/srv/irclogs.ubuntu.com/2014/04/04/#juju.txt

=== hatch__ is now known as hatch
mischief61507hi, can someone tell me the purpose of admin-secret for openstack config?00:36
* davechen1y looks in the source00:37
davechen1yhmm, it's not openstack specific00:37
* davechen1y looks in the base config00:37
davechen1yok, its the admin password for your environment00:38
davechen1yyou should leave it unset00:38
mischief61507ok00:39
mischief61507when i did generate-config, it automatically inserted a default00:39
mischief61507it put an admin-secret and control-bucket. i am using 12.04 lts for my host os, and installed juju with https://juju.ubuntu.com/install/ instructions for ubuntu00:40
davechen1ymischief61507: oh sorry00:43
davechen1yyes00:43
davechen1yit's been so long00:43
davechen1yadmin-secret is a passphrase for your environment00:44
davechen1yit should be private00:44
davechen1yand unique00:44
davechen1ycontrol bucket is the name of the storage bucket00:44
davechen1ywhich will hold stuff about your environment00:44
davechen1yif you have two ec2 environments, say, then the control bucket must be unique00:44
davechen1yotherwise shit will get crazy00:44
mischief61507is admin-secret something i have to set on the openstack side or is that used to bootstrap it00:44
davechen1ymischief61507: it is the root password to your juju environment00:45
davechen1yit applies for all juju environments00:46
davechen1yit's not openstack specific00:46
davechen1yso has no relation to any other openstack credentials00:46
mischief61507looks like i forgot to set up swift on my openstack haha00:53
=== thumper-gym is now known as thumper
davechen1ymischief: yea, you need some kind of object storage to put juju stuff in01:55
davechen1yspecifically the tools and charms tarballs01:55
=== vladk|offline is now known as vladk
=== vladk is now known as vladk|offline
themonkmarcoceppi: hi03:00
=== timrc is now known as timrc-afk
themonkis there any firewall between unites in juju03:17
davechen1ythemonk: depends on the provider03:23
themonkits lxc container on my local machine03:24
themonkdavechen1y: its lxc container on my local machine03:25
davechen1ythemonk: what is your question03:27
davechen1ythemonk: are you asking why you cannot connect to lxc machines remotely ?03:28
themonkdavechen1y: is there any firewall between unites in juju? that means that if <some-unit>/0 has a server running with a open port XXXX will <some-other-unit>/0 can make request it? is there any sort of firewall?03:30
davechen1ythemonk: yes and no03:31
davechen1yin this case, no03:31
themonkthat means no firewall ryt03:31
davechen1ydavechen1y: i can't give you a clearer answer03:32
davechen1ycan you explain more abou the problem you have03:32
themonkok i will03:32
themonki have 2 charm, one of them is server, it take request from other charm, problem is server charm is not getting any request, before i file a bug I wanted to make sure that juju is not blocking it.03:36
rick_h_mattyw: ping, this current user branch thing landing. What's this mean for real user authentication?03:40
rick_h_mattyw: I'm worried about the GUI falling a chunk behind and not being usable03:40
davechen1ythemonk: if you are using the local provider there will most likely _not_ be a firewall between units03:40
davechen1yhowever your charms may be using the wrong address to talk to each other03:40
themonkdavechen1y: thanks :)03:41
themonkdavechen1y: is ec2 has any firewalls between units?03:42
davechen1ythemonk: generally no03:42
themonkdavechen1y: thanks a lot man :) much appreciated03:43
davechen1ynp03:43
davechen1yHA!03:48
davechen1yfunc uploadFakeTools(stor storage.Storage) error { versions := []version.Binary{version.Current} toolsVersion := version.Current03:48
davechen1y^ ja'cuse03:48
davechen1yversion.Current is always the arch of the local machine !!!03:48
thumperdavechen1y: yes... yes it is03:50
davechen1ybooo03:50
rick_h_mattyw: all good thanks03:50
rick_h_mattyw: seems like the network hates you for the moment03:51
mattywrick_h_, we're very much off and on03:51
=== vladk|offline is now known as vladk
=== vladk is now known as vladk|offline
=== vladk|offline is now known as vladk
=== vladk is now known as vladk|offline
