Ceph dashboard default password

It used a very simple architecture to achieve the original goal. However, there was a growing demand for adding more web-based management capabilities, to make it easier to administer Ceph for users that prefer a WebUI over using the command line.

This new dashboard module is a replacement of the previous one and an ongoing project to add a native web based monitoring and administration application to Ceph Manager. The architecture and functionality of this module are derived from and inspired by the openATTIC Ceph management and monitoring tool. The intention is to reuse as much of the existing openATTIC functionality as possible, while adapting it to the different environment.

The dashboard plugin is implemented as a web application that visualizes information and statistics about the Ceph cluster using a web server hosted by ceph-mgr. The dashboard currently provides the following features to monitor and manage various aspects of your Ceph cluster:. Overall cluster health : Displays the overall cluster status, storage utilization e. Hosts : Provides a list of all hosts associated to the cluster, which services are running and which version of Ceph is installed.

Performance counters : Displays detailed service-specific statistics for each running service. Configuration Reference : Lists all available configuration options, their description and default values.

Pools : List all Ceph pools and their details e. Create, copy, modify and delete RBD images. Copy or clone snapshots, flatten cloned images.

RBD mirroring : Lists all active sync daemons and their status, pools and RBD images including their synchronization state. CephFS : Lists all active filesystem clients and associated pools, including their usage statistics. Object Gateway : Lists all active object gateways and their performance counters.

This can be automated e. Note that mgr initial modules takes a space-separated list of modules, so if you wanted to include other modules in addition to dashboard, just make it a list like so:. To get the dashboard up and running quickly, you can generate and install a self-signed certificate using the following built-in command:. Note that most web browsers will complain about such self-signed certificates and require explicit confirmation before establishing a secure connection to the dashboard.

To properly secure a deployment and to remove the certificate warning, a certificate that is issued by a certificate authority CA should be used. The dashboard. Once that is done, you can enable it for all Ceph manager instances by running the following commands:. This might be useful if the dashboard will be running behind a proxy which does not support SSL for its upstream servers or other situations where SSL is not wanted or required.

Use caution when disabling SSL as usernames and passwords will be sent to the dashboard unencrypted. You need to restart the Ceph manager processes manually after changing the SSL certificate and key. This can be accomplished by either running ceph mgr fail mgr or by disabling and re-enabling the dashboard module which also triggers the manager to respawn itself :. By default, the ceph-mgr daemon hosting the dashboard i.

If no specific address has been configured, the web app will bind to ::which corresponds to all available IPv4 and IPv6 addresses. These defaults can be changed via the configuration key facility on a cluster-wide level so they apply to all manager instances as follows:. Since each ceph-mgr hosts its own instance of dashboard, it may also be necessary to configure them separately.

The IP address and port for a specific manager instance can be changed with the following commands:. The command ceph mgr services will show you all endpoints that are currently configured. The password will be stored in the configuration database in encrypted form using bcrypt. This is a global setting that applies to all dashboard instances.

To use the Object Gateway management functionality of the dashboard, you will need to provide the login credentials of a user with the system flag enabled. If you do not have a user which shall be used for providing those credentials, you will also need to create one:. This is all you have to do to get the Object Gateway management functionality working.

The host and port of the Object Gateway are determined automatically.The dashboard uses a web server hosted by the ceph-mgr daemon. The dashboard is accessible from a web browser and includes many useful management and monitoring features, for example, to configure manager modules and monitor the state of OSDs.

Images : Lists all RBD images and their properties such as size, objects, and features. Create, copy, modify and delete RBD images. Create, delete, and rollback snapshots of selected images, protect or unprotect these snapshots against modification. Copy or clone snapshots, flatten cloned images. All features are enabled by default. When disabling a feature, the web-interface elements become hidden and the associated REST API end-points reject any further requests for that feature.

Enabling and disabling dashboard features can be done from the command-line interface or the web interface. Once a feature is disabled, it can take up to 20 seconds to reflect the change in the web interface. From the Edit Manager module page, you can enable or disable the dashboard features by checking or unchecking the selection box next to the feature name. Once the selections have been made, click on the Update button at the bottom of the page.

The Dashboard architecture depends on the Ceph manager dashboard plugin and other components. See the diagram below to understand how they work together. Cockpit uses the same Ansible playbooks to install Ceph. Those playbooks install dashboard by default. Therefore, whether you directly use the Ansible playbooks, or use Cockpit to install Ceph, dashboard will be installed. Change the default dashboard password. By default, the password for dashboard is p ssw0rdwhich is insecure.

ceph dashboard default password

For more information, see the Install GuideChanging the dashboard password using the dashboardor Changing the dashboard password using Ansible. You must set a host with the Metrics role for Grafana to be installed on. On the Hosts page, add a host and set the Metrics role. After the deploy process finishes, click the Complete button at the bottom right corner of the page.

This opens a window which displays the output of the command ceph statusas well as dashboard access information. At the bottom of the Ceph Cluster Status window, the dashboard access information is displayed, including the URL, user name, and password. Take note of this information. Ensure a [grafana-server] group with a node defined under it exists in the Ansible inventory file.

