MayaScale utilizes instances with local NVMe devices and provides robust NVMe over Fabrics platform to clients that support NVMe/TCP. Deploy MayaScale in 2-node HA configuration if the NVMe devices are temporary storage devices to safe guard against data loss in the event of intteruption.interuption.
| Table of Contents |
|---|
Storage Optimized Instances
Choose storage optimized virtual machine (VM) sizes Lsv3, Lasv3, and Lsv2-series that feature high-throughput, low latency, and directly mapped local NVMe storage. These VM series come in sizes from 8 to 80 vCPU. There are 8 GiB of memory per vCPU, and one 1.92TB NVMe SSD device per 8 vCPUs, with up to 19.2TB (10x1.92TB) available on the largest VM sizes. Since these local NVMe disks are ephemeral, data will be lost on these disks if you stop/deallocate your VM but MayaScale in 2-node HA solves this problem.
Service Principal Account
Before configuring MayaScale High Availability create a Service Principal account with sufficient permissions to manipulate disk attachments for proper sharing and fencing, and also storage read-write access to object storage. It also needs sufficient permission to float the virtual IP across multiple instances. By having separate service account for all MayaNAS MayaScale deployments you can enforce proper security measures as the assigned roles are limited to this project instances only.
...
| Code Block | ||||
|---|---|---|---|---|
| ||||
az ad sp create-for-rbac --name mayascale-ha \
--scopes /subscriptions/de1374d24-1027-440d-97e3-574dcc83e7d3f/resourceGroups/mayanas-testing \
--role contributor
Creating 'contributor' role assignment under scope '/subscriptions/de1374d24-1027-440d-97e3-574dcc83e7d3f/resourceGroups/mayanas-testing'
The output includes credentials that you must protect. Be sure that you do not include these credentials in your code or check the credentials into your source control. For more information, see https://aka.ms/azadsp-cli
{
"appId": "daf98b5b-343a-4119-a08f-4ea837048e41",
"displayName": "mayascale-ha",
"password": "2v28Q~wGzmsvhy4tPeQHDbhDxEQPmUaRZMFnvbC_",
"tenant": "3d2547b6-c040-40bd-7911-edcd62a8b111"
}
|
...
| Info |
|---|
The above command requires subscription-id and resource group name where Mayascale will be deployed. To find the subscription ID az account show --query id -o tsv de1374d24-1027-440d-97e3-574dcc83e7d3f/ Please make a note of that password or also known as client secret value for Application Registered with Azure Active Directory. This will value will not be displayed again in the Azure portal. |
Service Prinicipal Login on MayaScale instances
Here is the sequence of steps involved in deploying High-Availability (HA) MayaScale on Azure cloud platform. The next steps assume you’ve already deployed at two MayaScale instances from Azure marketplace, with desired Availability Set.
- 2 compute instances for example
mayascale1, mayascale2 with public IPs 20.245.80.251. 20.245.82.185 - Instances created with ssh key generated to file for example
mayascale.pem - 1 or more NVMe devices locally attached to instances. Please refer to Azure documentation for instances that have NVMe SSDs.
- Default network for the internal
- Virtual IP: 50.50.50.50
Connect to the newly launched Mayascale instances using SSH to setup Service Principal account, which is required only if you are planning to configure HA services. Otherwise you may skip to the next step.
Perform the following steps for mayascale1 and mayascale2
| Code Block |
|---|
ssh -i ~/.ssh/mayascale.pem azureuser@20.245.80.251
sudo az login--service-principal -u daf98b5b-343a-4119-a08f-4ea837048e41 --tenant b9f7862a-7153-4501-8039-8d9b37d7c0a9 |
| Code Block | ||||
|---|---|---|---|---|
| ||||
{
"cloudName": "AzureCloud",
"homeTenantId": "3d2547b6-c040-40bd-7911-edcd62a8b111",
"id": "56813587-f424-4db0-af19-516c71f5800c",
"isDefault": true,
"managedByTenants": [],
"name": "Pay-as-you-go",
"state": "Enabled",
"tenantId": "3d2547b6-c040-40bd-7911-edcd62a8b111",
"user": {
"name": "daf98b5b-343a-4119-a08f-4ea837048e41",
"type": "servicePrincipal"
}
}
|
Change default GUI password
Change the MayaScale Administration GUI default password to something random by running
| Code Block | ||
|---|---|---|
| ||
# /opt/mayastor/web/genrandpass.sh |
Or to set your own password
| Code Block | ||
|---|---|---|
| ||
# /opt/mayastor/web/changepass.sh
Login name (default admin):
Login password:
Password again:
|
And then restart the web server for password changes to take effect
| No Format |
|---|
# /opt/mayastor/web/stop
# /opt/mayastor/web/start |
Connect to Mayascale Web Console
Now you can proceed with High-Availability setup using the Getting Started wizard from Administration Web console available on http://<mayascale1-ip>:2020
| Tip |
|---|
To avoid public network exposure of port 2020 it is recommended to use ssh tunneling with port forwarding as follows ssh -i ~/.ssh/mayascale.pem azureuser@<mayascale1-public-ip> -L 2020:localhost:2020 |
Next proceed to Configure MayaScale