=== CyberJacob|Away is now known as CyberJacob
=== CyberJacob is now known as CyberJacob|Away
=== vladk|offline is now known as vladk
=== vladk is now known as vladk|offline
=== psivaa_ is now known as psivaa
=== vladk|offline is now known as vladk
=== timrc-afk is now known as timrc
=== lazyPower-travel is now known as lazypower-conf
sinzuirogpeppe, natefinch : can either you glance at wallyworld's MP to fix tests that prevent the release of 1.18. https://code.launchpad.net/~wallyworld/juju-core/fix-tools-tests-1.18/+merge/21415913:00
wallyworldsinzui: sadly i have to rework them13:00
wallyworldbecause13:00
wallyworldthe current code disallows upload-tools for released juju versions13:01
wallyworldwhich is sensible13:01
wallyworldbut apparently people depend on it13:01
wallyworldso i need to reinstate the dumb behaviour, but there's a several tests which fail (existing tests)13:02
wallyworldso at some point certain code paths were run13:02
wallyworldit messy :-(13:03
=== tvan-afk is now known as tvansteenburgh
sinzuiwallyworld, Are you intimating that 1.18.0 will be releasable next week?13:14
wallyworldsinzui: i hope to have a fix proposed soon, within an hour maybe13:14
sinzuiWell I don't think the version blocks cmars and jhobbs. I can merge those now.13:15
sinzuiwallyworld, If something looks grim. I can release everything as 1.17.8...a beta for 1.18.0 that is just a rename next week13:15
wallyworldsinzui: ok, im hopeful so give me a little more time13:16
=== roadmr is now known as roadmr_afk
=== Ursinha-afk is now known as Ursinha
cariboumarcoceppi: niedbalski is working on a but on the nrpe charm that may be tied to the 'old' shell version of the helpers15:03
cariboumarcoceppi: though I have doubt as it seems to be the same code in the mysql charm & the behavior only happen with maas15:04
=== Ursinha is now known as Ursinha-afk
=== Ursinha-afk is now known as Ursinha
=== roadmr_afk is now known as roadmr
=== hatch__ is now known as hatch
jcastrohttps://juju.ubuntu.com/docs/howto-privatecloud.html15:50
jcastrofresh new docs folks!15:50
avoinenice15:55
overm1ndmarcoceppi I tried to open a bug for discourse charm but I got this error from launchpad: (Error ID: OOPS-48eaf11d28efcb274bb49c42de5f2ae2)16:18
overm1ndbasically is impossible to find the discourse charm submitting the big16:18
overm1ndbug*16:18
=== vladk is now known as vladk|offline
=== roadmr is now known as roadmr_afk
=== roadmr_afk is now known as roadmr
jcastro~2 hours until our Charm School on Juju plugins17:09
jcastromarcoceppi, ^^17:09
marcoceppioverm1nd: the charm is on gh17:11
marcoceppioverm1nd: https://github.com/marcoceppi/discourse-charm17:12
lemaois there a property in the local provider to force juju to use an explicit ssh user?17:26
joselemao: is that local or manual?17:28
lemaolocal17:29
joselemao: may I ask why? because afaik the local provider creates LXC for each machine17:30
lemaojose: This is a Vagrant JujuBox with a vagrant user by default. It seems that juju show-log is trying to ssh into current box with user ubuntu17:30
joseah17:30
josegotcha17:30
lemaojose: and jujubox provisions the authorized_keys in the vagrant user17:30
joselemme try and see if I get something17:30
lemaojose: I can work around by copying the authorized_keys to the ubuntu user, but it would be nice to have it working smoothly17:31
joseI don't seem to find something useful17:33
jcastrolemao, that seems to be a bug in the box to me17:42
jcastrowe should make it like autogen keys or something17:42
lemaojcastro: the vagrant user does have the key generated17:55
lemaojcastro: but juju show-log is trying to ssh into ubuntu@10.0.3.1 instead of vagrant@10.0.3.117:56
* jcastro nods17:56
lemaojcastro: my first thought was that there may be a property I can add to the local env file to change this default17:57
lemaojcastro, jose: https://bugs.launchpad.net/juju-core/+bug/120268218:11
_mup_Bug #1202682: debug-log doesn't work with lxc provider <cts-cloud-review> <debug-log> <local-provider> <papercut> <ssh> <ui> <juju-core:Triaged> <https://launchpad.net/bugs/1202682>18:12
jcastroyeah that one is in progress18:12
jcastroI just pinged them about it yesterday18:12
jcastrolemao, tail the log in ~.juju/local/logs is the workaround there18:12