Grafana and Prometheus are installed on this node. In the all. There should be a comment indicating the default setting of True. After running ansible-playbook site. Find the dashboard URL, username, and password towards the end of the playbook output:.

The dashboard components use certain TCP network ports which must be accessible.

New in Nautilus: New Dashboard Functionality

If you use a firewall other than firewalldensure the following ports are open. The node under [grafana-server] in the Ansible inventory file. A time lag can occur between the dashboard node, cluster nodes, and a browser, when the nodes are not properly synced.

Ensure all nodes and the system where the browser runs have time synced by NTP.The dashboard is accessible from a web browser and provides a number of metrics and graphs about the state of the cluster, Monitors, OSDs, Pools, or the network.

Run the following commands on the Ansible administration node as the root user. Every time you update the cluster configuration, for example, you add or remove a MON or OSD node, you must re-run the cephmetrics Ansible playbook. The cephmetrics Ansible playbook does the following actions:.

Deploys the Prometheus node-exporter daemon to each node in the storage cluster. Enter the password for the admin user. If you did not set the password during the installation, use adminwhich is the default password.

Once logged in, you are automatically placed on the Ceph At a Glance dashboard. The Ceph At a Glance dashboard provides a high-level overviews of capacity, performance, and node-level performance information.

The default user name and password for accessing the Red Hat Ceph Storage Dashboard is set to admin and admin. For security reasons, you might want to change the password after the installation.

A Gentle Introduction to Ceph

As a storage administrator, you can gather performance data, export that data using the Prometheus plugin module for the Red Hat Ceph Storage Dashboard, and then perform queries on this data. The Prometheus module allows ceph-mgr to expose Ceph related state and performance data to a Prometheus server.

The Prometheus plugin provides an exporter to pass on Ceph performance counters from the collection point in ceph-mgr. A circular buffer of the last number of samples contains the performance counter schema data and the actual counter data.

This plugin creates an HTTP endpoint and retrieves the latest sample of every counter when polled. The HTTP path and query parameters are ignored; all extant counters for all reporting entities are returned in a text exposition format. To monitor a Ceph storage cluster with Prometheus you can configure and enable the Prometheus exporter so the metadata information about the Ceph storage cluster can be collected.

This allows Ceph to export the proper instance label without Prometheus overwriting it. To add a new node, simply add the targetsand instance options in the following format:. Some statistics can come from different types of daemons, so when querying you will want to filter on Ceph daemons starting with osd to avoid mixing in the Ceph Monitor and RocksDB stats.

ceph dashboard default password

The global Ceph storage cluster statistics have labels appropriate to what they report on.GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.

The dashboard is a very helpful tool to give you an overview of the status of your Ceph cluster, including overall health, status of the mon quorum, status of the mgr, osd, and other Ceph daemons, view pools and PG status, show logs for the daemons, and more. Rook makes it simple to enable the dashboard. This is the default setting in the example manifests.


The Rook operator will enable the ceph-mgr dashboard module. A service object will be created to expose that port inside the Kubernetes cluster. Rook will enable port for https access. The first service is for reporting the Prometheus metricswhile the latter service is for the dashboard.

After you connect to the dashboard you will need to login for secure access. Rook creates a default user named admin and generates a secret called rook-ceph-dashboard-admin-password in the namespace where the Rook Ceph cluster is running.

To retrieve the generated password, you can run the following:. Commonly you will want to view the dashboard from outside the cluster. For example, on a development machine with the cluster running inside minikube you will want to access the dashboard from the host.

ceph dashboard default password

There are several ways to expose a service that will depend on the environment you are running in. The simplest way to expose the service in minikube or similar environment is using the NodePort to open a port on the VM that can be accessed by the host. To create a service with the NodePort, save this yaml as dashboard-external-https. In this example, port will be opened to expose port from the ceph-mgr pod. Find the ip address of the VM.

If using minikube, you can run minikube ip to find the ip address. If you have a cluster on a cloud provider that supports load balancers, you can create a service that is provisioned with a public hostname. The yaml is the same as dashboard-external-https.

If you have a cluster with an nginx Ingress Controller and a Certificate Manager e. This example achieves four things:. Customise the Ingress resource to match your cluster. Replace the example domain name rook-ceph. Provided you have deployed the Ceph Toolboxcreated an Object Store and a user, you can enable Object Gateway management by providing the user credentials to the dashboard:.

Skip to content. Permalink Dismiss Join GitHub today GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together. Sign up. Branch: master. Find file Copy path. Raw Blame History. You signed in with another tab or window.

Reload to refresh your session. You signed out in another tab or window.Special thanks to Donald Talton for this beautiful dashboard.

Planet Ceph. Ceph ceph dashboard. September 23, Hence Calamari is a matured enterprise level software which is now Open Source. Calamari consists of two pieces and two separate repos, now in the Ceph Github project :. Calamari Server side components include : Apache, salt-mastersupervisordcthulhucarbon-cache. To deploy Calamariyou need to build packages for Calamari Server as well as for Calamari clients.

