How to operate MAAS

Docs
1

There are a number of peripheral activities associated with operating MAAS on a daily basis. Here, you can choose from the big picture view or dive into the very detailed permuted index.

The big picture of MAAS operations

The following peripheral operations make up part of day-to-day MAAS administration activities:

  • Enable HA: This article describes how to provide high availability (HA) for MAAS at both region and rack levels.
  • Set up MAAS metrics: MAAS services can provide Prometheus endpoints for collecting performance metrics.
  • Work with audit event logs: You can display and filter audit events via the CLI.
  • Use air-gapped MAAS: Many MAAS users maintain their data centres in an air-gapped environment that does not have an external Internet connection. MAAS runs well in this configuration, though keeping MAAS supplied with updates and images requires a bit of extra effort.
  • Back up MAAS: MAAS currently does not provide specific tools to back up and restore a working MAAS configuration. MAAS servers are part of your data centre, just like other Linux-based servers, so your current backup and disaster recovery solution should be sufficient to back up your MAAS environment. Even so, you should know which files and actions are critical – to ensure that you get a clean backup, and further ensure that you can restore it cleanly.
  • Secure MAAS: As a MAAS administrator, you have the critical responsibility of hardening your installation to help repudiate attacks and malicious actors. While there are too many variables to make meaningful suggestions for your deployed machines, there are a number of steps you can take to improve the overall security of your MASS setup. This article provides a few suggestions.
  • Manage users: Presumably, you have already created an administrative user, but MAAS can also have regular users (who log in to the interface or use the CLI). What users you create depends on how you intend to use MAAS.
  • Search MAAS: The Machines and Devices pages contain a powerful interactive search bar that lets you filter machines and devices. This article is designed to help you understand how to use this resource.

