DataStax Help Center

Opscenter with SSL not showing metrics after upgrade to 5.1

Summary

After upgrading a cluster thats using SSL and / or internal authentication sometimes the metrics no longer display even though the OpsCenter Ui shows as connected and all agents showing as connected

Symptoms

The OpsCenter UI will show everything looking normal with no errors and all agents connected, however the graph metrics will show "NO DATA"

Cause

There were some changes in the datastax-agent process in version 5.1 where thrift is no longer used, therefore this has an impact on some of the configuration parameters in the <cluster name>.conf and address.yaml files

Workaround

The workaround is to add some parameters to the address.yaml file as well as update the <cluster name>.conf file

Heres some example files from a test system:

address.yaml

stomp_interface: 192.168.56.29
use_ssl: 1
# ssl_keystore settings if using ssl
ssl_keystore: /etc/dse/keystore
ssl_keystore_password: datastax
# workaround for race condition OPSC-4667
cassandra_rpc_interface: 192.168.56.23
hosts: ["192.168.56.23"]
# cassandra_user/pass for when using
# internal C* authentication
cassandra_user: cassandra
cassandra_pass: cassandra

cluster.conf

[jmx]
# needed if using C* authentication
username = cassandra
password = cassandra
port = 7199

[kerberos_client_principals]

[kerberos]

[agents]
# ssl config
ssl_keystore_password = datastax
ssl_keystore = /etc/dse/keystore

[kerberos_hostnames]

[kerberos_services]

[cassandra]
# username/password needed if
# using C* authentication
username = cassandra
ssl_ca_certs = /etc/dse/colchester.pem
ssl_validate = True
seed_hosts = 192.168.56.21
api_port = 9160
password = cassandra

Solution

Its not ideal to have to add parameters into every agent's address.yaml file. At the time of writing this article there are the following bugs open to address these:

 

OPSC-4667 - covers a possible race condition for opscenterd sending config to the agent

OPSC-2241 - similar to the above but was for older agents using thrift

OPSC-3744 - covers encryption for plain text passwords

 

 

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

  • Avatar
    Randi Keppeler

    Thanks for posting this ! we're using certs and this helps a LOT

Powered by Zendesk