lemaojcastro: thanks.18:13
jcastroall-machines.log is quite handy18:14
lemaojcastro: humm, I don't see all-machines.log there.18:14
lemaojcastro: 1.16.6-precise-amd6418:14
lemaojcastro: only machine-0.log18:15
jcastrooh, after you deploy something18:15
jcastroright now you just have the one machine18:15
lemaojcastro: I see. I do have machine-1 with juju-gui, but that came with the JujuBox afaik. Ok, not important. Thanks.18:18
lemaoI do have a more general question, though, if I may ask, that is bugging me for a couple of days.18:19
lemaoI would like to support RDS machines. It seems like an alternative machine to the amazon provider. How does one support that in juju as it seems that the amazon always creates EC2 instances.18:21
=== CyberJacob|Away is now known as CyberJacob
lemaoAfter searching around, I realized that subordinate services may be the answer here. However, what about identity of the RDS instance that may be shared among multiple services across different machines?18:22
jcastroyeah we haven't really done anything wrt. RDS18:23
jcastrolike, it'd be nice to just connect a mediawiki charm to an RDS instance instead of EC2/Mysql18:23
jcastro~30 minutes until our charm school on Juju Plugins! ^^ marcoceppi18:24
lemaojcastro: right. It seems that each provider has a single 'type' of machine. In the amazon's provider, that is an EC2 instance. It would be nice if I could specify a machine type that is required (constraint?) and that would mean the charm is provider specific.18:25
lemaojcastro: and the amazon provider would specify the default machine type and additional machines such as RDS18:26
marcoceppi\o/18:27
lemaojcastro: right now, it seems I can fake this with a subordinate service but to share instances I would have to assign a unique id/label to connect to the same RDS instance18:27
jcastrothat would be cool if it worked18:28
lemaojcastro: is my thinking correct or are there ways/approaches I am not aware off?18:29
jcastrolemao, I think provider-specific options in a charm are fine18:29
jcastrolemao, I think so; though I'd confirm on the list as well18:30
jcastrothough it would be cool to have provider-specific subordinates for things18:30
jcastroaws-s3-backup, etc.18:30
=== BradCrittenden is now known as bac
lemaojcastro: is it possible to override the machine creation logic when a charm is deployed? I.e. let my charm take over the machine creation to manually instantiate an RDS instance.18:35
jcastrolemao, I need to bail for a bit to run this charm school18:37
lemaojcastro: ok. Thanks for the help18:38
jcastroOk we're going to be doing a videocast in about 10 minutes on http://ubuntuonair.com18:52
jcastrothe Topic is Juju Plugins!18:52
jcastrowe'll be taking and answering questions from this channel18:52
ppetrakio/19:03
=== roadmr is now known as roadmr_afk
ppetrakiquestions?19:15
sfeoleany plans on the juju test plugin supporting all of the manual provider ???   ;)19:18
sfeoleI use juju test, it's quite useful. I've only used it with EC2 providers. After watching the presentation, i don't mind taking a crack at some of the bugs i've found with the plugin. Perhaps making some MPs to it19:19
sfeole;)19:20
sfeole;) to the trolling comment19:20
ppetrakisfeole, well, you're being ignored atm so...19:20
sfeolecool19:20
ppetraki;)19:20
axisysis there a juju/charm hangout today?19:23
sfeoleaxisys: http://ubuntuonair.com/19:24
axisysdo I need to connect to the irc on the web to see the hangout? it is a black screen for me19:25
axisyssfeole: ^19:25
sfeoleaxisys: try reloading the page?19:25
axisysI see it now19:25
sfeolekewl19:25
axisysthanks19:25
sfeolethanks guys!19:33
axisysthanka lot19:33
krondorfun stuff19:33
lemaohi all, is it possible to read environment properties from a charm? E.g. the amazon has the access/private keys that I would like to use in a charm.19:35
joselemao: you should be able to open the environments.yaml file and find that info19:37
marcoceppilemao: not from a charm not19:38
marcoceppino*19:38
lemaojose: yeah, that would be an option. It has a couple of drawbacks though: every charm would have to perform the same exact work and it is a bit error prone if I don't select the current environment right.19:39
