/srv/irclogs.ubuntu.com/2020/02/25/#maas.txt

mupBug #1284131 changed: Feature Request: maas-cli change ownership of machine <maas-shared-lab> <uosci> <MAAS:Expired> <https://launchpad.net/bugs/1284131>04:28
mupBug #1681477 changed: Clicking in the disk selection dropdown (for storage hardware testing parameters) in the far right doesn't open the dropdown <ui> <MAAS:Invalid> <https://launchpad.net/bugs/1681477>08:26
mupBug #1681477 opened: Clicking in the disk selection dropdown (for storage hardware testing parameters) in the far right doesn't open the dropdown <ui> <MAAS:Invalid> <https://launchpad.net/bugs/1681477>08:29
mupBug #1681477 changed: Clicking in the disk selection dropdown (for storage hardware testing parameters) in the far right doesn't open the dropdown <ui> <MAAS:Invalid> <https://launchpad.net/bugs/1681477>08:32
mupBug #1681477 opened: Clicking in the disk selection dropdown (for storage hardware testing parameters) in the far right doesn't open the dropdown <ui> <MAAS:Invalid> <https://launchpad.net/bugs/1681477>08:35
mupBug #1681477 changed: Clicking in the disk selection dropdown (for storage hardware testing parameters) in the far right doesn't open the dropdown <ui> <MAAS:Invalid> <https://launchpad.net/bugs/1681477>08:38
mupBug #1738436 changed: [2.3,  UI] No way to disable DHCP relaying <MAAS:Fix Released> <https://launchpad.net/bugs/1738436>08:38
mupBug #1738436 opened: [2.3,  UI] No way to disable DHCP relaying <MAAS:Fix Released> <https://launchpad.net/bugs/1738436>08:41
mupBug #1738436 changed: [2.3,  UI] No way to disable DHCP relaying <MAAS:Fix Released> <https://launchpad.net/bugs/1738436>08:44
mupBug #1849166 changed: Support root on software raid in UEFI mode <MAAS:Invalid> <https://launchpad.net/bugs/1849166>09:53
mupBug #1785314 changed: maas spaces are mis-translated <track> <juju:Triaged> <MAAS:Invalid> <https://launchpad.net/bugs/1785314>10:05
mupBug #1785314 opened: maas spaces are mis-translated <track> <juju:Triaged> <MAAS:Invalid> <https://launchpad.net/bugs/1785314>10:08
mupBug #1785314 changed: maas spaces are mis-translated <track> <juju:Triaged> <MAAS:Invalid> <https://launchpad.net/bugs/1785314>10:11
inurehow are credentials passed from the MAAS db to the rack controller when authenticating to a OOB device?16:52
mupBug #1864686 opened: Dropdown does not go away after selection <ui> <MAAS:New> <https://launchpad.net/bugs/1864686>17:54
mupBug #1864686 changed: Dropdown does not go away after selection <ui> <MAAS:Incomplete> <https://launchpad.net/bugs/1864686>17:57
mupBug #1864686 opened: Dropdown does not go away after selection <ui> <MAAS:Incomplete> <https://launchpad.net/bugs/1864686>18:03
mupBug #1864691 opened: Traceback from cloud-init during enlistment ipmitool no such file or directory <MAAS:New> <https://launchpad.net/bugs/1864691>18:21
inureroaksoax: quick question?19:24
roaksoaxinure: shoot... (although I no longer work on MAAS/Canonical/Ubuntu)20:11
inureroaksoax: well that is unfortunate but if you don't  know maybe you can direct me to someone who does.    I am trying to determine how OOB credentials are passed from the MAAS DB, to the OOB device, during actions to control the OOB.   What I am looking for specifically is, is this traffic encrypted or are credentials passed from Region to Rack ove20:14
inurer plain text?20:14
roaksoaxinure: is largely unencrypted. THe assumption was that you'd never put MAAS public facing, hence, region <-> rack communication is largely unencrypted. A deploying (and deployed) get data from MAAS over HTTP (so not encrypted)20:21
roaksoaxwhat *is* encrypted, is the protocol created for rack to rack internal communication to perform neighbor discovery, but otherwide, Region <-> to rack communication, which is RPC, and machine to MAAS communication (which was PXE/HTTP) is unencrypted20:23
inureroaksoax: we were hoping to manage a PCI/SOX network with rack controller on buy region controller out.  neither public20:43
inureroaksoax: would it be officially recommend to avoid this, or would it be acceptable to wrap the RPC across SSL tunnel?20:44
roaksoaxinure: you mean a VPN ?20:54
inureno.  We have core networks which have normal security, and PCI/SOX networks which have heavily locked down networks21:03
inureroaksoax:21:03
inureall are internal to the data center21:03
roaksoaxinure: i dunno if that would work, we've never really tried that. But a VPN... I do believe that would work21:03
inurelike a site 2 site vpn configuration?21:04
inureor just a vpn tunnel?21:05
roaksoaxinure: whatever makes it transparent for the machine, it should just work for MAAS21:05
inureok21:06
inurety for the advice21:06

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!