Enable influxdb basic Auth settings

docker/compose/docker-compose.yml

@@ -4,7 +4,7 @@ version: "3.6"
 
 services:
   loudml:
-    image: loudml/loudml:1.6.0
+    image: loudml/loudml
     volumes:
       - ./etc/loudml.yml:/etc/loudml/config.yml:ro
       - var_loudml
@@ -14,11 +14,16 @@ services:
       - influxdb
 
   influxdb:
-    image: influxdb
+    image: influxdb:alpine
     ports:
       - "8086:8086"
     volumes:
       - var_influxdb
+      - ./etc/influx_init.iql:/docker-entrypoint-initdb.d/influx_init.iql
+    environment:
+      INFLUXDB_HTTP_AUTH_ENABLED: "true"
+      INFLUXDB_ADMIN_USER: "admin"
+      INFLUXDB_ADMIN_PASSWORD: "passw0rd"
 
   chronograf:
     image: loudml/chronograf
@@ -31,21 +36,25 @@ services:
     volumes:
       - var_chronograf
     environment:
+      INFLUXDB_USERNAME: "admin"
+      INFLUXDB_PASSWORD: "passw0rd"
       INFLUXDB_URL: http://influxdb:8086
       LOUDML_URL: http://loudml:8077
       KAPACITOR_URL: http://kapacitor:9092
 
   kapacitor:
-    image: kapacitor
+    image: kapacitor:alpine
     depends_on:
       - influxdb
     volumes:
       - var_kapacitor
     environment:
       KAPACITOR_INFLUXDB_0_URLS_0: http://influxdb:8086
+      KAPACITOR_INFLUXDB_0_USERNAME: "admin"
+      KAPACITOR_INFLUXDB_0_PASSWORD: "passw0rd"
 
   telegraf:
-    image: telegraf
+    image: telegraf:alpine
     volumes:
       - ./etc/telegraf.conf:/etc/telegraf/telegraf.conf:ro
     depends_on:

docker/compose/etc/influx_init.iql

@@ -0,0 +1,14 @@
+CREATE DATABASE "telegraf"
+CREATE DATABASE "loudml"
+CREATE DATABASE "chronograf"
+CREATE USER telegraf WITH PASSWORD 'metricsmetricsmetricsmetrics'
+REVOKE ALL PRIVILEGES FROM telegraf
+GRANT WRITE ON telegraf TO telegraf
+CREATE USER reader WITH PASSWORD 'metricsmetricsmetricsmetrics'
+REVOKE ALL PRIVILEGES FROM reader
+GRANT READ ON telegraf TO reader
+GRANT READ ON chronograf TO reader
+CREATE USER loudml WITH PASSWORD 'metricsmetricsmetricsmetrics'
+REVOKE ALL PRIVILEGES FROM loudml
+GRANT WRITE ON loudml TO loudml
+GRANT ALL ON chronograf TO loudml

docker/compose/etc/loudml.yml

@@ -4,14 +4,19 @@ buckets:
     type: influxdb
     addr: influxdb:8086
     database: loudml
+    dbuser: loudml
+    dbuser_password: "metricsmetricsmetricsmetrics"
     retention_policy: autogen
     measurement: loudml
+    create_database: false
   - name: data
     type: influxdb
     addr: influxdb:8086
-    database: data
+    database: telegraf
+    dbuser: reader
+    dbuser_password: "metricsmetricsmetricsmetrics"
     retention_policy: autogen
-    measurement: sinus
+    create_database: false
 
 storage:
   path: /var/lib/loudml

docker/compose/etc/telegraf.conf

@@ -113,8 +113,8 @@
   # timeout = "5s"
 
   ## HTTP Basic Auth
-  # username = "telegraf"
-  # password = "metricsmetricsmetricsmetrics"
+  username = "telegraf"
+  password = "metricsmetricsmetricsmetrics"
 
   ## HTTP User-Agent
   # user_agent = "telegraf"

loudml/influx.py

@@ -414,7 +414,6 @@ def annotationdb(self):
                 ssl=self.use_ssl,
                 verify_ssl=self.verify_ssl,
             )
-            self._annotationdb.create_database(db)
 
         return self._annotationdb
 
@@ -679,7 +678,16 @@ def list_anomalies(
         )
 
         query = ''.join(query)
-        result = self.annotationdb.query(query)
+        try:
+            result = self.annotationdb.query(query)
+        except influxdb.exceptions.InfluxDBClientError as exn:
+            logging.warning(
+                "could not load annotations, got error '%d'",
+                exn.code,
+            )
+            if exn.code == 401:
+                return []
+            raise exn
 
         windows = []
         for j, point in enumerate(result.get_points()):

loudml/worker.py

@@ -255,7 +255,7 @@ def predict(
             if detect_anomalies:
                 hooks = self.storage.load_model_hooks(
                     model.settings,
-                    bucket,
+                    output_bucket or bucket,
                 )
                 model.detect_anomalies(prediction, hooks)
             if save_run_state: