yahoo-eng-team team mailing list archive

[Adam Young <1627094@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Description of problem:
When configuring OpenStack from OSP director, keystone is enabled to produce ceilometer events.  These events spam Ceilometer, and any CloudForms instance managing the Overcloud with "identity.authenticate" events.  These events cause unneeded processing on CloudForms and unneeded data storage in ceilometer as they have no practical use


Version-Release number of selected component (if applicable):
openstack-keystone-8.0.1-1.el7ost.noarch
python-tripleoclient-0.3.4-6.el7ost.noarch

How reproducible:
100%

Steps to Reproduce:
1. Deploy Overcloud with ceilometer Events
parameter_defaults:
  CeilometerStoreEvents: true
2. login to controller
3. sudo openstack-config --get /etc/keystone/keystone.conf DEFAULT notification driver
messagin

Actual results:
literally nearly 100,000 identity events get created per day.  Here is a sample of about 22 hours from an unused Cloud.

 grep /ManageIQ/System/Event/EmsEvent/OPENSTACK evm.log  | awk '{ print $10 }' | sort | uniq -c
...
 86317 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.authenticate]
   473 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.created.role_assignment]
     2 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.domain.created]
    54 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.endpoint.created]
    23 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.OS-TRUST:trust.created]
    21 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.OS-TRUST:trust.deleted]
    29 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.project.created]
    21 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.project.deleted]
     2 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.region.created]
   473 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.role_assignment.created]
     8 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.role.created]
    18 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.service.created]
   467 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.user.created]
   404 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.user.deleted]
...

NOTE: the 86,317 identity.authenticate events produced by the Overcloud

Expected results:

identity events need not be produced by default for CloudForms to do its
thing.  these are essentially SPAM events that use valuable resources

Additional info:

Suggest setting notification_driver to either log or noop in
/etc/keystone/keystone.conf

** Affects: keystone
     Importance: Undecided
     Assignee: Adam Young (ayoung)
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1627094

Title:
   Keystone overwhelms Ceilometer with Identity Events

Status in OpenStack Identity (keystone):
  New

Bug description:
  Description of problem:
  When configuring OpenStack from OSP director, keystone is enabled to produce ceilometer events.  These events spam Ceilometer, and any CloudForms instance managing the Overcloud with "identity.authenticate" events.  These events cause unneeded processing on CloudForms and unneeded data storage in ceilometer as they have no practical use

  
  Version-Release number of selected component (if applicable):
  openstack-keystone-8.0.1-1.el7ost.noarch
  python-tripleoclient-0.3.4-6.el7ost.noarch

  How reproducible:
  100%

  Steps to Reproduce:
  1. Deploy Overcloud with ceilometer Events
  parameter_defaults:
    CeilometerStoreEvents: true
  2. login to controller
  3. sudo openstack-config --get /etc/keystone/keystone.conf DEFAULT notification driver
  messagin

  Actual results:
  literally nearly 100,000 identity events get created per day.  Here is a sample of about 22 hours from an unused Cloud.

   grep /ManageIQ/System/Event/EmsEvent/OPENSTACK evm.log  | awk '{ print $10 }' | sort | uniq -c
  ...
   86317 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.authenticate]
     473 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.created.role_assignment]
       2 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.domain.created]
      54 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.endpoint.created]
      23 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.OS-TRUST:trust.created]
      21 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.OS-TRUST:trust.deleted]
      29 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.project.created]
      21 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.project.deleted]
       2 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.region.created]
     473 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.role_assignment.created]
       8 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.role.created]
      18 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.service.created]
     467 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.user.created]
     404 [/ManageIQ/System/Event/EmsEvent/OPENSTACK/identity.user.deleted]
  ...

  NOTE: the 86,317 identity.authenticate events produced by the
  Overcloud

  Expected results:

  identity events need not be produced by default for CloudForms to do
  its thing.  these are essentially SPAM events that use valuable
  resources

  Additional info:

  Suggest setting notification_driver to either log or noop in
  /etc/keystone/keystone.conf

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1627094/+subscriptions