Subcategories

• Management

  VMs, hosts, pools, networks and all other usual management tasks.
  486 Topics

  4k Posts

  J

  Affinity Manager Plugin WHAT: In keeping with my previous project (Tag-Automation Plugin, found here), I am releasing the Affinity Manager Plugin, which is a fully tag-driven plugin for Xen Orchestra. It is designed to provide VM placement and grouping controls based on assigned tags, which are managed by predefined tag rules: PROGRAM FEATURES Host Affinity (RunOn) Run VMs on specific host group (e.g. a particular data center or set of hosts) Host Anti-Affinity (NotOn) Keep VMs off of specific host group VM Keep-Together (KeepTogether) Keep named group of VMs on the same host (follows Leader VM) VM Separation (KeepApart) Spread named group of VMs across unique hosts (best-effort) VM TAG SYNTAX Apply tags to VMs in the XO UI: VM TAG / RULE EXAMPLE MEANING AM-RunOn_{HostGrpName} AM-RunOn_P1-DC2-HOST VM should run on hosts tagged P1-DC2-HOST AM-NotOn_{HostGrpName} AM-NotOn_P2-DC1-HOST VM should NOT run on hosts tagged P2-DC1-HOST AM-KeepTogether_{GrpName} AM-KeepTogether_AppStack1 Keep all group VMs on same host (follows Leader VM) AM-KeepApart_{GrpName} AM-KeepApart_DBCluster1 Spread group VMs across unique hosts (best effort) Note: Multiple rules can be combined on a single VM. For example, a VM can have both AM-RunOn_P1-DC1-HOST and AM-KeepTogether_WebCluster simultaneously. HOST TAG SYNTAX Apply tags to hosts in the XO UI (i.e. to define host groups): EXAMPLE HOST TAG POOL LOCATION P1-DC2-HOST POOL-1 Data Center 2 P2-DC1-HOST POOL-2 Data Center 1 Installation Download the latest airgap release tarball from GitHub: https://github.com/johnezero/xo-affinity-manager/releases SCP the tarball to your XOA: scp xo-affinity-manager-airgap-vX.X.X.tar.gz <xoa-user>@<xoa-ip>:/tmp/ Create the plugin folder: sudo mkdir -p /usr/local/lib/node_modules/xo-server-affinity-manager Extract directly into the plugin directory: sudo tar -xzvf /tmp/xo-affinity-manager-airgap-vX.X.X.tar.gz -C /usr/local/lib/node_modules/xo-server-affinity-manager/ --strip-components=1 Restart xo-server: sudo systemctl restart xo-server Verify registration: sudo journalctl -u xo-server -n 100 --no-pager | grep -A3 "affinity-manager" You should see: [INFO] xo-affinity-manager: Plugin factory called -- xo context: YES [INFO] xo-affinity-manager: Plugin loaded -- waiting for core started. xo:plugin INFO successfully register affinity-manager Enable and configure the plugin in XO: Settings -> Plugins -> affinity-manager -> Enable CONFIGURATION (XO > Settings > Plugins) Enforcement Schedule — Run every 15 minutes, hourly, or daily (configurable) Dry Run Mode — Logs all intended actions without migrating anything (default: ON) Log Path — Configurable path to the log (Created automatically if it does not exist). Pool Safety — Cross-pool migration is always blocked (i.e. Plugin only migrates VMs within the same pool) Log Rotatate — Rotate/compress log files at 10 MB (keeping 3 archives) LINKS GitHub: https://github.com/johnezero/xo-tag-automation_plugin STANDARD DISCLAIMER HERE This software is provided AS-IS without any express or implied warranty. While this plugin is being used in a production environment managing live VMs, you should always review the code and test it in a non-production environment before full deployment. Note: The plugin is designed to ONLY take action on VMs with specific predefined tags assigned -- all other VMs are never touched. Use Dry-Run mode to preview all changes before applying them. That said, as always - your mileage may vary... [image: 1788399103619-johnezero-logo-small.png]
• Advanced features

  ACLs, Self-service, Cloud-init, Load balancing...
  106 Topics

  869 Posts

  T

  @mpiton Thanks for looking into this, I guess it wasn't apparent that I needed to click the Save Configuration button for that plugin. I did that and confirmed that the secret now survives an xo-server restart. Thanks again!
• Backup

  All XO backup features: full and incremental, replication, mirrors...
  528 Topics

  6k Posts

  A

  @florent I sent pm with support tunnel. Are you able to apply patch or will patch be pushed live soon?
• REST API

  Everything related to Xen Orchestra's REST API
  87 Topics

  650 Posts

  A

  @poddingue Borrow away - "smoke alarm" is a better name for it than anything we had, so we might borrow it right back. Since you mentioned reading the matrix - here is the classification you would be reading, straight from the file: grep access: dadl/xen-orchestra.dadl | sort | uniq -c 49 access: admin 21 access: dangerous 122 access: read 75 access: write 122 of the 267 tools are plain read - that is the entire surface a review-capped agent gets. The other 145 exist in the same file, but for that agent they might as well not. The whole security taxonomy is greppable plaintext - which is rather the point of a declarative format. And if anything in the matrix looks wrong or missing, this thread is exactly the right place - real-world corrections are how it improves.
• Infrastructure as Code

  Terraform, Packer or any tool to do IaC
  51 Topics

  485 Posts

  C

  @koushik you have to use the Helm controller addons for RKE2 to deploy autmatically the Helm chart for the Xen Orchestra CCM with the field spec.bootstrap set to true: Field | Default | Description -------------------------------------------------- `spec.bootstrap` | `false` | Set to True if this chart is needed to bootstrap the cluster (Cloud Controller Manager, etc) EDIT: I wrote a wiki page with what I've tested https://github.com/vatesfr/xenorchestra-cloud-controller-manager/wiki/Rancher-RKE2