| === mup_ is now known as mup | ||
| kelvin | How does maas compare to openstack? | 10:01 |
|---|---|---|
| cnf | are there any docs on upgrading from 2.1 to 2.2? | 10:42 |
| cnf | also with juju, with maas 2.2, how can you filter on subnets now that spaces are vlan based, instead of subnet based? | 11:00 |
| jam | cnf: probably better to ask here how they're hoping to model those cases | 11:12 |
| cnf | hmm | 11:13 |
| jam | cnf: I understand some of the rationale for it | 11:14 |
| cnf | it breaks things, though, with no option that i can see | 11:14 |
| jam | I believe the underpinning is "any machine on the same vlan can pretend to be on any subnet" | 11:14 |
| jam | as nobody from the outside could tell that they shouldn't be there | 11:15 |
| jam | and thus the same 'space' | 11:15 |
| cnf | i find that to be very judgemental of other peoples networks | 11:15 |
| jam | but I think there are (as you have) concrete realities around "yes, this port could be using 10.100, or 192.168, but I *want it to use 192* for these operations" | 11:15 |
| cnf | especially "routed should be good enough" | 11:15 |
| cnf | it isn't | 11:15 |
| cnf | i have "this VLAN has NO routes, at all" vlans | 11:16 |
| cnf | where you can add subnets | 11:16 |
| cnf | but one subnet in it is not the other | 11:16 |
| cnf | as there is no routing between them | 11:16 |
| jam | cnf: so I thought vlan was supposed to be a "set of trunked switches", which if they are as you described, then they are separate vlans | 11:17 |
| cnf | jam: that's a fabric | 11:17 |
| cnf | from https://docs.ubuntu.com/maas/2.2/en/intro-concepts | 11:18 |
| cnf | so now, from what I can see, i have no way in juju to define what _subnet_ i want | 11:22 |
| cnf | at all | 11:22 |
| cshen | cnf: we upgraded our existing maas installation from 2.1 to 2.2, so far no big issue. Only find one bug https://bugs.launchpad.net/maas/+bug/1695229 | 11:24 |
| jam | cnf: so if you can't model them as logically distinct VLANs (even if they had the same vlan-id they aren't logically the same space if they are swappable) | 11:24 |
| jam | if they *aren't* swappable | 11:25 |
| cnf | jam: so you are saying create a different fabric for each? | 11:25 |
| cnf | but then i can't have 1 machine be in both at the same time | 11:26 |
| cnf | because an interface can only be on 1 fabric | 11:26 |
| cnf | and maas will not let you define the same vlanID twice on the same fabric | 11:27 |
| cnf | work calls, i'll be back in a bet | 11:32 |
| cnf | thanks for the help so far | 11:32 |
| jam | mpontillo: ^^ | 11:35 |
| jam | I'd be happy to discuss through how we might model some of these issues | 11:36 |
| cnf | ok, i'm back | 12:02 |
| cnf | cshen: good to know, but i'm guessing you didn't use spaces a lot? | 12:02 |
| cshen | cnf: what do you mean spaces? | 12:10 |
| cshen | I use maas basically as a hardware provisioning tool for our prive openstack cloud. | 12:10 |
| cshen | private openstack cloud | 12:10 |
| cnf | cshen: do you not use segmented networks for your openstack install? | 12:11 |
| cshen | you mean vlan? | 12:12 |
| cshen | we really do vlan in networking. | 12:12 |
| cshen | for instance, internal api, public api, storage, and so on. | 12:13 |
| cnf | cshen: you don't use juju? | 12:15 |
| cnf | or any automated way to get the machines from maas? | 12:16 |
| cshen | no, we don't use juju. | 12:16 |
| cshen | we write new machines into ansible inventory files. | 12:17 |
| cnf | so if you want to tell maas "i want a machine, it needs to be in this subnet / vlan" you'd use spaces | 12:17 |
| cnf | spaces where tied to subnets in 2.1 | 12:17 |
| cnf | and vlans in 2.2 | 12:17 |
| cshen | cnf: thanks for the ip. | 12:17 |
