=== CyberJacob|Away is now known as CyberJacob [11:46] ok, so I'm starting my first charm - are there any good examples of charms written with Ansible? [11:48] and BTW do I have to use bzr? [12:00] should charm's service start with the system (especially if it's basicaly stateless), or should it be started in config-changed? [12:09] oh, I see it should (at least after "start") === freeflying__ is now known as freeflying [14:19] now, an architectural question: I want to make a Sentry charm that actually uses relation (the one in store now is pretty simple). Sentry is a server that aggregates errors from other services - the errors are provided by a dedicated (HTTP-based AFAIK) protocol, assigned to an app, and then grouped etc. [14:19] how should I provide the application name for a given relation? [14:20] should I make it one of relation's options, and make the consumer set it? === mup_ is now known as mup [17:03] plz consider: https://github.com/juju/juju/pull/966 [17:23] hmm, what should I do about internal app's secrets that users might or might not care about? Like Django's secret key? [17:27] Put them on a peer relation? [20:19] I have re-added a service after removing it, and now the machine is stuck in "agent-state: pending". What can I do about it? What should I look at? [20:23] hmm, and it looks like destroying that machine outside juju didn't help at all... I'll just redo that environment === CyberJacob is now known as CyberJacob|Away === CyberJacob|Away is now known as CyberJacob [23:08] ktosiek: Good questions - which service was stuck in agent state pending? As that should only happen during the provisioning of a machine [23:08] typically it means the machien never fully came online [23:08] ktosiek: looks like you've had a day full of juju [23:09] yeah, it looks pretty promising. But it would be much easier with more active people here ;-) [23:10] it was a service I'm trying to write, and I didn't know about "resolved" or looking at error in "status" when I was asking about that [23:11] turned out to be a combination of low RAM and slow HDD (and watching movies from said HDD) [23:12] lazyPower: do you use Juju in production? [23:12] ktosiek: i sure do [23:13] ktosiek: we're usually active mon-fri from ~ 4am EDT to ~ 8pm EDT [23:13] how do you store secrets? I mean things like Django's secret key, or SSL keys [23:13] we've got a mix of people from Europe and the US working on the project. [23:13] ktosiek: using the RAILS charm as an example, there is an ENVIRONMENT export config option [23:13] now, that relies on foreman [23:14] not sure how its used in the django charm - i dont have extensive hands on experience with it. [23:14] oh, so you have foreman next to juju [23:14] negative [23:14] foreman the ruby gem, puts the exports in teh upstart job it builds. [23:14] thats how heroku does it [23:14] which i know i know, so many projects with the name foreman its difficult to keep them straight. [23:15] however, you can use whatever config management framework you with with juju - so long as you write the underlying scripts in alignment with juju's event driven system, and they are idempotent. [23:15] ktosiek: re-using rails as an example, it wraps chef-solo to do the heavy lifting. [23:15] hmm, but how do you provide the secrets to new units? [23:16] ktosiek: and you asked about a solid ansible charm example - i suggest taking a look at our ElasticSearch charm - its written 100% in ansible [23:16] ktosiek: once you set it on the service, and you juju add-unit 'service' - they are distributed amongst the units. [23:17] eg: i set the SECRET_KEY_BASE environment variable for my rails app, and every new unit i spin up in that service cluster, automatically receives that SECRET_KEY_BASE [23:18] ok, so you set it in service's configuration. Then it's stored in juju state server? [23:18] basically [23:18] http://i.imgur.com/9dc2jpr.png -- also you asked about me using juju in production - there's my prodstack [23:19] is there a way to impersonate a unit (to peek at some other unit's secrets)? (state server looks like a pretty lucrative attack target...) [23:19] just juju debug-hooks on that unit [23:19] then you can inspect the data being sent over the wire with relation-get [23:19] or config-get [23:19] ktosiek: https://juju.ubuntu.com/docs/authors-hook-debug.html [23:20] oh, I mean as another unit (like when someone breaks into one of the world-facing servers) [23:20] not as an admin [23:20] nope [23:20] you have to be within the context of juju to query juju information [23:21] cool ^_^ [23:21] i mean its probably possible - if you work hard enough at it. I dont know what would be involved. thats a question better suited for #juju-dev when the core devs are around [23:21] much like trying to interrogate a chef-controlled unit, it can be done remotely but takes an unwholly amount of efffort [23:22] and about that screenshot... what are those heartbeat icons? [23:22] they signify a subordinate service [23:22] subordinates are deployed into an existing service machine - they occupy scope: container - so if its in an lxc container ona node, it lives in that lxc container [23:22] if its on the host, it lives on the host [23:23] oh, ok. Haven't played with those yet, but I've read that part of manual [23:23] hey so you've read docs all day [23:23] how do you feel about our documentation - as you've viewed it today. was it helpful? [23:23] well... [23:23] honesty points count ;) [23:25] first thing - navigation is awful. I have to find current site in the menu before I can go to the next one [23:25] * lazyPower nods [23:25] good feedback - keep it comin [23:26] having next/prev links with titles at the bottom would be great :-) [23:26] Did anything leap out at you as overly complex in explanation? or anything you had to re-read to understand? [23:27] not really, but I had some expectations about the overall workflow already (I've seen a talk about Juju on pycon pl) [23:28] Awesome. Thanks for the feedback ktosiek === CyberJacob is now known as CyberJacob|Away [23:29] but there's a lot of info I either missed or hadn't found yet - like how do I destroy things, what's the difference between {remove,destroy}-* commands, any info on resolved --retry [23:29] ah, well - lets break it down [23:30] remove-relation simply un-relates services. It doesnt' do anything destructive (unless the charm is implicit about how it hands that removal of relation - which depends on the context of the relationship - most subordinates will remove application binaries on relation-removed) [23:30] and I'm still not sure what "Added charm "local:trusty/sentry-7" to the environment." means (I mean, "added"? not "replaced ...-6 with ...-7"?) [23:30] destroy-service will remove teh service from teh machine, but the machine will be left in your environment [23:30] destroy-machine will terminate the machine at the cloud host (or lxc supervisor) [23:31] juju resolved is a YOLO brand of "who cares what happened, just go green" - juju resolved --retry will attempt to re-run the failed hook - and will continue to error if the hook exits with a code greater than 0 [23:32] when it says added, that just means that it was submit to the state server - as it handles pushing the new blob to the agent(s) [23:33] at one point and time we used git to do this delivery, but that was problematic when users would edit something on the machine and basically trip git up, so we went to all or nothing blob delivery [23:33] oh, ok [23:34] but would it be more useful to you to know that instead of 'added' - if we had an existing charm, to say "updated" "upgraded" or "replaced"? [23:35] actually, "submitted for redistribution" would be pretty nice (as it would also tell me something about what really happens :-)) [23:35] i can see how that would be confusing to other users though since the charm store is the primary delivery mechanism for charms [23:35] they might think the just inadvertantly published a charm [23:36] hmm, that's a good point too [23:36] but its good feedback to have regardless (i'm capturing this input to bring up at the next standup i attend) [23:36] I just happened by IRC before I sat down to do some more charming of my own network of services :) I'm off on Monday halleluja [23:37] haha [23:38] thanks for all the info, I'd like to pick your brain a little more but I've got to go to sleep now (it's already past midnight for me) [23:38] i'm usually around, feel free to ping me direct if i'm listed as present. [23:38] good to meet you ktosiek [23:38] see you tomorrow then ;-)