/srv/irclogs.ubuntu.com/2017/01/25/#juju.txt

Teranetquestion can you move in juju a container from 1 machine to the next via command line by chance ?01:12
Budgie^Smoreso I am about to put a PoC using Juju onto AWS and am trying to figure out what the min instance size should be?01:13
marcoceppi_Budgie^Smore: t2.medium is pretty good for most things, depends on the owrkload02:18
Budgie^Smorewell I was just going to put the juju controller on it and maybe a kubernete-master node02:19
Budgie^Smoreit is probably only going to manage a few other slave nodes02:20
marcoceppi_Budgie^Smore: so, t2.medium should be okay for controller, m3.medium might be more stable02:26
marcoceppi_as for kubernetes-master / worker the master doesn't need too much if you're going to be doing a small number of worker nodes. The workers are really up to you depending on how many continaers you want to pack in per node02:27
Budgie^Smoreyeah I am looking at doing c4.4xlarge or c4.8xlarge for the slaves02:30
Budgie^SmoreI should be able to put the master on the same instance as the juju controller right/02:31
Budgie^Smore?02:31
Budgie^Smorelol managed to blue screen the work laptop! new windows 10!03:57
Budgie^Smoreis there a way for models to share machines?06:53
Budgie^Smorehey marcoceppi_ just came across your name on a GitHub "issue" in relation to useing AWS ELB as a substitue for kubeapi-load-balancer, defintely would get thumbs up from for that :)07:43
=== frankban|afk is now known as frankban
kjackalGood morning Juju world08:32
=== rvba` is now known as rvba
fang64I have been trying to deploy 10 nodes with Juju/MAAS and I've gotten to the point where I bootstrap juju onto MAAS as a cloud, but it doesn't indicate machine status when HA is enabled is this normal?12:36
marcoceppi_fang64: could you elaborate on machine status?12:38
fang64marcoceppi: when I type juju machines it indicates ha status is 1/312:39
fang64this is after I've enabled ha, and the hosts are done being deployed.12:39
fang64marcoceppi: I mean controllers sorry, wrong command12:40
fang64it does show the controller has machines 3 but HA is yellow with 1/312:41
fang64I assume it means high availability isn't working? because it's not indicating 3/3? maybe it's my lack of understanding12:42
fang64marcoceppi_: this is what I see, http://i.imgur.com/onIDdtL.png12:44
rick_hfang64: yes, it should work its way to 3/3 as HA kicks in and the db is replicated/etc12:46
fang64it's been a day12:46
fang64I don't think it takes that long for ha to enable?12:46
rick_hfang64: k, so something is up. You'll have to check the debug-log or at this point the logs on the machines12:46
rick_hfang64: no, definitely not12:47
fang64ok, so it's broken12:47
fang64I just wanted to make sure I wasn't misunderstanding,.12:47
rick_hno, definitely not. That's why it shows yellow in that you've asked for 3 controller nodes in HA, but only have one functioning12:47
fang64alright well I'll take a look, really I am trying to get to a point where I can deploy openstack, but I kept running into issues with bootstrap I suspect I have some network issues.12:48
rick_hfang64: oh, ok.12:48
fang64I don't know if anyone can answer this question, if I am deploying to MAAS as I am now, is juju using lxc containers or is it just installing the charms to physical hosts?12:50
rick_hfang64: so it depends on how you're installing12:50
fang64I just created maas as a cloud12:51
rick_hfang64: the bundles that the openstack folks use use lxd containers on the physical hosts to help spread things out12:51
fang64in juju and then told it to bootstrap12:51
rick_hfang64: so nothing there is lxd centric12:51
fang64ah ok12:51
rick_hfang64: you'll see in the bundle things getting told to go to 0:lxd or the like12:51
rick_hfang64: to help colocate the openstack services on deploy, but until you do that nothing is lxd unless told to be12:52
fang64ok, so in my case with juju bootstrap as it stands now it's provisioning the hosts as the failover12:52
fang64no containers being used to do that?12:52
rick_hso juju boostrap will go ask MAAS for one node, download the jujud binary to it, and start the service12:52
rick_hfang64: no, no containers being used to do that12:53
fang64ah ok, that's something I didn't understand initially when I looked at this, so juju is running on the host os, and when I enabled ha it grabbed 2 more12:53
rick_hfang64: exactly12:53
rick_hfang64: to have HA you need three machines so that you're not going to fall over if a disk dies/etc12:54
fang64that makes more sense, I was just a little confused what it's actually doing with MAAS12:54
fang64Another thing I was curious about which is responsible for networking configuration? Juju or MAAS?12:55
fang64or is it a combination of both, or it depends on what bundle or charm you are using?12:55
fang64rick_h: I appreciate the help, I'm going to try and figure out what's borked on my networking12:57
anrahIs there a way to react when controller losts connection to agent?13:10
anrahfor example now it says: agent lost, see 'juju show-status-log my-instance/3'13:11
stubanrah: If it doesn't recover, I think it means either your network is blocked between the controller and that unit, or one or more jujud agents has crashed and you have a Juju bug to deal with13:23
stubanrah: If you find a dead juju service, you can try restarting it to see if sorts itself out.13:24
anrahI mean that if i have a case where the server dies for reason X13:25
anrahmeaning some sort of selfhealing that juju would spin up replacament unit13:25
anrahI think that requires external monitoring and some magic with jujulib for python..13:26
stubYes. I don't think juju ever spins up new units without user input.13:27
stubIf you run juju recursively, you can even charm that :) I think some people do it for autoscaling.13:29
stub(probably easier now with 2.0 - you just need your monitoring charm given credentials for the main controller and it can administer itself and all the other models)13:31
tvansteenburghanrah: there's a basic autoscale/autoheal demo here: https://github.com/juju/python-libjuju/blob/autoscaler/examples/autoscale.py13:31
tvansteenburghyou could extend it to deal with more healing conditions13:32
anrahstub: Yeah, I have build something like that for autoscaling13:32
anrahnext step is to make it work with autohealing13:33
stubtvansteenburgh: Do you know if there is a best practice to adding unit tests to layers that don't mess up the main charm's tests?13:34
tvansteenburghstub: sorry, i dunno13:35
stubI think I either need to exlude them from charm build, or stick them in a non-standard directory13:36
=== ant_ is now known as ant__
beisnerstub, should be able to exclude unit/tests/file-by-name iirc15:20
beisneror some such15:20
MmikeHi, lads. How do I use 'Login wih USSO' in juju2's gui? I bootstraped 2,0 environment, did 'juju gui --show-credentials', opened the juju-gui URL in the browser, and when I click on 'Login with USSO' i get 'authentication failed: no credentials provided'17:12
Mmikei am logged within ubuntu single-sign-on17:13
MmikeI am also logged into charmstore17:13
lazyPowerMmike thats a great question.17:13
lazyPowerrick_h - is there any feedback/guidance here re USSO login support? or who should i be pinging to find out for mmike?17:14
rick_hMmike: hmm, that's only available if it's configured to use an external idenity provider.17:14
rick_hMmike: not useful for most cases unless you've bootstrapped that way17:15
Mmikerick_h: oh17:15
rick_hMmike: the --show-credentials should show you the username/password ot use in the gui17:15
Mmikerick_h: yup, those work, I just wanted to see how 'USSO' would work17:15
rick_hMmike: honestly, I think that button should be hidden unless the controller supports it.17:15
rick_hMmike: I'll bring it up with the team17:15
Mmikerick_h: that was my thinking too!17:15
Mmikerick_h: how do I bootstrap with external identity provider configured?17:16
Mmikethat's a controller option, or?17:16
rick_hMmike: it's a config. I'll have to see if I can find it sec17:16
Mmikethnx!17:17
rick_hMmike: https://lists.ubuntu.com/archives/juju/2016-September/007843.html17:17
rick_hMmike: beware "here be dragons" as it works but has side effects and such17:17
rick_hMmike: we were just working on things like show-model listing users with access/etc this morning17:17
