split network environment

[Paolo de Rosa]

In some environments traffic segregation is needed due to security reasons, it would be good if zookeeper charm let us to decide where to bind zookeeper.
It would be useful to have an option in the charm where to select on which interface/network we can bind the service without relying on "unit-get private-address".

[Cory Johns (johnsca)]

As I noted on https://bugs.launchpad.net/charms/+source/apache-kafka/+bug/1602666, we're going to add this functionality to the Apache Bigtop charm for Zookeeper. I believe the current plan is for the Bigtop charm to replace the current Zookeeper charm maintained by James for the Xenial series.

The work for that is not yet in review, but it should be very similar to the work on the Kafka charm, so we are targeting to have it done next week and the new charm promulgated for Xenial.

[Kevin W Monroe (kwmonroe)]

Development version of the xenial/zookeeper charm with support for binding to a specific address has been pushed to:

https://jujucharms.com/u/bigdata-dev/zookeeper/xenial

We'll kick the tires on this one and promulgate if all looks good.

[Kevin W Monroe (kwmonroe)]

Well, we kicked the tires and the car fell apart. The current impl allows you to bind zookeeper to a single ip address via a config option. However, config is applied to all zookeeper units. This is problematic because different units will have different IPs.

We're re-working this config option to support a network or interface name. This would allow you to configure zookeeper so it only binds to an IP in the given network or to the IP of the given interface name.

We'll update this bug with a new rev is ready to test.

[Kevin W Monroe (kwmonroe)]

Similar story here as I just noted in Kafka bug 1602666. The issue raised in comment #3 was addressed in the following PRs:

https://github.com/juju-solutions/bigtop/pull/31
https://github.com/juju-solutions/bigtop/pull/33

Rev 0 of the bigtop zookeeper charm supports binding to a specific ip or interface:

https://jujucharms.com/zookeeper/xenial/0

Note!!
There are 2 Zookeeper charms in play here. "zookeeper" provides the Bigtop zookeeper package, but will not work in a network restricted environment. "apache-zookeeper" provides the vanilla upstream zookeeper package, and does have a mechanism for installing in a net-restricted env.

Only "zookeeper" contains this interface binding functionality. I'll leave this bug opened to track the progress of bringing this feature into the "apache-zookeeper" charm.

[Pen Gale (pengale)]

I have backported the binding changes to apache-zookeeper, and made fixes similar to those in kafka (interface now shares correct ip; local ipv6 addresses no longer cause Exceptions on physical machines).

PRs are here:
https://github.com/juju-solutions/layer-apache-zookeeper/pull/8
https://github.com/juju-solutions/interface-zookeeper/pull/4

And I've uploaded a charm to bigdata-dev for testing purposes:
cs:~bigdata-dev/trusty/apache-zookeeper-21

[Pen Gale (pengale)]

Updated the zookeeper charm: cs:~bigdata-dev/trusty/apache-zookeeper-22

(It was passing an interface name, rather than an ip, to the relation.)