[05:30] hmmm that is odd, for some reason the flannel charm wont let me add a relation to kubernetes-worker charm :-/ [07:10] Good morning Juju world! [07:43] *sigh* I forget to setup an ssh key for my user before deploying the kubernetes bundle :-/ [08:00] I am guessing my only option is destroy and recreate, anyone still awake who might know of another option? === frankban|afk is now known as frankban [08:37] stormmore, sorry, I don't have scrollback atm. What's the issue? [08:38] I forgot to add an ssh key when I deployed the kubernetes bundle so couldn't scp anything from the master node [08:38] * Budgie^Smore was being a dumb-a** [08:39] * Budgie^Smore is stormmore on his "other" computer [08:40] Budgie^Smore, stormmore, Ahh, sorry. I'm afraid I'm not up to speed on k8's enough to help with that. :( [08:41] the kubernetes part is a red herring in this instance, to simplify I couldn't use juju scp or juju ssh to access juju managed systems [08:42] not a huge deal, decided to destroy the model and rebuild it tomorrow [08:43] I did come across what might be a bug after that... decided to create another user in juju, then deleted it cause I couldn't figure out how to add a display name, then it wouldn't let me readd the same user even though it wasn't listed [08:43] maybe I was being impatient? [08:44] the user wasn't list in juju users [08:46] * Budgie^Smore does some weird things when he is learning new toys [09:01] morning [09:12] "SaMnCo | and, last but not least, I'm trying to get good low level sysadmin feedback on Juju usage to document" [09:13] ping back SaMnCo, glad to help if you need my review :) [09:13] (cc jcastro also, same answer :D) [09:14] care to definte "low level sysadmin"? [09:24] Budgie^Smore: I take it like "core level", like C is a low-level language, but maybe I'm mistaken [09:25] so someone who handles the infrastructure then is what I would think as low level sysadmin [09:55] Zic: Budgie^Smore right what I want to capture is from your views on how Juju represents the world. Vs your view of it [09:55] So not the charms themselves but the tool [09:55] Core is probably better wording [09:56] The one big thing I love about juju is it's GUI as it is a great way to visible show PHBs the "world" [09:57] As well as the key questions you asked yourself when you started [09:57] And eventually struggled to answer [09:57] Or find answers for [09:58] I will be honest and say the only reason I came across Juju was cause I was looking for tools to manage machines from a powered off state and found MaaS [10:09] OK I will see you guys in a few hours, need to get some zee [10:11] Hi blahdeblah : the openstack-base bundle has ntp charm without ntpmaster. The auto_peers is also not set. Will we be good with clock sync when the internet is disconnected? [10:25] lazyPower: http://paste.ubuntu.com/23868491/ is it normal from etcd? [10:26] all is working actually, but I show this by hasard [10:29] lazyPower: also, normally there is a "etcd-4" but I don't see it :( [10:36] hello juju world! [11:23] Hi Spaulding [12:34] stormmore: you can add SSH keys to juju with juju add-ssh-key. Now, I don't think that will retro add to previous units but using add-unit should get you new ones with the key there. [13:53] marcoceppi_: Hows it going with Discourse charm ? === CyberJacob is now known as zz_CyberJacob [15:02] Zic yeah, the component status does'nt use teh TLS certificate to verify [15:02] Zic i've only ever gotten etcd to display properly in component status when its non tls secured === alexisb__ is now known as alexisb-afk [16:11] Anyone else hitting 502 errors trying to `charm attach`? [16:14] uiteam ^ [16:22] ryebot - its been ages since i've encountered that [16:22] whats the size of your upload? [16:25] lazyPower: 9.2MB [18:05] ryebot that seems unusually small to be throwin 502's [18:05] ryebot it might have been temporary load against the charm store, is it still throwing errors at you? [18:05] let me try again [18:05] i've seen that 502 with like, 1GB attempted uploads [18:05] it simply times out during transfer [18:06] nope, still fails :| [18:06] but if you hit it during a deployment, or under extreme load, you'll also see that [18:06] * lazyPower weeps silently [18:06] I must be doing something stupid [18:06] jrwren imma poke you with some <3 to see if you can poke the right pplz about a 502 issue on upload? the last time we hit this it was a prodstack deployment underway [18:08] you can try. [18:09] oooo [18:09] you wanna go jrwren? :D want some of this hot 502 error action? :D [18:09] sorry i've had too much coffee this morning [18:19] howdy juju world [18:20] thanks rick_h I figured as much, it would be nice to be able to add keys retroactively though since it would allow to add / update keys for users [18:21] for instance, in my last job we had to "rotate" our ssh keys every 90 - 180 days (depending on access type) [18:21] Yea...Thinking. as long as you have the old key you can update/add the new one [18:22] Juju run ... Across machine's I guess. [18:22] It's something that'd be great.to support better === frankban is now known as frankban|afk [18:26] admittedly if I am going to use ssh for much going forward I really want to use client certs instead of keys === mskalka is now known as mskalka|afk === alexisb-afk is