rick_hMmike: so it's there but there's some things that it causes to act a bit wonky17:18
MmikeI see17:18
Mmikerick_h: thank you for that info17:18
rick_hMmike: np, hope that helps17:18
lazyPowerthanks rick_h17:18
MmikeI'm asking because on https://blog.jujugui.org/ it's mentioned that if you log in with sso you get additinoal options, etc...17:18
Mmikeso I was wondering how to get there17:18
Mmikebut, yea - disabling that button if controller doesn't support it would be the excellent17:19
rick_hMmike: what additional options?17:19
* rick_h skims17:19
rick_hMmike: not sure I can think of any additional options you get tbh17:20
rick_hit's the same juju/gui/etc17:20
Mmikerick_h: the video says that 'you can log in into controller using sso, and then you get additional canvas to select models, etc, etc'17:21
rick_hMmike: oh hmm, will have to watch that I guess.17:21
rick_hMmike: I mean it just shows models you have access to/etc17:21
Mmikerick_h: yup, maybe the video is confusing or giving information that's specific for a particular type of a controller17:23
aisraelWhat's the bash equivalent of charmhelper.config's .changed?17:25
cory_fuaisrael: You using reactive?  There is a state set that you can check with `charms.reactive is_state config.changed.foo`17:34
cory_fuaisrael: I don't know if there's a CLI for the actual method on Config.changed17:34
aisraelcory_fu, Yeah, this is a pure-bash charm, but I'm going to convert it to a layer, I think17:39
=== natefinch is now known as natefinch-afk
ZiclazyPower: (I prefer IRC over Slack :D) the last time you said to me that Canonical Kubernetes was not compatible with Helm, is that so?17:40
ZiclazyPower: about my issue with Vitess posted in their Slack, the guys from Vitess pointed me to https://github.com/youtube/vitess/tree/master/helm/vitess (work-in-progress)17:41
Zicit's a Helm package :s17:41
Zichelp charts* don't know the right word :)17:41
lazyPowerZic  - we certainly do support helm, but there is a known issue with teh current incantation of the kube-api-loadbalancer17:41
lazyPowerthe supported work around is to either update or clone your kubeconfig and point it directly at one of your kubernetes-master units, and expose the kubernetes master unit. Proxying through the master load balancer will cause you heartburn and trigger false positive failures with helm.17:42
Zicoh, I can do that17:42
lazyPowerZic - we have an open PR to actually put that in the upstream docs for the CDK17:42
lazyPowerthanks to SaMnCo for that submission *hattip*17:43
ZicI already access directly to my kubernetes-master on my LAN17:43
Zicand even the kube-api-loadbalancer is exposed only on LAN17:43
lazyPowerok, if you're already pointing directly at your master, you should be g2g17:43
Zicso I just need to upgrade my kubeconfig17:43
lazyPowerand if thats not the case, i want all your bugs and feedback around this so we can triage accordingly17:43
Zichehe :D17:43
lazyPoweryep, just point kubeconfig at the correct port/ip for a master and you should be g2g17:43
lazyPowerZic - not sure if you saw but we just landed *everything* upstream yesterday around 7pm CST17:44
lazyPowerhttps://github.com/kubernetes/kubernetes/pull/4032417:45
ZiclazyPower: as my Canonical Kubernetes cluster runs perfectly fine, I throw all of my ninja-power to make Vitess works in K8s... except I discovered today that their config (used in their official deployment guide) is not resiliant at all \o/17:45
Zicso... no, I didn't see anything from tech-world except my rage and tears with Vitess this last 2 days :)17:46
Zicbut noted, I will take a look )17:46
lazyPowerwell, i'm sorry to hear about the tears, but its awesome to hear that we are empowering you17:46
lazyPowermakes my own day to day tears worth while :)17:46
Zichuhu :)17:46
Zicsimply puts: canonical-kubernetes does the job perfectly, and when I saw some guys raging against kubeadm which can't do the same, or even try to build K8s from scratch, I thank Juju :)17:48
Zicbuilding K8s from scratch is very instructive anyway17:48
Zicbut I need a tool to industrialize it in my company17:48