| cshen | tip | 12:17 |
| cnf | the transition is causing me problems | 12:17 |
| cnf | i have VLAN's that contain multiple non-routed subnets | 12:18 |
| cnf | and now i can no longer select which subnet needs to be used | 12:18 |
| cshen | non-routed subnets, meaning no gateway? | 12:19 |
| cnf | yep | 12:19 |
| cnf | jam: btw, a related, but different problem i have is IP assignment to LXD containers in juju | 12:21 |
| cshen | cnf: what do you mean "no longer select"? How do you "select"? | 12:23 |
| jam | cshen: he used to be able to define 2 spaces that used the same vlan but had different subnets in them | 12:24 |
| cnf | cshen: in juju, with constraints | 12:24 |
| cnf | cshen: so i can say constraints: "spaces=admin-space,storage-space" | 12:24 |
| cnf | for example | 12:24 |
| cshen | cnf: oh, juju. I quit ;-) | 12:25 |
| cnf | well, they are maas spaces, but yes, from juju | 12:25 |
| cnf | jam: so i have subnets that really are _not_ under my control | 12:28 |
| cnf | i need to ask for IP's to use in them, and request ACL's to be changed per ip | 12:28 |
| cnf | i have no way to assign a specific IP to a specific container in juju, afaik | 12:28 |
| cnf | (also, a lot of my constraints stem from "this part is not under my control) | 12:29 |
| jam | after Juju has registered a device, can you assign it a concrete address? | 12:34 |
| jam | it certainly is a case of "dynamic machine allocation" which doesn't play nicely with "static IP address allocation" | 12:34 |
| cnf | jam: i don't know how to get juju to do that? | 12:36 |
| cnf | especially with containers | 12:36 |
| cnf | and yeah, i agree | 12:36 |
| cnf | but that's my reality | 12:36 |
| jam | cnf: when you juju deploy --to lxd:X we will eventually have created a device in MAAS | 12:36 |
| jam | I don't know if you can go to MAAS UI and play around with the IP associated with that container | 12:37 |
| cnf | no, once it's assigned, i can't | 12:37 |
| cnf | i can assign a static IP to a machine | 12:37 |
| jam | cnf: do you have a pool that you could use, or is it "exactly this application has to use exactly that IP" ? | 12:37 |
| cnf | before it gets provisioned | 12:37 |
| cnf | jam: well, requesting "please open up all these ports for all ip's in this subnets" gets me a kind "why do you need all of those?" | 12:38 |
| cnf | a reply of "my tool doesn't let me get selective on which ip i assign" of course gets replied to with "not our problem" :P | 12:39 |
| cnf | i exaggerate, of course | 12:39 |
| mup | Bug #1697931 opened: [2.2,snap] Proxy isn't running after installing the snap <snap> <MAAS:Triaged> <MAAS 2.2:Triaged> <https://launchpad.net/bugs/1697931> | 13:15 |
| mup | Bug #1651165 changed: Unable to change disk name using maas gui <amd64> <apport-bug> <xenial> <MAAS:Triaged> <MAAS 2.2:New> <https://launchpad.net/bugs/1651165> | 13:51 |
| mup | Bug #1697949 opened: MAAS renames VGname back to vg0 <MAAS:New> <https://launchpad.net/bugs/1697949> | 14:30 |
| === frankban|afk is now known as frankban | ||
| roaksoax | /3/win 16 | 14:38 |
| pmatulis | /4\win56/tab4\paragraph5 | 14:55 |
| pmatulis | oops, sorry | 14:55 |
| roaksoax | cnf: /win 4 | 15:14 |
| roaksoax | err | 15:14 |
| mpontillo | jam: interface constraints in MAAS are powerful enough to match on more than just spaces; is there a way to pass a constraint through so cnf can do this without changing the definition of a space? | 15:21 |
| mpontillo | jam: when the L3 -> L2 spaces issue was discussed, I remember thinking that we should have L2 spaces *and* L3 spaces so we could meet both of these use cases, but the team decided against that for simplicity sake IIRC | 15:23 |
| mpontillo | I guess that's coming back to bite us | 15:23 |
