Comments (13)
Versus the JSON file see some difference, might be recent changes or errors when JSON file has been created.
metastore:
consolidated-westeurope-prod-metastore.mysql.database.azure.com
has been added
artifact:
dbartifactsprodwesteu1.blob.core.windows.net
has gone
arprodwesteua1.blob.core.windows.net
has been added
Added them, now left with stgdbfssvc4c74.dfs.core.windows.net
, this should be a private endpoint connection, but is not. We have one for blob, but not DFS. This is likely linked to the changes to ADLS from Blob in the Azure Databricks service.
Will look to PR a fix.
from azuretre.
@marrobi we applied the fix and managed to get a Databricks cluster up and running.
Thanks for your quick response!
from azuretre.
Which Azure region are you using?
Can you check the Azure firewall logs for any traffic being denied from the subnet containing Databricks?
Also in the cluster logs, anything of note?
Ill try test it out this end, but might be a couple of days.
from azuretre.
I'm using region West Europe. I'll dive into the logs. Thank you.
from azuretre.
Only error in the cluster logs is the one mentioned.
from azuretre.
OK, if you can check the firewall logs. My guess is a file is trying to be downloaded but is blocked by the firewall - maybe a new FQDN dependancy. It's a couple of months since I've personally tested this.
If nothing obvious it might be worth opening a support ticket via the Azure portal for Databricks who might be able to provide some guidance.
from azuretre.
It could be related to this: https://learn.microsoft.com/en-us/azure/databricks/release-notes/product/2023/march#for-new-workspaces-that-use-udrs-azure-storage-ip-needs-an-additional-udr
from azuretre.
I'll check. But progress is slow. Running from one error into another.
from azuretre.
Just spinning up a cluster. Wil let you know how I get on.
from azuretre.
from azuretre.
In the firewall logs I can see:
HTTPS request from 10.1.5.132:39766 to stgdbfssvc4c74.dfs.core.windows.net:443. Action: Deny. No rule matched. Proceeding with default action
HTTPS request from 10.1.5.134:59862 to md-hdd-kjwr2pc2wdgv.z29.blob.storage.azure.net:443. Action: Deny. No rule matched. Proceeding with default action
HTTPS request from 10.1.5.132:38192 to umsarnnfvjl3bbcrdndk.blob.core.windows.net:443. Action: Deny. No rule matched. Proceeding with default action
Will check the rule collection versus published rules. We recently added a note here - https://microsoft.github.io/AzureTRE/unreleased/tre-templates/workspace-services/databricks/
This service uses a JSON file to store the various network endpoints required by Databricks to function.
If you hit networking related issues when deploying or using Databricks, please ensure this file https://github.com/microsoft/AzureTRE/blob/main/templates/workspace_services/databricks/terraform/databricks-udr.json contains the approprate settings for the region you are using.
The required settings for each region can be extracted from this document: https://learn.microsoft.com/azure/databricks/resources/supported-regions.
from azuretre.
Nice breaking change from the Azure Databricks service.
from azuretre.
@tljjvogten If you can test the changes in the PR would be appreciated. Works for me.
Easiest way is to create a copy of the Databricks workspace service from the PR branch into a /templates/workspace_services/databricks
directory and run make workspace_service_bundle BUNDLE=databricks
.
Thanks for reporting this.
from azuretre.
Related Issues (20)
- Sharing App Registration between Workspaces HOT 1
- make letsencrypt missing parameters HOT 4
- Custom Linux image unable to connect HOT 2
- Guacamole connections start to fail HOT 19
- Nexus container doesn't start causing Linux VM's to fail deployment HOT 26
- Automation runbook script to stop TRE resources fails if `certs` Application Gateway exists
- Provide PowerShell script to restart all TRE core resources after runbook has stopped them
- Custom actions fail in release 0.12 HOT 1
- Update "Azure AD" references to "Entra ID"
- Firewall rule for Nexus includes *pypi.org
- Unit Tests do not run in VSCode due to module not found errors
- Assign types to all vars and turn on the TFLint rule that validates it.
- Investigate alternative ways to handle dependency on base workspace in the airlock and unrestricted workspaces.
- AML Compute Instance fails to build - Invalid Name format HOT 2
- Release 0.13
- Airlock Processor Unable to Start HOT 16
- Airlock container creation HOT 5
- Update the project to remove dependency on last 4 characters of a resource ID
- Resources are missing ignore_changes = [tags] leading to churn when tags are applied using policy HOT 1
- In E2E tests Firewall doesn't deploy as Subnet not ready
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from azuretre.