now known as alexisb === mskalka|afk is now known as mskalka [20:40] so I just created a new superuser account on my controller, switched to it, add a credential and set default cred and region but when I run juju add-model it keeps saying that I didn't provide a credential. is that expected? [20:41] stormmore - yep, you have to set the default credential if you want a default credential. [20:41] lazyPower I did run juju set-default-credential [20:41] oooo [20:41] i missed that, osrry [20:42] that seems wrong indeed [20:42] well this bit of our docs seems oddly specific to that behavior [20:42] Setting a default credential means this will be used by the bootstrap command when creating a controller, without having to specify it with the --credential option. [20:43] no worries, I am wondering if there is a default cred that is separate for models vs controllers [20:44] stormmore - did you juju set-default-credential "credential-name" "username" ? [20:44] or for the cloud rather [20:44] juju set-default-credential aws carol -- is the example from the doc [20:45] yeah so I set the default credential for aws [20:45] yeah iw ould have expected that to set it for every request unless overridden with --credential [20:46] i too pass --credential on a hosted controller i've been using for the past month and haven't been bothered with looking into why thats the case. On my next deploy i'll try to replicate a successful configuration where it doesn't require the --credential. I'm fairly certain we support this [20:46] it seems odd when the "admin" user doesn't require it [20:47] that is why I am thinking I did something wrong [20:47] yeah, i'm mostly certain its a local config thing that you can run a command to set it like a context and it "just works" [20:53] it is gets even weirder, I just noticed when I added a "test" model using the admin account that it wasn't using the default credential I set so I deleted the model, deleted the cred and readded the model and it used the "deleted" cred! http://paste.ubuntu.com/23871129/ [20:54] stormmore yeah, thats definitely bug worthy. Would you mind capturing the steps you outlined in a bug so we can reproduce and get some engineering eyes directed at that? [20:55] of course I wouldn't mind :) just don't like to file "bugs" that aren't bug worthy ;-) hence check here first [20:58] I am finally having to register for a Ubuntu One account! Woot! [20:59] #nailed-it-aced-it-cant-be-stopped === thumper is now known as thumper-busy [20:59] look @ you go stormmore :) [20:59] lol [21:03] I am guessing we should consider this a security vunerability (or at least the potential to be one) since it about credentials too [21:03] I think thats a reasonable classification [21:15] filed [21:18] Thanks stormmore [21:24] I am debating whether I should also file one for the fact that switching to a non-"admin" user doesn't seem to use the default credential too [21:38] stormmore: there's an existing bug around that being an option [21:38] stormmore: typically a different user doesn't mean the admin wants to be on the hook for expenses [21:38] stormmore: but there are cases where that's legit. [21:39] rick_h: i get that but the non-"admin" user account I created was given the same level of access - superuser - so my assumption is that it should work the same way as the "admin" user account [21:40] stormmore: I'm not sure I agree there. Trusting someone with your running bits is different than your credit card [21:40] stormmore: but I understand. As I said, there's an existing bug for the admin to make that an option [21:40] uiteam: for review, a util I just ran on jujugui.org https://github.com/juju/charmstore/pull/704 [21:41] rick_h I agree, however I am kinda modeling it after the Linux security model of no one logging in as root, so maybe a juju sudo type command would be a good option [21:43] stormmore: hmm, I tend to look at Juju more like a database server or the like. [21:43] stormmore: I may trust you to help add databases/etc but am not going to give you root on the machine so you can do other things with it [21:46] rick_h ah that kinda makes sense but the problem I am having is creating the "db" (model) [21:46] rick_h seems odd that I can set a default credential for the user but still have to provide that credential using --credential when I am running commands like add-model [21:47] stormmore: oh I'm +1 on making it better for the users there like that. I'm just -1 on auto leveraging the admin's credentials in any way [21:48] rick_h I am definitely not suggesting sharing credentials across accounts just if you set add and set a default credential in any account it should behave the same way [21:59] now I am having problems adding ssh keys :-/ [22:00] keeps giving me invalid key! [22:04] oh you hcae to cat out the key instead of it reading the file. [22:04] have* === mskalka is now known as mskalka|afk [22:19] ok everyone I do have a little issue ........ how do you grab in JUJU a trunk interface and get those multpile VLAN's mapped into charms proper ? Any docu or help is welcome thank you [22:47] Teranet: it sounds like you want extra-bindings [23:01] sorta yes [23:02] so far I had eth0 also bridged but now I want to add eth1 as an additional bridge and with VLAN's === thumper-busy is now known as thumper