| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2017-04-10 | |||
| 13:54:32 | thomasem | I remember. | |
| 13:58:05 | mriedem | i must have blacked out, don't remember | |
| 13:58:20 | sfinucan | mriedem, kashyap: viva la long commit messages | |
| 13:58:32 | sfinucan | (albeit, properly formatted ones) | |
| 13:58:47 | kashyap | Commit _message_ is fine; summary not :P | |
| 13:59:51 | sfinucan | mriedem: RE: "<mriedem> sfinucan: is it possible to use choices with ListOpt?" - no, you can't | |
| 13:59:53 | openstack | Launchpad bug 1678686 in keystoneauth "keystoneauth doesn't use a default cafile" [Undecided,In progress] - Assigned to Sean McCully (sean-mccully) | |
| 13:59:53 | mriedem | dane-fichter: peter-hamilton: might be good to look at this and provide your opinions on if you think a default cafile is a good idea https://bugs.launchpad.net/nova/+bug/1678686 | |
| 13:59:59 | mriedem | sfinucan: yeah, nor DictOpt | |
| 14:00:11 | mriedem | sfinucan: although DictOpt with key/value choices would be ideal for disk_cachemodes | |
| 14:00:16 | peter-hamilton | mriedem: gotcha, i'll take a look at it | |
| 14:00:41 | mriedem | sfinucan: although i don't know how you transition from stropt to dictop w/o breaking config | |
| 14:00:56 | mriedem | unless you create a new option, new name, and deprecate the old one | |
| 14:01:15 | sfinucan | mriedem: ^ that, basically | |
| 14:01:17 | bauzas | mriedem: server groups are grouping instances, right? | |
| 14:01:31 | bauzas | mriedem: I mean, a server group can have different hosts within it | |
| 14:01:39 | bauzas | depending on the policy of course | |
| 14:01:42 | sfinucan | Would be pretty super for the PCI stuff too. Hmm... | |
| 14:02:11 | gibi | mriedem: migrating affinty group is not possible today. you will get no valid host. you can evacuate an affinity group with --force flag | |
| 14:02:12 | bauzas | mriedem: so, say you have an Affinity policty | |
| 14:02:25 | mriedem | gibi: ok that's what i thought | |
| 14:02:34 | openstack | Launchpad bug 1680773 in OpenStack Compute (nova) "Migration of a one VM deployed as part of group fails with NoValidHost" [Undecided,New] - Assigned to Arun Mani (arun-mani) | |
| 14:02:34 | mriedem | gibi: https://bugs.launchpad.net/nova/+bug/1680773 | |
| 14:02:45 | mriedem | they don't say what their group policy was in the bug, but i assume it was affinity | |
| 14:02:51 | mriedem | we should doc that limitation in the api-ref | |
| 14:02:58 | bauzas | mriedem: gibi: what if I have affinity policy and 2 hosts within that group | |
| 14:03:13 | bauzas | mriedem: gibi: AFAICU, it would be possible to migrate from one to another if that policy | |
| 14:03:30 | mriedem | i thought the server group with affinity policy was using the same_host scheduler hint? | |
| 14:03:32 | mriedem | so it's a single host | |
| 14:03:35 | bauzas | mriedem: no | |
| 14:03:38 | mriedem | i don't know what you mean by 2 hosts within that group | |
| 14:03:40 | gibi | bauzas: you cannot have an affinity group with two hosts iff you evacuated with --force | |
| 14:03:46 | bauzas | mriedem: same_host hint is for SameHostFilter | |
| 14:04:10 | gibi | bauzas: I mean can only have affinity group on two hosts iff you evacuated one of the VMs with --force | |
| 14:04:25 | bauzas | gibi: right, this is my point | |
| 14:04:36 | bauzas | gibi: so, say I end up with the group having 2 hosts | |
| 14:04:57 | bauzas | I guess it would be possible to migrate from one to another | |
| 14:05:13 | bauzas | also, I don't remember but I think we now have weighters right? | |
| 14:05:48 | gibi | bauzas: that means you have a broken group so I would not say anythin about what happens when you have a broken group. The precodition is not true so anything can happen | |
| 14:06:30 | gibi | bauzas: weighters for groups are to implement soft-affinity and soft-anti-affinity | |
| 14:06:55 | bauzas | oh right | |
| 14:07:01 | bauzas | seriously | |
| 14:07:14 | bauzas | Affinity and AntiAffinity are very strict policies | |
| 14:07:19 | gibi | yes | |
| 14:07:26 | mriedem | yeah i was thinking of ServerGroupAffinityFilter | |
| 14:07:31 | mriedem | i create a group with policy 'affinity' | |