| mpontillo | on the other hand, the network setup here seems unusually difficult to model. cnf, if you can think of the simplest possible way to model your network in MAAS that would make things better for you, I'd like to hear it | 15:25 |
| vlad_ | Hey guys can maas provide dns/dhcp on an untagged lan or does it have to be vlans? | 15:26 |
| BjornT | vlad_: untagged is fine | 15:34 |
| vlad_ | BjornT: Thanks man | 15:35 |
| vlad_ | Hey guys I just ran into an issue I have the controller connected to all the interfaces, but on one of them I have two non-tagged lans in as aliases. I can't seem to provide dhcp to all three of the subnets from the web-ui will I need to do something via the CLI to get this to work? | 16:37 |
| cnf | mpontillo: sorry had meetings | 18:11 |
| cnf | mpontillo: i'm tied with constraints from a network i consume, but don't maintain | 18:11 |
| cnf | admitedly, i'm already jumping through hoops in maas to accomodate that | 18:12 |
| vlad_ | cnf: Yeah I'm in the same boat as you. I've got a network that's not ideal for this maas managed set of nodes I want to deploy openstack to | 18:15 |
| cnf | yeah, doing openstack as well | 18:16 |
| cnf | jam: so is there any way in juju to place constraints on subnets, instead of spaces? | 18:31 |
| cnf | i see "networks" under legacy constraints... | 18:31 |
| vlad_ | cnf: Yeah most charms should have network definitions where you can specify lists of subnets | 18:32 |
| cnf | vlad_: how? | 18:34 |
| mpontillo | cnf: not sure how this is plumbed through to juju, but MAAS has an 'interfaces' constraint which is likely powerful enough to do what you need. it's like the legacy 'networks' constraint but lets you select individual interfaces instead of just on the whole box | 19:21 |
| mpontillo | jam: ^? | 19:21 |
| cnf | so my boxes only have 1 "interface" though | 19:22 |
| cnf | a bond of 2 10G links | 19:22 |
| cnf | everything else is vlans | 19:22 |
| mpontillo | cnf: ah, then you can probably use either the 'subnets' constraint. the 'interfaces' constraint would work if you had multiple interfaces and you needed to know which one matched which constraint | 19:23 |
| xygnal | hi guys. I've noticed twice now that the MAAS API has been returning errors when using the API to provision a server, even though all of the syntax for the command is correct. Each time we've seen this, cycling maas-regiond is the only thing that fixed it. How can I collect the proper debug information to file this as a bug? | 19:24 |
| cnf | subnet constraint would work, but i don't think juju uses it? | 19:24 |
| mpontillo | cnf: that is, in MAAS 2.x (I think -- maybe 1.9) the 'networks' constraint was replaced with the 'subnets' constraint. | 19:24 |
| cnf | right | 19:24 |
| mpontillo | cnf: right, that's why I was asking jam -- I don't know how/if it's exposed in juju. vlad_ seems to think it is ;-) | 19:24 |
| cnf | well, i use subnets as constraints now, i just stick spaces to them :P | 19:24 |
| cnf | right | 19:24 |
| mpontillo | xygnal: I would take a look at /var/log/maas/regiond.log and check if there are any Python tracebacks | 19:25 |
| mpontillo | xygnal: if you find one, file a bug and include it, please! (which version of MAAS?) | 19:25 |
| mpontillo | xygnal: if you could pastebin it and send it to me here for a preview, I'll be able to confirm if it's enough to identify the issue | 19:26 |
| mpontillo | xygnal: if it is, just hit https://bugs.launchpad.net/maas/+filebug and get it logged! | 19:26 |
| xygnal | mpontillo yes, there are. machine object is not iterable is the error, and there are indeed tracebacks. | 19:28 |
| cnf | oh, i see all my maas bugs where closed | 19:28 |