MAAS operations permuted index
About MAAS backup
About MAAS observability
About other things you can do to harden MAAS
About snap security
actions Auditing machine
add an API key for a user How to
add an SSH key for a user How to
add a user How to
a firewall for MAAS How to set up
air-gapped environment How to make package updates available in an
air-gapped environment How to retrieve or update MAAS images in an
air-gapped environment How to retrieve or update non-MAAS-maintained images in an
AlertManager How to start the
an air-gapped environment How to make package updates available in
an air-gapped environment How to retrieve or update MAAS images in
an air-gapped environment How to retrieve or update non-MAAS-maintained images in
an API key for a user How to add
and configure HA proxy Install
and Grafana Deploying Prometheus
and start the Loki service How to configure
and start the Prometheus service How to configure
another Move a rack controller from one MAAS instance to
an SSH key for a user How to add
API key for a user How to add an
API services How to enable load balancing for
API services How to enable highly-available
a rack controller from one MAAS instance to another Move
a rack controller How to avoid the potential pitfalls of moving
archive files to make the backup more efficient How to
a TLS-terminating load balancer How to configure
a transparent proxy How to set up
audit event records How to filter
audit events How to report
audit events to audit MAAS Using
Auditing machine actions
Auditing settings changes
audit MAAS Using audit events to
audit reports with jq How to pretty-print
a user’s preferences How to change
a user How to add
a user How to add an API key for
a user How to add an SSH key for
available in an air-gapped environment How to make package updates
available How to make rack controllers highly
available How to make region controllers highly
avoid the potential pitfalls of moving a rack controller How to
backing up How to stop specific services before
backup more efficient How to archive files to make the
backup About MAAS
backup How to choose configuration files for
backup How to prepare PostgreSQL data for
balancer How to configure a TLS-terminating load
balancing for API services How to enable load
before backing up How to stop specific services
BMC How to enable highly-available
can change their password How users
can do to harden MAAS About other things you
change a user’s preferences How to
changes Auditing settings
change their password How users can
choose configuration files for backup How to
configuration files for backup How to choose
configure and start the Loki service How to
configure and start the Prometheus service How to
configure a TLS-terminating load balancer How to
configure HAProxy How to
configure HA proxy Install and
configure multiple region endpoints How to
configure the observability stack How to
Configuring Prometheus
consulting Whom to contact for MAAS security
contact for MAAS security consulting Whom to
controller from one MAAS instance to another Move a rack
controllers highly available How to make rack
controllers highly available How to make region
controller telemetry How to export MAAS
controller How to avoid the potential pitfalls of moving a rack
correct operation How to verify
create manual filters How to
database to normal operation How to restore the
data for backup How to prepare PostgreSQL
Deploying Prometheus and Grafana
DHCP services How to enable highly-available
do filtered searches How to
do simple searches How to
do to harden MAAS About other things you can
efficient How to archive files to make the backup more
enable highly-available API services How to
enable highly-available BMC How to
enable highly-available DHCP services How to
enable highly-available PostgreSQL How to
enable load balancing for API services How to
Enabling Prometheus endpoints
endpoints How to configure multiple region
endpoints Enabling Prometheus
environment How to make package updates available in an air-gapped
environment How to retrieve or update MAAS images in an air-gapped
environment How to retrieve or update non-MAAS-maintained images in an air-gapped
event records How to filter audit
events How to report audit
events to audit MAAS Using audit
export MAAS controller telemetry How to
features How to use MAAS observability
File permissions
files for backup How to choose configuration
files MAAS log
files System log
files to make the backup more efficient How to archive
file PEM
filter audit event records How to
filtered searches How to do
Filter properties reference
filters How to create manual
firewall for MAAS How to set up a
Firewall logs
for API services How to enable load balancing
for a user How to add an API key
for a user How to add an SSH key
for backup How to choose configuration files
for backup How to prepare PostgreSQL data
for MAAS security consulting Whom to contact
for MAAS How to set up a firewall
for MAAS How to set up Prometheus
from one MAAS instance to another Move a rack controller
Good passwords
Grafana Deploying Prometheus and
Grafana How to start
HAProxy How to configure
HAProxy How to install
HA proxy Install and configure
harden MAAS About other things you can do to
highly-available API services How to enable
highly-available BMC How to enable
highly-available DHCP services How to enable
highly-available PostgreSQL How to enable
highly available How to make rack controllers
highly available How to make region controllers
How to add an API key for a user
How to add an SSH key for a user
How to add a user
How to archive files to make the backup more efficient
How to avoid the potential pitfalls of moving a rack controller
How to change a user’s preferences
How to choose configuration files for backup
How to configure and start the Loki service
How to configure and start the Prometheus service
How to configure a TLS-terminating load balancer
How to configure HAProxy
How to configure multiple region endpoints
How to configure the observability stack
How to create manual filters
How to do filtered searches
How to do simple searches
How to enable highly-available API services
How to enable highly-available BMC
How to enable highly-available DHCP services
How to enable highly-available PostgreSQL
How to enable load balancing for API services
How to export MAAS controller telemetry
How to filter audit event records
How to implement PostgreSQL security
How to install HAProxy
How to make package updates available in an air-gapped environment
How to make rack controllers highly available
How to make region controllers highly available
How to prepare PostgreSQL data for backup
How to pretty-print audit reports with jq
How to report audit events
How to restore the database to normal operation
How to restore the system when needed
How to retrieve or update MAAS images in an air-gapped environment
How to retrieve or update non-MAAS-maintained images in an air-gapped environment
How to set up a firewall for MAAS
How to set up a transparent proxy
How to set up partial matching
How to set up Prometheus for MAAS
How to start Grafana
How to start the AlertManager
How to stop specific services before backing up
How to use logs to identify security issues
How to use MAAS observability features
How to verify correct operation
How users can change their password
identify security issues How to use logs to
images in an air-gapped environment How to retrieve or update MAAS
images in an air-gapped environment How to retrieve or update non-MAAS-maintained
implement PostgreSQL security How to
in an air-gapped environment How to make package updates available
in an air-gapped environment How to retrieve or update MAAS images
in an air-gapped environment How to retrieve or update non-MAAS-maintained images
Install and configure HA proxy
install HAProxy How to
instance to another Move a rack controller from one MAAS
issues How to use logs to identify security
jq How to pretty-print audit reports with
key for a user How to add an API
key for a user How to add an SSH
load balancer How to configure a TLS-terminating
load balancing for API services How to enable
