posting: {'status': 'resolved', 'labels': {'alertname': 'PrometheusTargetMissing', 'instance': 'postgres-exporter.host03.chest response: 200 response: { "name": "spaces/(xx- space identifyer -xx)/messages/3PYDBOsIofE.3PYDBOsIofE", "sender": { "name": "users/114022495153014004089", "displayName": "monitoring", "avatarUrl": "", "email": "", "domainId": "", "type": "BOT", "isAnonymous": false, "caaEnabled": false }, "text": "Prometheus target missing (instance postgres-exporter.cluster.local:9187)\n\nA Prometheus target has disappeared. An e "cards": [], "annotations": [], "thread": { "name": "spaces/(xx- space identifyer -xx)/threads/3PYDBOsIofE" }, "space": { "name": "spaces/(xx- space identifyer -xx)", "type": "ROOM", "singleUserBotDm": false, "threaded": false, "displayName": "_privmon", "legacyGroupChat": false }, "fallbackText": "", "argumentText": "Prometheus target missing (instance postgres-exporter.cluster.local:9187)\n\nA Prometheus target has disappea "attachment": [], "createTime": "2022-06-06T06:17:33.805375Z", "lastUpdateTime": "2022-06-06T06:17:33.805375Z"
ceph orch device zap HOST_NAME PATH --force
ceph orch device zap ceph-adm2 /dev/sdc --force
cephadm shell
ceph dashboard set-rgw-credentials
ceph dashboard set-rgw-api-admin-resource RGW_API_ADMIN_RESOURCE
ceph dashboard set-rgw-api-admin-resource admin Option RGW_API_ADMIN_RESOURCE updated
ceph dashboard set-rgw-api-ssl-verify false
ceph dashboard set-rgw-api-ssl-verify False Option RGW_API_SSL_VERIFY updated
ceph dashboard set-rest-requests-timeout _TIME_IN_SECONDS_
ceph dashboard set-rest-requests-timeout 240
ceph config set <rgw-service> <param> <value> "rgw_bucket_counters_cache": "true" "rgw_user_counters_cache": "true"
https://DASHBOARD_URL:3000
https://dashboard_url:3000
ceph dashboard set-rgw-credentials RGW credentials configured
radosgw-admin user create --uid="uid" --display-name="displayname" --system
radosgw-admin user modify --uid="uid" --system
radosgw-admin sync status radosgw-admin user list
radosgw-admin sync status radosgw-admin user list
ceph dashboard set-rgw-credentials RGW credentials configured
ceph orch host ls HOST ADDR LABELS STATUS host01 10.0.210.182 _admin,installer,mon,mgr host02 10.0.96.72 mon,mgr host03 10.0.99.37 mon,mds host04 10.0.99.244 osd,mds host05 10.0.98.118 osd,mds host06 10.0.98.66 osd,nfs,mds host07 10.0.98.23 nfs,mds 7 hosts in cluster
The Telemetry module has been configured and activated successfully