lemaomarcoceppi, jose: I am trying to create an RDS subordinate service hence the question. It would be a bummer if I have to reenter the keys in the charm configuration19:40
marcoceppilemao: there's already an RDS charm, and it is a bummer19:40
lemaomarcoceppi: this one? https://code.launchpad.net/~hazmat/charms/precise/aws-rds/trunk19:40
marcoceppilemao: yeah, that one19:41
lemaomarcoceppi: it is using 'awsjuju.services.rds'. Do you know what is that and how it is installed?19:43
marcoceppilemao: no idea19:43
hazmatlemao, its a package that gets installed19:43
lemaohazmat: $CHARM_DIR/bin/pip install awsjuju I see19:43
hazmatlemao, most of the logic for my aws charms is in a python package that gets bootstrapped in install19:43
lemaohazmat: what about the keys?19:43
hazmatlemao, keys?19:44
lemaohazmat: access/private aws keys19:44
lemaoec2 keys19:44
hazmatlemao,  go into the service config19:44
hazmatlemao, i don't consider my aws charms production grade fwiw19:44
lemaohazmat: sorry for the obvious question, I am getting up to speed with juju19:44
lemaohazmat: I have the impression that juju-core needs a few additional changes to make this a bit smoother19:45
hazmatlemao, https://github.com/kapilt/awsjuju is the backend logic, unit tests, etc for aws rds, aws elb, tagging, etc19:45
hazmatlemao, you mean aws access key management ?19:45
hazmatlemao, in particular rds implementation is here https://github.com/kapilt/awsjuju/blob/master/awsjuju/services/rds.py19:46
lemaohazmat: something like 'env-get access-key'19:46
hazmatlemao, that would be rather a bad idea think..19:46
lemaohazmat: how so?19:47
hazmatlemao, you want to pass your credentials to third-party code ?19:47
lemaohazmat: yes, that is indeed a problem is you don't trust the charms.19:47
hazmatlemao, i recommend iam for all such cases19:47
lemaohazmat: what would be the ideal solution?19:47
lemaohazmat: expand the amazon provider?19:48
hazmatlemao, create an iam for each third-party charms that give them the exact access they need.. or an iam broker charm that can do the same..19:48
hazmatlemao, i tried to include iam policies needed for each of my aws charms.. but doesn't look like the rds charm got one.. here's the elb charm iam policy for comparison http://bazaar.launchpad.net/~hazmat/charms/precise/aws-elb/trunk/view/head:/elb-policy.json19:49
lemaohazmat: does RDS has support for IAM roles?19:49
lemaohazmat: oh, I see.19:50
hazmatlemao, this isn't quite iam roles.. this is create an iam identity with perms and hand those to the charm via service config19:50
lemaohazmat: you create a individual user for each charm with their own access keys.19:50
hazmatlemao, yeah19:50
lemaohazmat: I don't see subordinate: true there in the aws-rds. Won't that create a new machine for this service when deployed?19:54
hazmatlemao, use --to=019:55
lemaohazmat: I see. That smells like a unavoidable hack :-)19:56
hazmatlemao, you can place workloads wherever you want19:56
hazmatlemao, you don't have to create new machines for them19:56
hazmatlemao, if you want it to run isolated do --to=lxc:019:56
hazmatlemao, using a subordinate would mean distributing access keys and creating extra units.. its a proxy charm.. only needs 1 unit.19:57
hazmatlemao, yes there could be some simple notion of doing that for you based on metadata, but it amounts to the same, you need the charm to run somewhere.19:58
hazmatand yes.. all the aws charms support running multiple units for ha .. they use  dynamodb for coordination19:59
ghartmannit has happen with me a few times but some services fail to start they can't be deleted. I wonder if there is a flag like a force option20:00
lemaohazmat: yes, makes sense. the rds service is a proxy service that interfaces with an external machine and it has to run somewhere in the current environment. Machine-0 is the most obvious place or so it seems20:00
=== roadmr_afk is now known as roadmr
lemaohazmat: how are you handling things like smtp service (e.g. exim4)?20:02
lemaohazmat: is that a plain service with subordinate: true?20:02
hazmatlemao, smtp -> non subordinate charm.. ala postfix.. connect all the things that need it up.20:03
hazmatsaas email service might be better for aws though20:04