lazyPowerI appreciate that feedback, we've been cycling hard to remove the barrier to going to prod with kubernetes17:49
Zicthat's for the right part o/17:49
lazyPowerso much so that we're going hard in the paint, my nice grey paintjob has streaks of red and white all up and down the side17:49
Zicfor the wrong part (and that's totally offtopic here): Vitess is not ready for production-grade experience at this time17:49
Zicit will need some tricks to be17:49
Zicthe good news is that this K8s cluster is not entirely dedicated to Vitess :p17:49
lazyPowerwe're looking to leave beta soon17:50
lazyPowerso, be prepared for bulletproofing in the coming iterations17:50
lazyPowerZic - did you perhaps update to 1.5.2 with last weeks update?17:50
Zicmy main coming-feature is haproxy replacing nginx in kube-api-loadbalncer :)17:51
lazyPowerwe just had a brief meeting about that this morining, we're looking to do layer 4 routing instead of layer7 via nginx. so that haproxy replacement cant come soon enough17:51
Zicnope, I think I'm on 1.5.1 for now, I didn't have the time to upgrade with my Vitess problems :(17:51
lazyPowerAck. when you do i'm highly interested in a) which approach you took to do the upgrade and b) how that experience went for you17:51
ZiclazyPower: layer 4 is OK also, in fact it's just the possibility to make a master offline easily which I need17:52
lazyPowerso capturing any feedback for us would be highly useful in that context17:52
Zic(without touching the nginx vhost)17:52
lazyPowerthats our goal, to not have the master exposed at all, so you can isolate it in some network segment and sleep easy17:52
Zicto describe our infra for now : I'm using 3 master, 5 etcd, 1 kube-api-loadbalancer (with easyrsa charms also on it), 6 physical workers, 3 EC2 AWS instances, 2 DRBD filers for PV with NFS, all in private-LAN17:54
Zicto expose publicly, I set up a public haproxy which have Ingress as backend17:54
Zic(3 haproxy, with a heartbeat VIP)17:54
lazyPoweroh hey thats a nice setup17:54
* lazyPower nods17:54
lazyPoweri also see you took etcd durability very serious and gave it proper fault tolerant pooling17:55
Zicyes, as you advice me the first time I came here :)17:55
lazyPower:D17:55
Zic(was for the first pizza i owe you :p)17:55
Zicbut yeah, I don't use public Ingress because if I bring-up a public ethernet interface on my kubernetes-worker, all my NodePort will be exposed, as K8s does not have a setting like "NodePort only bind on private address"17:56
Zicso I prefered to put public LB in front of Ingress and NodePorts17:56
lazyPowerright17:56
lazyPoweri think there was discussion on the k8s project around that17:56
lazyPowerNodePort on Interface17:56
lazyPowerbut i haven't been tracking that too closely, and it may have been tabled17:56
Zicyes, I saw an issue on GitHub but not so much news since 201517:57
lazyPoweryeah, that sounds about right17:58
lazyPowermight be worth poking it to see if there can be some renewed interest around it17:58
Zicthe only negative effect of that is that our customer had full capability with kubectl to expose his service privately through Ingress and NodePorts17:59
Zicbut for public parts, it's HAProxy VMs wich is fully managed through Puppet17:59
lazyPowerso, we're going to augment ingress with configmaps, which should make it more durable for you18:00
Zicso our customer needs to fill at ticket for every public expose18:00
lazyPoweras in, you can expose interesting things like ssh services for a private gogs instance18:00
Zic(not so important as he only expose 80 and 443, and we do the ssl offloading with a wildcard cert)18:00
lazyPowerand it'll proxy that ssh connection through the ingress controller18:00
Ziccool :)18:00
lazyPoweras it stands today we're only concerned with web traffic on that ingress controller18:00
Zicyep18:00
lazyPowerbut we do realize and understand there is another class of workloads that need to be supported18:00
ZicI use NodePorts for all other concerns18:00
lazyPowerand its a bit slower going but i'm tracking that18:01
lazyPoweryeah18:01
lazyPoweri do the same in my homelab18:01
Zicbut nos as practicle as Ingress18:01
Zicpractical*18:01
lazyPoweryep18:02