log files MAAS
log files System
logs Firewall
logs Web server
logs to identify security issues How to use
Loki service How to configure and start the
MAAS backup About
MAAS controller telemetry How to export
MAAS images in an air-gapped environment How to retrieve or update
MAAS instance to another Move a rack controller from one
MAAS log files
MAAS observability features How to use
MAAS observability requirements
MAAS observability About
MAAS security consulting Whom to contact for
MAAS How to set up a firewall for
MAAS About other things you can do to harden
MAAS How to set up Prometheus for
MAAS Using audit events to audit
machine actions Auditing
make package updates available in an air-gapped environment How to
make rack controllers highly available How to
make region controllers highly available How to
make the backup more efficient How to archive files to
manual filters How to create
matching How to set up partial
more efficient How to archive files to make the backup
Move a rack controller from one MAAS instance to another
moving a rack controller How to avoid the potential pitfalls of
multiple region endpoints How to configure
Multiple search terms
needed How to restore the system when
non-MAAS-maintained images in an air-gapped environment How to retrieve or update
normal operation How to restore the database to
observability features How to use MAAS
observability requirements MAAS
observability stack How to configure the
observability About MAAS
of moving a rack controller How to avoid the potential pitfalls
one MAAS instance to another Move a rack controller from
operation How to restore the database to normal
operation How to verify correct
or update MAAS images in an air-gapped environment How to retrieve
or update non-MAAS-maintained images in an air-gapped environment How to retrieve
other things you can do to harden MAAS About
package updates available in an air-gapped environment How to make
partial matching How to set up
passwords Good
password How users can change their
PEM file
permissions File
pitfalls of moving a rack controller How to avoid the potential
PostgreSQL data for backup How to prepare
PostgreSQL security How to implement
PostgreSQL How to enable highly-available
potential pitfalls of moving a rack controller How to avoid the
preferences How to change a user’s
prepare PostgreSQL data for backup How to
pretty-print audit reports with jq How to
Prometheus and Grafana Deploying
Prometheus endpoints Enabling
Prometheus for MAAS How to set up
Prometheus service How to configure and start the
Prometheus Configuring
properties reference Filter
proxy Install and configure HA
proxy How to set up a transparent
rack controller from one MAAS instance to another Move a
rack controllers highly available How to make
rack controller How to avoid the potential pitfalls of moving a
records How to filter audit event
reference Filter properties
region controllers highly available How to make
region endpoints How to configure multiple
report audit events How to
reports with jq How to pretty-print audit
requirements MAAS observability
restore the database to normal operation How to
restore the system when needed How to
retrieve or update MAAS images in an air-gapped environment How to
retrieve or update non-MAAS-maintained images in an air-gapped environment How to
searches How to do filtered
searches How to do simple
search terms Multiple
secrets Shared
security consulting Whom to contact for MAAS
security issues How to use logs to identify
security How to implement PostgreSQL
security About snap
server logs Web
services before backing up How to stop specific
services How to enable highly-available DHCP
services How to enable load balancing for API
services How to enable highly-available API
service How to configure and start the Loki
service How to configure and start the Prometheus
settings changes Auditing
set up a firewall for MAAS How to
set up a transparent proxy How to
set up partial matching How to
set up Prometheus for MAAS How to
Shared secrets
simple searches How to do
snap security About
specific services before backing up How to stop
SSH key for a user How to add an
stack How to configure the observability
start Grafana How to
start the AlertManager How to
start the Loki service How to configure and
start the Prometheus service How to configure and
stop specific services before backing up How to
System log files
system when needed How to restore the
telemetry How to export MAAS controller
terms Multiple search
the AlertManager How to start
the backup more efficient How to archive files to make
the database to normal operation How to restore
their password How users can change
the Loki service How to configure and start
the observability stack How to configure
the potential pitfalls of moving a rack controller How to avoid
the Prometheus service How to configure and start
the system when needed How to restore
things you can do to harden MAAS About other
TLS-terminating load balancer How to configure a
to add an API key for a user How
to add an SSH key for a user How
to add a user How
to another Move a rack controller from one MAAS instance
to archive files to make the backup more efficient How
to audit MAAS Using audit events
to avoid the potential pitfalls of moving a rack controller How
to change a user’s preferences How
to choose configuration files for backup How
to configure and start the Loki service How
to configure and start the Prometheus service How
to configure a TLS-terminating load balancer How
to configure HAProxy How
to configure multiple region endpoints How
to configure the observability stack How
to contact for MAAS security consulting Whom
to create manual filters How
to do filtered searches How
to do simple searches How
to enable highly-available API services How
to enable highly-available BMC How
to enable highly-available DHCP services How
to enable highly-available PostgreSQL How
to enable load balancing for API services How
to export MAAS controller telemetry How
to filter audit event records How
to harden MAAS About other things you can do
to identify security issues How to use logs
to implement PostgreSQL security How
to install HAProxy How
to make package updates available in an air-gapped environment How
to make rack controllers highly available How
to make region controllers highly available How
to make the backup more efficient How to archive files
to normal operation How to restore the database
to prepare PostgreSQL data for backup How
to pretty-print audit reports with jq How
to report audit events How
to restore the database to normal operation How
to restore the system when needed How
to retrieve or update MAAS images in an air-gapped environment How
to retrieve or update non-MAAS-maintained images in an air-gapped environment How
to set up a firewall for MAAS How
to set up a transparent proxy How
to set up partial matching How
to set up Prometheus for MAAS How
to start Grafana How
to start the AlertManager How
to stop specific services before backing up How
to use logs to identify security issues How
to use MAAS observability features How
to verify correct operation How
transparent proxy How to set up a
up a firewall for MAAS How to set
up a transparent proxy How to set
update MAAS images in an air-gapped environment How to retrieve or
update non-MAAS-maintained images in an air-gapped environment How to retrieve or
updates available in an air-gapped environment How to make package
up partial matching How to set
up Prometheus for MAAS How to set
up How to stop specific services before backing
use logs to identify security issues How to
use MAAS observability features How to
users can change their password How
user’s preferences How to change a
user How to add a
user How to add an API key for a
user How to add an SSH key for a
Using audit events to audit MAAS
verify correct operation How to
Web server logs
when needed How to restore the system
Whom to contact for MAAS security consulting
with jq How to pretty-print audit reports
you can do to harden MAAS About other things
2

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.