/srv/irclogs.ubuntu.com/2017/03/22/#juju.txt

andrew-iiI have an LXD container that seems to be live, but juju shows it as pending.02:20
andrew-iiI'm a bit at a loss for why. The logs don't seem to show anything wrong, I think.02:21
andrew-ii`juju ssh 0` followed by `sudo lxc list` shows it has IPV4 addresses, but it doesn't show anything before with `juju status`02:22
andrew-iimaas has the new container's two IP addresses shown like the machine's lxc command, but juju doesn't seem to be aware02:24
anastasiamacandrew-ii: does `juju status --format=yaml` show error?02:25
andrew-iiI don't think so. Just 'juju-status: current: pending' and 'machine-status: current: running'02:26
andrew-iiI feel like maybe it's related to maas rack HA, since a few days ago I added a second rack controller (but didn't work on it until today)02:28
andrew-iiThis is with a juju 2.1.2 controller (fresh)02:29
andrew-iiOh and maas 2.1.302:31
anastasiamacandrew-ii: m not sure what's going on.. and there is nothing in Juju or MAAS logs?02:32
andrew-iiNot that I saw... I'll check again, though.02:32
anastasiamacandrew-ii: and u r not using kvm on maas?02:33
andrew-iiNo, should only be lxd, I think02:33
anastasiamacandrew-ii: file a bug, include ur bootstrap/deploy commands, logs and --format=yaml status output :) any other info like MAAS setup, network topology, etc as u see fit02:36
andrew-iiAlrighty. I was assuming it was something screwy with how I set it up02:36
andrew-iiShould I try to rebuild the juju controller from an earlier version?02:37
anastasiamacif u can confirm if it works with earlier version would b awesome \o/ u could also try later Juju version - 2.2: alpha1 or daily snap...02:38
anastasiamacit mayb a problem with just 2.1.x02:38
andrew-iiAlrighty. Lemme gather the logs and such02:38
andrew-iiErr. Dumb questions asked poorly: how do I use root with `juju scp -- -r root@0:/var/log/juju ./machine-0-juju-logs`?02:44
kwmonroeandrew-ii: juju run --unit <foo>/0 'cp -a /var/log/juju /home/ubuntu/ridiculous && chown -R ubuntu /home/ubuntu/ridiculous'04:43
kwmonroeandrew-ii: juju scp -- -r cwr/0:ridiculous /tmp04:43
kwmonroeit's not pretty andrew-ii, and i can't belive juju scp doesn't work in root context, but it is what it is.04:43
kwmonroeoh, i said "cwr" in that scp command.. i meant "<foo>", as in, whatever unit you want to scp from.  i just happen to test this in an env with cwr/0 deployed.04:46
ybaumyi just learned about the existence of foreman. does anyone have experience what is better? juju or foreman05:32
zeestratybaumy: I'd compare it more to MAAS. Comes from Red Hat and has been around for a while. Works well with Puppet07:34
kjackalGood morning Juju world08:04
=== frankban|afk is now known as frankban
BlackDexHello there. Is it possible to have an bootstrap node in LXD for usage with MAAS?09:34
BlackDexso i have a maas node, and i create an LXD container on that same node to be the bootstrap node?09:35
cnfBlackDex: i used kvm09:40
BlackDexi do that also09:41
BlackDexbut i wonderd if i can skip the v in kvm ;)09:41
BlackDexbecause of performance09:41
BlackDexmaybe i can do it by first creating a LXD container, and adding that to MAAS09:44
BlackDexgiving it the correct tags and tell juju to use that09:45
cnfi don't think you can add lxd to maas?09:47
BlackDexyea you can :)09:53
BlackDexMAAS Supports LXD :)09:53
andrew-iikwmonroe: thanks! The command makes sense and works fine10:24
stubWhat hook gets called if I 'juju attach' a resource to an application?11:35
stubI'm guessing config-changed ?11:36
stubnope, upgrade-charm according to docs.11:38
marcoceppistub: correct, upgrade-charm.12:06
tvansteenburghjamespage: where is the ganglia charm repo?12:06
tvansteenburghthe charm points to https://code.launchpad.net/~charmers/charms/trusty/ganglia/trunk but that hasn't been touched in a long time12:07
jamespagetvansteenburgh: https://github.com/ganglia-charms12:56
andrew-iiAnother DQAP: Can I deploy onto a controller?14:07