ZicI discovered something like https://traefik.io/ also18:02
lazyPowerthere's been some effort around an haproxy ingress controller as well18:02
lazyPoweri've used traefik, its great18:02
lazyPoweri'm not positive that its been updated withs ocket support yet though18:02
Zicwhich can enpower my customer for public exposing18:02
lazyPowerare you aware if they added that in recent revisions?18:02
Zicno not at all, I'm at the point of just reading their homepage :D18:02
lazyPoweri'd like to include that in a workloads repository so end users can mix/match their ingress controllers via namespace18:02
lazyPowereg: namespace=customer  you get the default nginx controller,    namespace=alpha1  - you launch and use a traefik ingress controller until you're ready to promote to namespace=customer18:03
lazyPowerand can move all that stuff with it, its just kind of a nice to have, and would be great to be tuneable with some curated manifests18:04
lazyPowerbut thats all pie in the sky at this time, i haven't had time to dedicate to it18:04
ZicI'm planning to finish this resilient Vitess cluster, upgrading to K8s 1.5.2 through Juju and after that, poweroff/rebooting randomly all the parts :D18:05
SaMnCo@lazyPower pleasure :) just the first of (I hope) a long list18:05
SaMnCo@Zic, let me know if you have issues around helm18:06
Zicif all stay OK (I already did some tests :p) I will owe you 3 pizzas total18:06
Zicif all is wrong, I will jump through the window of the ground-floor18:06
Zic(and then, debug :p)18:06
SaMnCoalso, if you are looking into scaling SQL, we have a Charm Partner partner (ScaleDB) who does just that18:06
SaMnConot sure they have a lot of k8s stuff, but still worth looking at.18:07
Zicnoted :)18:08
SaMnCoand, last but not  least, I'm trying to get good low level sysadmin feedback on Juju usage to document18:08
SaMnCoso I'd be happy to discuss your XP, in French or English ;)18:09
Teranetanyone here who knows about ceph a bit how to create a directory without creating a drive mount point : http://paste.ubuntu.com/23864768/18:13
TeranetI try to get ceph-disk for some reason push a drive creation but I do want only a directory been done18:14
lazyPowerping cholcombe and icey  ^18:17
iceyTeranet: can you share a bundle that you're using to deploy that? from the bit of logs, it looks like it _should_ just work so would be a bug18:19
Teranetit's not a bug I was looking now on the container and I do see /srv/osd is created and has data already in it18:20
TeranetI am thinking it's looking still for an empty one18:20
Teranetok I am deploying a bigger OS.yaml which I cutom build already in a lot of ways18:31
Teranetwant me to share the hole OS.yaml ?18:31
iceyah Teranet, ceph-osd doesan't behave too well inside of a container18:36
Teranetso I should redploy it outside of the container ?18:37
Teranetor can I just do redeploy the 3 ceph-osd somehow to the boxes instead of containers ?18:38
jrwrenwhat is wrong with ceph-osd in a container? if your lxc/lxd is in zfs, make sure to set use-direct-io: false and don't expect /dev osd-devices to work. Other than that it seems to work for me for dev/test.18:39
jrwrenTeranet: is your lxd zfs or btrfs backed?18:41
jrwrenTeranet: I get those errors with zfs backed container and the default use-direct-io value. Set the use-direct-io to false for the ceph-osd charm.18:42
iceyjrwren: I suppose that's relevant too; I wouldn't run ceph-osd inside of a container unless it _is_ just for testing18:44
Teranetlet me doublecheck18:45
Teranethow can I check that if it's zfs again ?18:54
Teranetfdisk don't help much there18:54
jcastrolxc info | grep storage18:56
jcastroshould tell you18:56
Teranetzfs18:57
Teranetok so if I put them now to the host how can I move them ?19:02
Teranetor do I need to kill those 3 containers with ceph-osd on it first and than redeploy them ?19:04
jrwrenTeranet: probably, yes, or you could set the config, check in /etc/ceph for 'journal dio = false'19:06
=== redir is now known as redir_exercise
bdxconcerning the hosted controller19:17
bdxI don't seem to be able to connect to a model on the hosted controller via libjuju19:17