| 14:07:36 | mriedem | create 3 servers in that group | |
| 14:07:40 | mriedem | i expect them to be on the same host | |
| 14:07:43 | mriedem | so i can't migrate them | |
| 14:07:45 | bauzas | mriedem: you're correct | |
| 14:07:47 | mriedem | b/c that would violate the policy | |
| 14:07:50 | gibi | correct | |
| 14:07:53 | mriedem | ok | |
| 14:08:01 | bauzas | mriedem: yup, but you can disable the filter if you need so | |
| 14:08:02 | mriedem | so we should document that in the api | |
| 14:08:09 | bauzas | well, it's a policy | |
| 14:08:09 | mriedem | bauzas: the operator can | |
| 14:08:10 | mriedem | the user can't | |
| 14:08:29 | bauzas | mriedem: sure, but the hint is transparent | |
| 14:08:38 | bauzas | I mean | |
| 14:08:45 | bauzas | it's self-explanatory | |
| 14:09:09 | bauzas | FWIW, it can even be a DoS vector... | |
| 14:09:13 | bauzas | like | |
| 14:09:25 | bauzas | of course we have quotas tho | |
| 14:09:42 | bauzas | but as a user, I can inflect which host my instances will end up | |
| 14:09:56 | bauzas | FWIW, I do much prefer the soft policies | |
| 14:10:41 | gibi | but soft mean nova promises nothing about the placement | |
| 14:10:54 | gibi | a soft affinity group with 10 instances on 10 different host is valid | |
| 14:11:18 | gibi | but most probably not what the user wanted | |
| 14:11:42 | gibi | so for me both affinity and soft-affinity have its use case | |
| 14:12:30 | mriedem | affinity is just for performance right? | |
| 14:12:34 | gibi | we could define the level of softness in the soft-affinity technically (e.g. how many violations are allowed) but that is extra complexity | |
| 14:12:41 | mriedem | i want my web server and db server on the same host | |
| 14:13:13 | gibi | mriedem: yes that is the use case in my head for affinity | |
| 14:13:21 | jaypipes | gibi: yeah, way too much complexity in my opinoin... | |
| 14:13:55 | mriedem | bauzas: gibi: i think it's still worth documenting in the api-ref that you can't migrate affined instances | |
| 14:14:06 | mriedem | users could think that we migrate the entire group | |
| 14:14:10 | mriedem | which we don't | |
| 14:14:43 | bauzas | gibi: I wouldn't play with affinity if I was a blind user honestly | |
| 14:15:12 | bauzas | gibi: I'd rather find a public cloud provider that would guarantee me some space with no noisy neighbors | |
| 14:15:52 | bauzas | gibi: affinity and anti-affinity policies are for super users that have kind of knowledge of what the cloud has in its guts IMO | |
| 14:16:03 | gibi | in a public cloud I would do that you suggest. In a private telco cloud I might use affinity and anti-affinity | |
| 14:16:21 | bauzas | that's my point | |
| 14:16:33 | bauzas | if I'm private cloud, I have a team to bog with | |
| 14:16:38 | bauzas | to bug* | |
| 14:16:55 | bauzas | like, I want to spin X instances and I want the maximum IO | |
| 14:17:00 | bauzas | that's a good thing | |
| 14:17:46 | gibi | yes | |
| 14:17:50 | gibi | I think we agree | |
| 14:17:54 | bauzas | but then, you'll end-up with such locked-in environment that you'll need the help of your SA team to move your instances or you kill'em all | |
| 14:18:35 | mriedem | well, when gibi implements migration of entire server groups, then this won't be a problem anymore | |
| 14:19:04 | gibi | migration of an entire group is something I like as an idea | |
| 14:19:22 | gibi | but it might needs a scheduler that considers more than one instances at a time | |
| 14:19:31 | gibi | or I have to order the instances properly | |
| 14:20:39 | gibi | so I feel a bit frightened to jump into that implementation right now | |
| 14:23:24 | gibi | also if we talk about server groups then one big limitation of the group approach over the same_host / different_host approach is that a instance can only be part of a single group today | |
| 14:23:42 | gibi | while the hints are allowing a lot more complex setup than tat | |
| 14:23:43 | gibi | that | |
| 14:24:41 | gibi | of course it is just a technical limitation today | |
| 14:25:06 | bauzas | mriedem: migrating a server group as a whole is kinda of a big deal with the current implementation | |