[ovirt-users] Re: oVirt 4.4 - HA Proxy Fencing
Well there are a lot of Red Hat solutions about that one.
You will need a user in ovirt that will be used to restart the VMs.
In my case , I called it 'fencerdrbd' and it has beed granted 'UserRole'
permissions on the systems in the pacemaker cluster.
Here is my stonith device , but keep in mind that I added the engine's CA to the VMs
so I use 'ssl_secure=1':
[root@drbd1 ~]# pcs stonith show ovirt_FENCE
Resource: ovirt_FENCE (class=stonith type=fence_rhevm)
Attributes: ipaddr=engine.localdomain login=fencerdrbd@internal passwd=<REPLACED>
pcmk_host_map=drbd1.localdomain:drbd1;drbd2.localdomain:drbd2;drbd3.localdomain:drbd3
power_wait=5 ssl=1 ssl_secure=1
Operations: monitor interval=86400s (ovirt_FENCE-monitor-interval-86400s)
The VMs hostname to VM name mapping is done via pcmk_host_map option.
Keep in mind that due to VM live migration , it is nice to have a token and consensus
increased.Mines are 10000 for token and 12000 for consensus (3 VM cluster) , in your case
(2 node) 8000 would be OK.
If you use the 'admin@internal' user - you need to use
'--disable-http-filter' :
# pcs stonith update fence_device disable_http_filter=1
Extra info can be found at: https://access.redhat.com/solutions/3093891
Best Regards,
Strahil Nikolov
В неделя, 11 октомври 2020 г., 18:41:25 Гринуич+3, Jeremey Wise
<jeremey.wise(a)gmail.com> написа:
I have a pair of nodes which service DNS / NTP / FTP / AD /Kerberos / IPLB etc..
ns01, ns02
These two "infrastructure VMs have HA Proxy and pacemaker and I have set to have
"HA" within ovirt and node affinity.
But.. within HAProxy, the nodes use to be able to call the STONITH function of KVM to
reset a node if / as needed.
Fence Device: "stonith:fence_virsh"
But with oVirt this function no longer works.
For VMs and other applications which need STONITH functions, how would this be done with
oVirt.
I would assume the call would be to oVirt-Engine now, but not seeing documentation on
HA-Proxy / Pacemaker to use oVirt.
Can someone point me in the right direction?
--
penguinpages
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/B4KLZLPAIZM...