Ceph Mimic測試Dashboard功能

Ceph · 發表 2018-09-15 10:01:11

摘要： Ceph從Luminous開始，提供了原生的Dashboard功能，通過Dashboard可以獲取Ceph叢集的各種狀態資訊；相比之前的第三方實現，原生的Dashboard還比較簡潔，但是部署和使用方便，後續值得期待！ Ceph從Mimic裡實現了Dashboard V2版本，提供了...

Ceph從Luminous開始，提供了原生的Dashboard功能，通過Dashboard可以獲取Ceph叢集的各種狀態資訊；

相比之前的第三方實現，原生的Dashboard還比較簡潔，但是部署和使用方便，後續值得期待！

Ceph從Mimic裡實現了Dashboard V2版本，提供了更全面的Ceph展示和管理功能，值得一試；

下面基於Ceph：Mimic 13.2.1 版本實驗下其Dashboard功能。

參考文件：

ofollow,noindex">http://docs.ceph.com/docs/mimic/mgr/dashboard/

https://www.openattic.org/posts/ceph-manager-dashboard-v2/

注：Mimic 13.2.1還不支援非ssl的http訪問，而最新Master版本里已經有非ssl的支援

操作步驟

按照官方文件的步驟，可以很輕鬆的部署起來Dashboard，如下：

1、檢視ceph狀態，找出active的mgr

root@ceph1:~# ceph -s
cluster:
id:cdd6456d-9291-4ec9-b138-e073aea1cdbe
health: HEALTH_OK
 
services:
mon: 3 daemons, quorum ceph1,ceph2,ceph3
mgr: ceph3(active), standbys: ceph1, ceph2
mds: kirkfs-2/2/2 up{0=mds-daemon-ceph3=up:active,1=mds-ceph3=up:active}, 6 up:standby
osd: 24 osds: 24 up, 24 in
 
data:
pools:2 pools, 1536 pgs
objects: 25.64 k objects, 100 GiB
usage:280 GiB used, 68 TiB / 68 TiB avail
pgs:1536 active+clean

mgr: ceph3(active)

2、生成並安裝自簽名的證書

root@ceph1:~# ceph dashboard create-self-signed-cert
Self-signed certificate created

3、生成key pair，並配置給ceph mgr

root@ceph1:~/yangguanjun# mkdir mgr-dashboard
root@ceph1:~/yangguanjun# cd mgr-dashboard/
root@ceph1:~/yangguanjun/mgr-dashboard# openssl req -new -nodes -x509 \
>-subj "/O=IT/CN=ceph-mgr-dashboard" -days 3650 \
>-keyout dashboard.key -out dashboard.crt -extensions v3_ca
Generating a 2048 bit RSA private key
.......................+++
............+++
writing new private key to 'dashboard.key'
-----
 
root@ceph1:~/yangguanjun/mgr-dashboard# ls
dashboard.crtdashboard.key
 
root@ceph1:~/yangguanjun/mgr-dashboard# ceph mgr module disable dashboard
root@ceph1:~/yangguanjun/mgr-dashboard# ceph mgr module enable dashboard

4、在ceph active mgr上配置server addr和port

若使用預設的8443埠，則可跳過該步驟！

root@ceph3:~# ceph config set mgr mgr/dashboard/server_addr 192.168.0.26
root@ceph3:~# ceph config set mgr mgr/dashboard/server_port 8080
 
 
root@ceph3:~# ceph mgr services
{
"dashboard": "https://192.168.0.26:8080/",
}

5、生成登陸認證的使用者名稱和密碼

root@ceph1:~/yangguanjun/mgr-dashboard# ceph dashboard set-login-credentials admin admin@2018
Username and password updated

6、若需通過外網訪問，則在有外網IP的機器上配置nginx服務做https轉發

root@ceph1:/etc/nginx/ssr# scp ceph1:~/yangguanjun/mgr-dashboard/* ./
dashboard.crt100% 11551.1KB/s00:00
dashboard.key
root@ceph1:/etc/nginx/ssl# vim /etc/nginx/nginx.conf
...
server {
listen8080 ssl;
ssl_certificate/etc/nginx/ssl/dashboard.crt;
ssl_certificate_key/etc/nginx/ssl/dashboard.key;
ssl_session_cacheshared:SSL:1m;
ssl_session_timeout5m;
ssl_protocolsSSLv2 SSLv3 TLSv1.2;
ssl_ciphersHIGH:!aNULL:!MD5;
ssl_prefer_server_cipherson;
location / {
proxy_pass https://192.168.0.26:8080;
proxy_set_header Host $host;
}
}
...
root@ceph1:/etc/nginx/ssl# systemctl restart nginx.service