bdxsee http://paste.ubuntu.com/23865066/19:17
bdx^ succeeds when ran against my own controller, but fails when ran against the hosted controller19:18
bdxtvansteenburgh19:18
bdx^^19:18
bdxtvansteenburgh: have you tried using libjuju against the hosted controller?19:18
tvansteenburghbdx: yeah. it *can* work, but it relies on valid macaroons existing on the host19:19
tvansteenburghbdx: do you have juju cli installed on the host?19:20
bdxtvansteenburgh: yea, does the fact that juju cli can access the model validate that the macaroons are valid?19:21
tvansteenburghyeah19:21
tvansteenburghbdx: can you deploy to the model with the cli?19:22
tvansteenburghif you can, then libjuju should work too19:22
jcastroheya Zic19:22
jcastrowe should find time this week or next to have you sync with the team in a hangout, would love to get a laundry list of feedback from you19:22
tvansteenburghbdx: this is a limitation of libjuju until we add support for obtaining and discharging macaroons19:22
bdxtvansteenburgh: I run that script ^ against a lxd controller and it does not error, then I switch controllers via `juju switch jujucharms.com` following which select one of my models, and run the script again and it fails19:24
tvansteenburghbdx: is there a traceback?19:25
bdxdue to auth errors, see http://paste.ubuntu.com/23865120/19:25
tvansteenburghbdx: are you logged in, i.e. juju login19:27
bdxyea19:27
bdxtvansteenburgh: http://paste.ubuntu.com/23865139/19:28
tvansteenburghbdx: do you have a ~/.go-cookies file?19:28
bdxyeah ... want me to squash it and try again?19:28
tvansteenburghnot yet19:29
stormmoreso I just created a controller and ran "juju ssh -m controller 0". while it appears that it is logged in, it doesn't give me a prompt, and hitting enter gives me "-bash: line 1: $'\r': command not found". any ideas what is going on?19:31
tvansteenburghbdx: http://pythonhosted.org/juju/narrative/model.html#connecting-with-macaroon-authentication19:32
bdxtvansteenburgh: YES! that did it19:36
lazyPowerstormmore - that's most definiately a bug, but i'm not certain what happened19:36
bdxtvansteenburgh: thank you19:36
iceystormmore: are you on windows?19:37
tvansteenburghbdx: \o/ np19:37
stormmorelazyPower I came across https://bugs.launchpad.net/juju-core/+bug/1468752 so you are right it is bug :)19:37
stormmoreicey yes19:37
lazyPoweroo fantastic find19:37
lazyPowerbummer that its a bug, but glad its not pioneering territory19:37
iceystormmore: yeah, that was the bug I was curious about :)19:37
=== scuttlemonkey is now known as scuttle|afk
stormmoreso what its telling me is that this is a stupid Windows bug without a workaround but the fix is in 2.2 which is currently in alpha!19:45
stormmoreI am going to see if I can install and bootstrap from bash / Ubuntu on Windows 1019:47
stormmorethat is if I can figure out how to get it upgrade to Xenial19:50
=== redir_exercise is now known as redir
bdxtvansteenburgh: I may have been a bit premature in my rejoice20:10
bdxtvansteenburgh: I'm getting "Fatal error on SSL transport" now ...20:10
tvansteenburghbdx: that's almost always a side effect of another problem, got a traceback?20:12
bdxtvansteenburgh: my simple script http://paste.ubuntu.com/23865377/20:12
bdxtvansteenburgh: traceback <- http://paste.ubuntu.com/23865383/20:12
tvansteenburghbdx: can you set logging level to DEBUG and paste the full output?20:16
bdxtvansteenburgh: http://paste.ubuntu.com/23865408/20:16
tvansteenburghbdx: did you change line 41 or 43?20:18
bdxtvansteenburgh: do you think I need to be supplying a 'cacert'?20:18
bdxtvansteenburgh: both20:18
tvansteenburghbdx: yeah, trying sending the cert20:20
tvansteenburghi'm not convinced that's the problem but it won't hurt20:20
bdxtvansteenburgh: http://paste.ubuntu.com/23865441/20:21
bdxsad20:21
tvansteenburghheh20:21
tvansteenburghnevermind!20:22
vmorrisany word on this bug? https://bugs.launchpad.net/juju/+bug/161436420:22
bdxtvansteenburgh: does libjuju use the asyncio ssl protocol for ssl connections?20:27
tvansteenburghbdx: no20:29
tvansteenburghwell it might indirectly20:29
bdxtvansteenburgh: this https://github.com/python/asyncio/blob/master/asyncio/sslproto.py20:30
