Design issue when using optional networks for administrative usages

[Mike Kolesnik]

Hi, 

I would like to hear opinions about what I consider a design issue in oVirt. 

First of all, a short description of the current situation in oVirt 3.3: 
Network is a data-center level entity, representing a L2 broadcast domain. 
Each network can be attached to one or more clusters, where the attachment can have several properties: 
- Required/Optional - Does the network have to be on all hosts or not? 
- Usages (administrative): 
- Display network - used for the display traffic 
- Migration network - used for the migration traffic 

Now, what bothers me is the affinity between these two properties - if a network is defined "optional", can is be used for an "administrative" usage? 

Currently I can have the following situation: 
0. Fresh install with some hosts and a shared storage, and no networks other than default. 
1. Create a network X. 
2. Attach to a cluster as "migration", "display", "optional". 
3. Create a VM in the same cluster. 

Now all is well and everything is green across the board, BUT: 
1. The VM can't be run on any host in that cluster if the host doesn't have the display network. 
2. VM will migrate over the default network if the network is not present on the source host. 
3. Migration will not work if the network is not present on the destination host. 

I find this situation very troublesome! 
We give the admin the impression that everything is fine and dandy, but underneath the surface everything is NOT. 

If we look at the previous points we can see that: 
1. No VM can run in that cluster, but hosts and network seem A-OK - this is intrinsically awful as we don't reflect the real problem anywhere in the network nor the host statuses but rather postpone it until someone makes an attempt to actually use the VM. 
2. Migration network is NOT being used, which was obviously not the intent of the admin who set it up. 
3. There is still an open bug for it ( https://bugzilla.redhat.com/983515 ) and it's unclear as to what should happen, but it would be either what happens in case #1 or in case #2. 

What I suggest is to have any network with usage be "required". 
This will utilize the existing logic for required networks: 
- Either the network should not be used until its available on all hosts (reflected in the network status being Non-Operational) 
- Or the host should be Non-Operational as it's incapable of running/migrating VMs 

Therefore reflecting the problem to the admin and giving him a chance to fix it properly, and not hiding the failure until it occurs or doing some unexpected behavior. 

I would love to hear your thoughts on the subject. 

Regards, 
Mike 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/arch/attachments/20130908/f337fd25/attachment.html>