Re: Fwd: How to do network segregation with Juju deployment ?

[Mark Shuttleworth]

In the case of OpenStack, most of the charms support config options to
bind specific services to specific networks.

So, you can:

 * run a base script to bind the network interfaces you need to the
networks / vlans you want
 * set the config per charm manually

... which works, and it's how we do complex telco-style OpenStack
deployments, but it requires a handy piece of paper to remember what you
want where, and configure all 24 services correctly.

The work Dimiter is describing will mean you can do it much more simply:

 * tell MAAS about each of the network spaces you care about
 * juju deploy with a parameter that binds the service to the network space

All the magic will then Just Work, both for bare metal and container
workloads.

We're not far from that now. Note that charms will need to know about
this; the OpenStack ones will quickly support it (because that's how
we'd like to use them too) but it will take time for other charms to get
updated to look at the network model. Till they do, they will typically
bind to all the interfaces they see. In the common case, they will only
need one interface, and it will be on the right network, but in
complicated cases where they want to offer different services on
different networks the charm will need to know about the network model.

Mark


-- 
Juju mailing list
Juju@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/juju

Re: Fwd: How to do network segregation with Juju deployment ?

[Dimiter Naydenov]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi,

We're in currently developing more comprehensive networking features
in Juju, so soon you'll be able to configure this with Juju the way
you like it.

In the meantime, please ignore the --networks argument - it was
implemented partially as a proof of concept and never officially
supported or documented (it's only supported on MAAS and only for
nodes, not LXC containers or KVM instances).

If you want to get a node from MAAS on given networks, I'd suggest to
add tags on the nodes (e.g. tag net_public, net_internal) and then
use --constraints instead:
$ juju deploy keystone --constraints tags=net_internal,^net_public

Multiple tags can be specified in a comma-delimited list. If you
prefix a tag with ^ it means not this tag (i.e. exclude nodes
matching that tag before deciding which node to provision).

I hope this helps, and stay tuned for the upcoming networking features
in Juju!

Cheers,
Dimiter Naydenov

On  7.08.2015 18:16, 曾建銘 wrote:
 Hi all,
 
 I want to deploy OpenStack by Juju with network segregation. I got
 3 different subnets in my environment, and follow bellow steps to
 config:
 
 1. Set interfaces information in MAAS clusters tab. 2. Set networks
 information in MAAS networks tab. 3. Edit the network detail and
 set connected interface cards.
 
 I got two screen shots to display my current settings.
 
 
 
 
 Then, I used below commands try to deploy keystone service in LXC
 with multiple networks: $ juju bootstrap $ juju deploy keystone
 --networks=net_public,net_admin,net_internal --config=config.yaml
 --to lxc:0
 
 But it stuck for a long time with allocating status, so I checked
 the juju debug logs, then I found logs as below: ERROR
 juju.provisioner provisioner_task.go:630 cannot start instance for
 machine 0/lxc/1: starting lxc containers with networks is not 
 supported yet
 
 Is there anything I missed? Why juju told me networks is not
 supported yet?
 
 I have stuck with this problem for several days. If anyone have
 one minute to give me some hints, I will be very appreciate.
 
 Best Regards, Leon
 
 
 


- -- 
Dimiter Naydenov dimiter.nayde...@canonical.com
Juju Core Sapphire team http://juju.ubuntu.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJVxNROAAoJENzxV2TbLzHw+qIIAJqX9LGyhzLT9geKxSJQaEcW
oqtf5WGcgDECf5K/lFgqRtoQRm8m/BYvZx+kw2u4bzwlCtdf7XplO3Di53DDVMib
sc/ox2S+zhqwMXav3CrCy0P66uVNh9zCgjeo+Wbs3V5KCCLf/FHNUfLdi3XCpF4x
ZDyWVuBtICO0j/3OPglwE4iBSy0jUE7ZYaB0O2i4LgL6ednLgB4DOLmehjC6B2IO
AUX7GPHdYCodsc92mySfjMasGTi7gomPGSggOhy/iF7GO3Anx12aCSIdZuVGXpNx
Woltz3Id6TR8ZVnbdPQD4YpFF+l2iLw/YKTO6it1+izRBnEpksxJvThjoo05//o=
=ifY7
-END PGP SIGNATURE-

-- 
Juju mailing list
Juju@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/juju