maas-devel team mailing list archive

[Dean Henrichsmeyer <dean@xxxxxxxxxxxxx>]

On Thu, Sep 18, 2014 at 7:33 AM, Gavin Panella <gavin.panella@xxxxxxxxxxxxx>
wrote:

> ...
> >> For DEPLOYED nodes, sure, the command will currently be lost, but
> >> these nodes are, one assumes, under active management, and some
> >> process outside of MAAS will notice, be that a human or a Juju or
> >> something else.
> >
> > I think that's a dreadful user experience. We should not be knowingly
> > throwing away user requests.
>
> It's not perfect, but it's far from dreadful.
>
> MAAS can never provide a perfect service. Even if we coded everything
> perfectly, it would still suffer from failures outside of its control,
> like hardware failure, poor quality BMC firmware, human error, fire,
> flood, war, and so on. Not resuming power commands after a crash or
> restart of a cluster is a failure mode that we can iterate on and
> reduce, but it's not the end of days.
>

Throwing away user requests is very much dreadful. Because of exactly the
reasons you mentioned above - there are a lot of things outside of MAAS
that can impact what MAAS is trying to manage - conistency and accuracy is
key. If I in fact can't do something, then you error and tell me, you don't
drop the request on the floor.

Thanks,
Dean