hatchmarcoceppi if you're ever looking for a broken charm again I wrote one which was designed to fail http://fromanegg.com/post/67488243238/a-juju-charm-designed-to-fail20:04
lemaohazmat: yes, but SES has some mime restrictions that don't work for me20:04
hazmatlemao, mailgun.. sendgrid.. etc20:04
marcoceppihatch: awesome, thanks!20:04
hatchnp, we use it in the GUI to test the failure paths :)20:04
hazmatlemao, postfix/exim are going to run afoul of the spam blocks aws ip ranges20:04
hazmat^on20:04
lemaohazmat: I see so if I want to use postfix I am basically creating a dedicated machine for it and have all the nodes connect to it20:05
lemaos/connect/relate/20:05
hazmatlemao, doesn't need to be dedicated.. you can place multiple workloads together if their compatible on the same machine20:06
hazmatlemao, hence the --to syntax on deploy or add-unit20:06
lemaohazmat: using --to I guess?20:06
hazmatlemao, yeah.. juju deploy --help20:06
lemaohazmat: which makes the order of deployment important20:07
hazmatlemao, not really20:07
hazmatlemao, which service goes onto the machine first doesn't matter.. the services communicate config via relations20:07
hazmatand a good charm doesn't assuming ordering to relation creation20:08
lemaohazmat: humm, but if I want to have postfix running on the same machine as ServiceA I will need to hard code a machine #20:08
hazmatpretty much none of them assume ordering20:08
hazmatlemao, that's unfortunate ... there's a feature request out there for --to=service for co-located services..  i've added a --to=service/a syntax in some tools i've built ontop of juju .. but thats not built-in.. http://pythonhosted.org/juju-deployer/config.html#placement20:10
hazmatits a simple dsl for capturing env topologies/deployments into a yaml file.20:10
lemaohazmat: yes, that would be nice. is this topology/deployment dsl being considered to be included in juju-core? It would be nice to be able to describe a set of machines and then assign services to them20:12
lemaohazmat: (actually remember going through juju-deployer)20:13
hazmatlemao, eventually.. lots of other tools build on deployer for bundle/dsl support..20:14
lemaohazmat: finally, do you have apps in production using juju on AWS?20:15
lemaohazmat: actually juju-gui could support first class machines along side services. Place a service in an empty canvas you get a machine wrapping a service. Place a machine you get just an empty machine. Place a service on an existing machine and then add the service there. This visual model would be easily translated to your dsl20:18
hazmatlemao, personally no.. i do on digital ocean using https://github.com/kapilt/juju-digitalocean20:25
hazmatlemao, gui is currently working on a machine view of the environment for placement as well20:26
hazmatlemao, the pricing model on ec2 is a bit much for me to do personal projects there minus reserved instances.. i'm looking forward to gce getting ubuntu images.. cause their pricing is pretty nice basically baking usage discounts without the reserved instance pricing up front cost.20:27
dpb1`is juju supposed to support deploying (for example) a trusty lxc to a precise bootstrap node with --to lxc:0 cs:trusty/ubuntu?  Seems it always ends up as a precise container.20:30
hazmatdpb1`, it definitely should be a trusty container20:32
dpb1`hazmat: :(20:33
hazmatdpb1`, file a bug pls20:33
lemaohazmat: never used digital ocean. Have been using AWS for 5+ years.20:33
dpb1`hazmat: on it20:33
hazmatlemao, fair enough. aws has lots going for it.20:33
hazmatlemao, i maintain a few prod non juju aws envs.. their feature iteration is pretty impressive20:34
lemaohazmat: yes, not the cheapest but they have been improving on it non-stop20:35
lemaohazmat: looking at kapilt/awsjuju I was wondering: it would be quite nice if it was possible to create provides in the same way one creates charms (i.e. hooks, any language, etc)20:36
lemaohazmat: s/provides/providers/20:36
lemaohazmat: set of key events (install, create-unit, etc, etc)20:37
hazmatlemao, yup.. its been discussed.. smoser is a fan.. the shell-script provider..20:37
hazmatlemao, its sort of possible now.. that's basically how the juju digital ocean provider works.. it layers  on top of the manual provider.. to do client side provisioning.20:38