| xygnal | unfortunately we've seen this happen both when their synatx was right, and when their syntax was wrong, so I am going to have to sort out which tracebacks were when the syntax was right | 19:28 |
| xygnal | mpontillo 2.2 release FYI | 19:29 |
| xygnal | mpontillo 1697986 | 19:48 |
| mup | Bug #1697986 opened: API returns object is not iterable to valid API request for server deployment <MAAS:New> <https://launchpad.net/bugs/1697986> | 19:49 |
| mpontillo | xygnal: thanks! if you could try the "Accept:" header workaround, and/or provide example API calls that cause this problem (or share some code) that would be very helpful | 19:50 |
| mpontillo | xygnal: if it's the same as the "Accept" header issue, I'm not sure why restarting regiond would work around the problem | 19:50 |
| xygnal | mpontillo do both of those workaround need to be in place at the same time? the way it was phrased was either or. | 19:51 |
| mpontillo | xygnal: it wouldn't hurt to make sure that accept header is always in place; if you do that you can remove the extra query string parameter for sure | 19:52 |
| xygnal | mpontillo I tried the same request 4 times and got that error each time. THen I restarted maas-regiond, and my first repeat of the command worked. | 19:52 |
| mpontillo | xygnal: but I'm going to mark that bug incomplete, since we'll need the API call (or CLI equivalent) before we can reproduce this | 19:52 |
| mpontillo | xygnal: that's weird. if it's the "response is in a random format because it was unspecified" bug, I wouldn't expect it to be so consistent | 19:53 |
| xygnal | honestly it appears to get 'worse' over time | 19:54 |
| xygnal | until it reaches that point | 19:54 |
| xygnal | the other day I was seeing it 'sometimes' but not every time | 19:54 |
| xygnal | then today, ever time, until restart | 19:54 |
| mpontillo | xygnal: hm. that's bizarre. maybe there is a backlog of API calls causing datatbase transactions to thrash, or something? | 19:55 |
| xygnal | not sure. I was thinking something along those lines. | 19:55 |
| mpontillo | xygnal: do you think you could provide a sample MAAS CLI command that reproduces the error, or does it succeed with the MAAS CLI? | 19:55 |
| xygnal | I have pgsql monitored in telegraf, any particular trashing you would expect to see? | 19:55 |
| xygnal | we already restarted the service so it wont come back for a while | 19:56 |
| mpontillo | xygnal: not really, I'm just throwing out theories =) | 19:56 |
| mpontillo | xygnal: but if you see anything that piques your interest, it might be worth mentioning | 19:56 |
| mpontillo | xygnal: but whatever insight you can give on that API calls you're making will be very helpful | 19:56 |
| xygnal | I see 15 deadlocks in pgsql's statistics but those never go away even after restart | 19:56 |
| xygnal | beyond that.. nothing stands out | 19:57 |
| mpontillo | xygnal: we use postgres for locking so it makes me wonder if the deadlocks are intentional | 19:57 |
| mpontillo | (though "deadlock", by definition, would indicate otherwise.) | 19:57 |
| xygnal | yes, going back a month it was consistantly 14 deadlocks. recently its up to 16. | 19:57 |
| xygnal | does not flux | 19:58 |
| xygnal | we are not mass building dozens of boxes at once, the load is almost always low | 19:59 |
| mpontillo | xygnal: ok. are you able to add the "Accept" header? if so, I'm looking forward to hearing if that fixes that or not. (if not, I'd like to know which API call causes this and what parameters you're passing) | 20:06 |
| xygnal | We will have to try it when we see this again. Right now it is not a top priority, but i have notes for my team to try next time we see it. | 20:07 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!