So i would install GIT and vagrant locally on my machine. On this workstation we will create some vagrant instances and inside those vagrant instances we will build RPM packages for Calamari server and client. Check calamari contentsunder vagrant directoryyou would find various distributions. Select your distribution and perform vagrant up. Finally perform vagrantup for Centos distribution, this will create a virtual environment with all the prerequisite necessary for calamari server package building process.

Now for building packageswe will use the same directory hierarchy and the resultant RPM package will also be stored in this shared directory. For brevity the output of above command has been truncated. The output summary confirms that there are 11 Successful and 0 Failed operations. You should now exit from the centos vagrant machine and on your local machine list the directory you would find rpm packages for calamari server and diamond.

At this point you are ready with Calamari server RPM packages. The next step is to build calamari client packages. The calamari client packages provides the GUI to calamari dashboard. As calamari build process is not greatly maturedwe need to use ubuntu vagrant to build client packages.

Copy the following packages that we have generated in the earlier steps from the workstation to the server that you intend to configure as calamari master. These files provides GUI facility to calamari webapp. At this point your calamari server is readyyou just need to initialize calamari by running.

This username and password would be required to login to Calamari dashboard. Openup browser and navigate to the IP address of your calamari server. You would see calamari dashboard login pageprovide the login details that we have set in the last step. Perform the following steps on all your Ceph cluster nodes, inorder to add them to Calamari dashboard. Ubuntu Users : Use ubuntu package manager for installing salt-minion. Once you configure all the Ceph cluster nodes with salt-minion and diamond, you need to accept salt-keys from calamari master.

Finally check calamari dashboardyou should be able to view the Ceph cluster. Careers view all.You no longer need to know complex Ceph related commands to manage and monitor your Ceph cluster.

In a Ceph cluster with multiple Ceph Manager instances, only the dashboard running on the currently active Ceph Manager daemon will serve incoming requests. This way, you can point your browser to any of the Ceph Manager instances in order to access the dashboard. Consider this behavior when securing access with firewall or planning for HA setup.

To log in to the dashboard Web application, point your browser to its URL including the port number. You can find its address by running. You need a user account in order to log in to the dashboard Web application. DeepSea creates a default user 'admin' with administrator privileges for you.

ceph dashboard default password

If you decide to log in with the default 'admin' user, retrieve the corresponding password by running. If you do not want to use the default 'admin' account to access the Ceph Dashboard, create a custom user account with administrator privileges. The dashboard user interface is graphically divided into several blocks : the utility menuthe main menuand the main content pane.

The top right part of the screen contains a utility menu. It includes general tasks related more to the dashboard than to the Ceph cluster. By clicking its items, you can access the following topics:.

Change the language of the dashboard's user interface. Display a list of links that refer to the information about the dashboard, its complete documentation, and an overview of its REST API. Manage the dashboard's users and user roles. The dashboard's main menu occupies the top left part of the screen.

It covers the following topics:. The content pane occupies the main part of the dashboard's screen.The Ceph Dashboard is a built-in web-based Ceph management and monitoring application to administer various aspects and objects of the cluster. It is implemented as a Ceph Manager Daemon module. The original Ceph Dashboard that was shipped with Ceph Luminous started out as a simple read-only view into various run-time information and performance data of a Ceph cluster.

It used a very simple architecture to achieve the original goal. However, there was a growing demand for adding more web-based management capabilities, to make it easier to administer Ceph for users that prefer a WebUI over using the command line.

The new Ceph Dashboard module is a replacement of the previous one and adds a built-in web based monitoring and administration application to the Ceph Manager. The architecture and functionality of this new module is derived from and inspired by the openATTIC Ceph management and monitoring tool.

The Ceph Dashboard module is implemented as a web application that visualizes information and statistics about the Ceph cluster using a web server hosted by ceph-mgr. Multi-User and Role Management : The dashboard supports multiple user accounts with different permissions roles.

The user accounts and roles can be modified on both the command line and via the WebUI. The dashboard supports various methods to enhance password security, e. See User and Role Management for details.

Internationalization I18N : the dashboard can be used in different languages that can be selected at run-time. Currently, Ceph Dashboard is capable of monitoring and managing the following aspects of your Ceph cluster:. Overall cluster health : Display overall cluster status, performance and capacity metrics. Embedded Grafana Dashboards : Ceph Dashboard is capable of embedding Grafana dashboards in many locations, to display additional information and performance metrics gathered by the Prometheus Module.

See Enabling the Embedding of Grafana Dashboards for details on how to configure this functionality. Log entries can be filtered by priority, date or keyword.

Hosts : Display a list of all hosts associated to the cluster, which disks are attached, which services are running and which version of Ceph is installed. Performance counters : Display detailed service-specific statistics for each running service.

Show notifications for firing alerts. Configuration Editor : Display all available configuration options, their description, type and default values and edit the current values.

Pools : List all Ceph pools and their details e.

thoughts on “Ceph dashboard default password

Leave a Reply

Your email address will not be published. Required fields are marked *