Bug 1342571

there are a couple potential issues that need to be solved

1.  the python-cradox library requires librados2 which exists only in Ceph repositories.  This means that people *must* have ceph repositories enabled on their nodes to get the package.  This means we need a doc bug.

2.  How is the package getting installed?  Are we adding an explicit dependency to gnocchi?  are we adding it to puppet to smartly detect/pull it in if we're using a ceph backend?  

3.  We need to ensure that images will get this package automatically as well.

Beyond those 2 questions, this bug should be split into 2 bugs.  1 to resolve #2 and 1 for the new component.

Awaiting merge upstream.

This is ready to go downstream today, can we get remaining acks on this?

This is still failing as the cradox Python module cannot be opened by httpd.

It seems that the access is denied by SELinux because the file is wrongly labeled:

type=AVC msg=audit(1466501601.240:93660): avc:  denied  { read } for  pid=31052 comm="httpd" name="cradox.so" dev="sda2" ino=71512 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file


root@overcloud-controller-0 site-packages ]# pwd
/usr/lib64/python2.7/site-packages
[root@overcloud-controller-0 site-packages ]# ls -lZ *.so
-rwxr-xr-x. root root unconfined_u:object_r:lib_t:s0   acutilmodule.so
-rwxr-xr-x. root root unconfined_u:object_r:lib_t:s0   _audit.so
-rwxr-xr-x. root root unconfined_u:object_r:lib_t:s0   auparse.so
-rwxr-xr-x. root root unconfined_u:object_r:lib_t:s0   _cffi_backend.so
-rwxr-xr-x. root root system_u:object_r:unlabeled_t:s0 cradox.so
-rwxr-xr-x. root root unconfined_u:object_r:lib_t:s0   _dbus_bindings.so
-rwxr-xr-x. root root unconfined_u:object_r:lib_t:s0   _dbus_glib_bindings.so
[...]

Excerpt from gnocchi.conf:
--------------------------
[storage]
coordination_url = redis://:ACM2JaMWAYHKj3Jg6tTHzD9fw.2.23:6379/
driver = ceph
ceph_pool = metrics
ceph_username = openstack
ceph_keyring = /etc/ceph/ceph.client.openstack.keyring
ceph_conffile = /etc/ceph/ceph.conf

Supported resource types before upgrade:
----------------------------------------
gnocchi resource list-types
+---------------+--------------------------------------------+
| resource_type | resource_controller_url                    |
+---------------+--------------------------------------------+
| generic       | http://192.0.2.22:8041/v1/resource/generic |
+---------------+--------------------------------------------+

Upgrade:
--------

gnocchi-upgrade --debug --create-legacy-resource-types -v
Option "verbose" from group "DEFAULT" is deprecated for removal.  Its value may be silently ignored in the future.

New resource types available:
-----------------------------
gnocchi resource list-types
+----------------------------+---------------------------------------------------------------+
| resource_type              | resource_controller_url                                       |
+----------------------------+---------------------------------------------------------------+
| instance                   | http://192.0.2.22:8041/v1/resource/instance                   |
| ceph_account               | http://192.0.2.22:8041/v1/resource/ceph_account               |
| network                    | http://192.0.2.22:8041/v1/resource/network                    |
| host_network_interface     | http://192.0.2.22:8041/v1/resource/host_network_interface     |
| instance_network_interface | http://192.0.2.22:8041/v1/resource/instance_network_interface |
| ipmi                       | http://192.0.2.22:8041/v1/resource/ipmi                       |
| image                      | http://192.0.2.22:8041/v1/resource/image                      |
| host_disk                  | http://192.0.2.22:8041/v1/resource/host_disk                  |
| swift_account              | http://192.0.2.22:8041/v1/resource/swift_account              |
| volume                     | http://192.0.2.22:8041/v1/resource/volume                     |
| generic                    | http://192.0.2.22:8041/v1/resource/generic                    |
| host                       | http://192.0.2.22:8041/v1/resource/host                       |
| instance_disk              | http://192.0.2.22:8041/v1/resource/instance_disk              |
| stack                      | http://192.0.2.22:8041/v1/resource/stack                      |
| identity                   | http://192.0.2.22:8041/v1/resource/identity                   |
+----------------------------+---------------------------------------------------------------+

Packages:
---------
openstack-gnocchi-indexer-sqlalchemy-2.1.3-2.el7ost.noarch
openstack-gnocchi-metricd-2.1.3-2.el7ost.noarch
openstack-gnocchi-common-2.1.3-2.el7ost.noarch
openstack-gnocchi-statsd-2.1.3-2.el7ost.noarch
python-gnocchi-2.1.3-2.el7ost.noarch
openstack-gnocchi-api-2.1.3-2.el7ost.noarch
openstack-gnocchi-carbonara-2.1.3-2.el7ost.noarch
python-gnocchiclient-2.2.0-1.el7ost.noarch

python-rados-0.94.5-14.el7cp.x86_64
librados2-0.94.5-14.el7cp.x86_64

python-cradox-1.1.8-2.el7ost.x86_64

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-1597.html