Description of problem: Opening this bug following a discussion with ydary about bug 1371530. Suppose that fluentd secure forward on the hosts will be configured like this: <match **> @type secure_forward shared_key $METRICS_STORE_SECRET self_hostname $HOSTNAME secure true ca_cert_path $METRICS_STORE_CACERT_PATH <server> host $METRICS_STORE_HOST port $METRICS_STORE_PORT # default 24284 </server> </match> Then we should have a few new config parameters in vdc_options, to be configured by the user using engine-config: 1. $METRICS_STORE_HOST 2. $METRICS_STORE_PORT 3. $METRICS_STORE_SECRET - needs to be stored securely, need to check how exactly 4. Whether we use engine CA for this or a 3rd party. Allow more than two values, as we might have different behavior in the future if using the internal OCP CA. 5. $METRICS_STORE_CACERT_PATH - if previous option is "engine ca", this value is not needed, and will use the engine ca. Otherwise, we will have to document how to use a 3rd party CA. 6. Turn on/off - perhaps we want the user to turn this on/off. "This" is the cron job that will configure the hosts using ansible, not actual metrics forwarding. If you want to allow on/off for metrics forwarding, that's another bug. HOSTNAME will be set by ansible
Considering that Metrics params are not really relevant for the engine, I decided to abandon the patch and revert the decision to use engine-config for them. Current plan for the ansible stuff is to require: 1. A conf file with two params: fluentd_fluentd_host: FQDN fluentd_shared_key: KEY 2. A file with the ca cert to be used by the central fluentd. Locations of these are still TBD, perhaps something like /etc/ovirt-metrics or something like that. For current bug, the above will probably be the only thing we'll do, so it will only be a doc bug. If someone wants nicer means, such as a tool asking for above 3 items and placing them in the right place (with some simple verification/sanitization), please open another bug.
For now, user will set params manually. More details in bug 1405813 comment 1.
good enough in config, example file provided verified with ovirt-engine-metrics-1.0.0-1.el7ev.noarch