tvansteenburghno20:30
bdxtvansteenburgh: can you replicate this on your end?20:30
tvansteenburghbdx: not yet. it works for me. still looking20:31
tvansteenburghbdx: change line 41 to: logging.basicConfig(level=logging.DEBUG)20:40
tvansteenburghthen paste me the full output20:40
tvansteenburghbdx: also, print the value of your model_uuid to make sure it's actually set20:41
bdxtvansteenburgh: I'm setting MODEL_UUID inline in my testing20:41
tvansteenburghok i thought you were getting it from the env20:42
bdxhttp://paste.ubuntu.com/23865573/20:46
bdxthats better20:46
tvansteenburghbdx: yeah, so that means whatever macaroons you have locally aren't sufficient20:48
tvansteenburghbdx: which is strange since you can run juju status on the model20:51
bdxtvansteenburgh: I launch a fresh xenial container `lxc launch ubuntu:16.04 libjujutest`, exec in, `su ubuntu`,  install juju, libjuju, asyncio via `sudo apt install juju python3-pip && sudo -H pip3 install juju asyncio`, run the script and get the error20:57
bdxtvansteenburgh: should the jujuclient version <-> juju controller version mismatch have anything to do with this?20:58
tvansteenburgh1bdx: when using macaroon auth (shared controller), libjuju can currently only connect if there valid macaroons in ~/.go-cookies already21:00
bdx* login to the controller:model via juju cli, then run the script and still get the error21:00
bdxcorrection21:00
bdxmy bad21:00
bdxI am logging in first21:00
tvansteenburgh1bdx: i'm trying to figure out what's different. when i run your script against jimm, it works. on every model i try21:02
=== tvansteenburgh1 is now known as tvansteenburgh
tvansteenburghbdx: try `juju deploy ubuntu`, then run your script21:02
stormmoreI keep getting "ERROR cannot update credentials for aws: timeout acquiring mutex" when trying add credentials or change the default aws region :-/21:06
=== scuttle|afk is now known as scuttlemonkey
bdxtvansteenburgh: deployed ubuntu, no change, except that now the script will error every other try, and just hangs on 50% it seems ... when I Ctrl+C out of what seems to be a hang, I get this http://paste.ubuntu.com/23865667/21:07
bdxwhich has an interesting error at the bottom "juju.errors.JujuAPIError: unknown version (1) of interface "Client""21:07
tvansteenburghyeah21:08
tvansteenburghbdx: my models are 2.0.1, yours are 2.0.2.121:16
tvansteenburghthat shouldn't matter, but...21:17
tvansteenburghnope, works for me on 2.0.2.1 too21:18
=== menn0_ is now known as menn0
mskalkaanyone familiar with the openstack base bundle available to answer a few questions?21:31
stormmorelooks like I am going to just spin up an Ubuntu VM since Bash on Windows has problems with mutex when trying to do stuff with juju and the windows version of juju has problems with ssh to the controller22:00
zeestratmskalka: What's up? I've got some minutes before EOD.22:14
zeestratmskalka: If no one is around here, make sure to check out #openstack-charms22:15
mskalkazeestrat: thanks for the reply. I'm running into an odd issue deploying openstack on aws. It looks like the deployment is hung up cinder and glance connecting to the mysql db22:19
mskalkaI had it working last week just as a POC after a few tweaks to where it landed the charms (the ceph-mon charms did not like being in lxd for example) but never ran into this issue22:20
zeestratmskalka: Hmmm. Unfortunately I only have experience with deploying it to MAAS on bare metal so I won't probably be too helpful. Ping the guys in #openstack-charms with the output of "juju status --output yaml" and perhaps some logs.22:25
mskalkazeestrat: No worries! Thanks for the help, I'll ping #openstack-charms tomorrow morning22:25
zeestratCool. I think most of them are on a EMEA timezone.22:26
mskalkacopy, thanks22:27
=== mskalka is now known as mskalka|afk
Teranetdo we have an JUJU OPENSTACK guys here ? I am looking for some logging from OpenStack but now since it's all on JUJU / MAAS not sure where it would be looging too for neutron23:07
=== frankban is now known as frankban|afk
marcoceppi_Teranet: #openstack-charms channel might be best23:43

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!