lemaohazmat: it may be a temporary win until there is a stable provider that everyone can reuse and covers all features20:38
dpb1`hazmat:  https://bugs.launchpad.net/juju-core/+bug/130282020:38
_mup_Bug #1302820: juju deploy --to lxc:0 cs:trusty/ubuntu creates precise container <landscape> <juju-core:New> <https://launchpad.net/bugs/1302820>20:38
hazmatlemao, the issue with doing it server side is thats its problematic wrt to software install and upgrades across architectures..20:38
hazmatlemao, yup.. that's exactly the goal i have with making client-side providers.. also works in the case where providers don't nesc offer all the features nesc for a core implementation (userdata etc).20:39
lemaohazmat: nice to hear that these things are being worked on, or discussed. Was looking for some docs/info on juju directions...20:40
hazmatlemao, just filed bug 1302825 for it20:41
_mup_Bug #1302825: juju roadmap in the docs <juju-core:New> <https://launchpad.net/bugs/1302825>20:41
lemaohazmat: thanks!20:42
lemaohazmat: I find that juju provides a devops in-the-large that is much more interesting. Working with ansible, for instance, I end up slowly creating a framework on top of ansible to be able to quickly creating stacks etc. Juju provides that framewokr for me out of the box20:43
avoinels21:00
avoinels21:00
avoinel21:00
lemaohazmat: is there a repo for this shell-script provide by smoser? I could not find in his launchpad account.21:18
hazmatlemao, that's funny.. i'm using ansible and juju together atm..21:22
lemaohazmat: that makes sense to me ... juju in the large and ansible in the small21:23
hazmatlemao, the shell script provider doesn't exist..  an extant client side provisioning plugin is the juju digital ocean provider.21:23
lemaohazmat: I see. I will look at that then21:23
hazmatlemao, well ansible in charms is supported as well. there's a couple of helpers we have to make it fairly seamless as an experience.21:23
hazmatie. single yaml file charm, with the rest just as generic support21:23
lemaohazmat: I don't particularly care about ansible it just seemed a better option (simpler) than chef/puppet. But at the end of the day a charm may need to perform a few idempotent operations21:24
hazmatlemao, juju has a built-in ansible light.. sort of thing.. juju run .. let's you run stuff/shell on selective sets of machine21:24
lemaohazmat: interesting21:24
hazmatlemao, yup.. also easy to review/audit21:24
hazmatlemao, actually ansible light. is not accurate.. better is parallel ssh21:25
lemaohazmat: I am actually evaluating juju for our company. So I appreciate the information and feedback. I will be getting more hands on in the next couple of weeks and see how that goes.21:30
ghartmannwhen we have issues with particular charms ( gitlab in this case )21:34
ghartmannshould I be reporting the bugs ?21:34
marcoceppighartmann: yes!21:42
ghartmannhow is the best way ?21:43
marcoceppighartmann: on launchpad!21:43
ghartmannbtw, I am really happy with juju ! great work21:43
marcoceppighartmann: https://bugs.launchpad.net/charms/+source/gitlab/+filebug21:44
marcoceppighartmann: thanks! I know someone was working on fixing up the gitlab charm, I think it's lazypower-conf21:44
ghartmanngreat, if we have a bugfix how can we push the code in for review ?21:45
marcoceppighartmann: so, you'll want to run `charm get gitlab` if you haven't already, to branch the code. Then apply your fix and push to lp:~YOURLPUSERNAME/charms/precise/gitlab/trunk21:46
marcoceppithen run `bzr lp-propose lp:charms/gitlab` that will start the merge proposal process21:46
marcoceppiafter you complete that it'll show up in our review-queue!21:46
hazmatgitlabs.. very cool21:47
ghartmannthat sounds great, do you have the instructions on a webpage ?21:48
marcoceppighartmann: yes, for the most part, https://juju.ubuntu.com/docs/authors-charm-store.html#submitting_fix21:49
ghartmannthanks, I will set it up now21:52
ghartmannfound the issue that I was facing .. and got to a new one related with ruby22:21
ghartmannbundle install modernizer seems to be removed22:22

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!