Connect your cloud¶
To see any cost data, you connect one or more OpenStack projects to OpenWatch. This page shows exactly which credentials you need, where to find them, and what happens after you connect.
What you need¶
OpenWatch authenticates against Keystone v3 with an ordinary project-scoped user. Gather these values from your cloud provider (for Infomaniak Public Cloud, they are in the OpenStack section of your manager, or in the RC / clouds.yaml file you can download there):
| Field | Description | Example |
|---|---|---|
| Auth URL | The Keystone v3 identity endpoint | https://api.pub1.infomaniak.cloud/identity/v3 |
| Username | The OpenStack user | PCU-XXXXXXX |
| Password | The user's password (stored encrypted) | ******** |
| User domain | Domain the user belongs to | default |
| Project domain | Domain the project belongs to | default |
| Project name | The OpenStack project to read | PCP-XXXXXXX |
Use a dedicated, least-privilege user
Create a separate OpenStack user for OpenWatch if you can. Read access to the project is enough for all the dashboards and reports, so a read-only user is the safest choice and keeps your main credentials out of a third-party tool. Grant write permissions only if you plan to use the optional in-app actions (deleting an orphan, or applying a rightsizing change); without them those actions simply fail and nothing else is affected.
Add the project¶
- Open your organisation's Projects area (under organisation administration).
- Choose Add project.
- Fill in the fields from the table above.
- Save.
Your password is encrypted at rest the moment you save; it is only ever decrypted in memory to call the OpenStack APIs.
What happens next¶
- OpenWatch queries both regions (
dc3-aanddc4-a) for this project. - The first fetch runs in the background, so the dashboard may show a short refreshing state and then reload on its own once your figures are ready.
- From then on, data is served instantly from cache and refreshed automatically on a schedule. You can also trigger a manual refresh from the dashboard.
Once data appears, head to the Cost dashboard and the Resource explorer.
Multiple projects¶
You can connect several projects (subject to your plan limits). The dashboard then lets you look at one project at a time or an aggregated view across all of them and both regions.
Troubleshooting¶
Connection fails or no data appears
The most common causes are:
- Wrong Auth URL: it must be the Keystone v3 identity endpoint and end in
/v3. - Wrong domain:
user domainandproject domainare oftendefault, but confirm with your provider. A mismatch causes authentication to fail. - Wrong project name vs project ID: use the values your provider lists for the project you want to read.
- Password rotated: if you changed the OpenStack password, update it here as well.
After fixing the values, save again and trigger a refresh. If costs still look empty, check that the project actually has billable resources in at least one region.