andrew-iiMostly because `juju deploy openvpn` is just so convenient...14:08
andrew-iiGranted, I suspect it adds a ton of crazy to the model, but I've seen references to people finagling odd setups and figured I'd ask.14:09
cnfmorning14:12
cnfballoons: poke?14:13
marcoceppiandrew-ii: you can certainly try, there shouldn't be much collision, but it's something you'll want to test first14:13
marcoceppiandrew-ii: juju deploy --to 0 -m controller openvpen14:13
balloonscnf, howdy14:13
cnfohai! \o14:13
cnfballoons: so i'm back it :P14:13
cnfdid you see https://bugs.launchpad.net/juju/+bug/1674759 ?14:14
mupBug #1674759: juju upgrade-juju doesn't honor proxy settings <juju:Incomplete> <https://launchpad.net/bugs/1674759>14:14
cnfanastasiamac: also poke :P14:15
balloonscnf, looks like it would be worth trying the unstable 2.2 and see if it things are better14:17
cnfballoons: cn i upgrade to 2.1.2 with a 2.2 client?14:17
cnfor are you/they suggesting upgrading the controller to 2.2?14:18
cnfit's a PoC, so i don't mind overly much14:18
balloonscnf, you could use upgrade to go backwards, since there wouldn't be anything newer if you did try 2.2-alpah114:19
balloonsBut yea, it would be a new controller14:19
cnf$ ./juju upgrade-juju14:19
cnfno prepackaged tools available, using local agent binary 2.2-alpha1.114:19
cnfERROR no matching tools available14:19
cnfupdated the issue as well14:21
cnfballoons: i'm tempted to just delete the controller, and bootstrap a new one14:22
cnfbut i will probably run into this again, then14:22
balloonscnf, just changing the client won't change things indeed. You'd have to bootstrap a new controller14:24
cnfhmm, so my only option is to bootstrap a new controller14:25
cnfhmm14:25
balloonsas far as verifying if the newer juju fixes the bug yes14:26
balloonsOr bootstrapping a newer controller and doing model migration14:26
cnfhmm14:26
cnfi might as well throw everything away, and start new14:27
balloonslxd might be useful here as well14:27
cnfballoons: how so?14:27
balloonsif you lack the physical machines14:28
cnfcan i deploy a controller to MAAS using LXD?14:28
balloonsI think actually the easier way to do it is to add a vm using virsh on the maas controller for the juju controller. That's a better way to double dip I think14:31
cnfthat's what i have now14:32
cnfthe juju controller is a KVM14:32
balloonsahh, awesome14:32
balloonsso can you simply add another kvm?14:32
cnfon an ESXi vm...14:32
balloonsit would only have to live long enough to migrate your workload. In the interest of checking the bug, you migrate, then attempt to upgrade14:33
cnfwell, "simply"14:33
cnfbut i have nothing deployed atm14:34
cnfso i might as well just trash this one, and bootstrap again14:34
balloonsack14:34
cnfit just has me worried i'll run into it again14:34
cnfhmm14:35
cnfalso, if i do this, i can no longer help debug the problem14:36
cnfanyone know when anastasiamac comes online?14:37
balloonscnf, about 7 hours from now14:40
marcoceppicnf: she's in NZ timezone14:40
cnfhmm, that's a bummer :P14:40
balloonscnf, presumably you could recreate easily enough14:40
kwmonroecory_fu: i don't know enough puppet to grok the syntax on https://issues.apache.org/jira/browse/BIGTOP-2708, but i *think* we're ok because we used role-based bigtop (and not component-based, which is what this is patching).15:20
kwmonroehaving said that, i shall deploy zeppelin and see what happens :)15:20
cnfhmm, crap, i used the wrong user for the controller again15:34
cnfcan I cswitch the maas suer the juju controller uses?15:34
cnfhmm, why is juju status --output=yaml empty?15:52
cnfjuju status shows me plenty15:52
cnfhmz15:55
cnfwtf15:56
cnfugh, i really don't know how to debug this stuff...15:59
cnfjamespage: what was the right incantation?16:00
jamespagecnf: --format16:04
jamespagecnf: --format=yaml16:04
cnfoh16:05
cnfi'm blind :P16:05
cnfso now to find why this isn't working, still :(16:06
cnfjamespage: http://termbin.com/vz8q see anything obvious?16:07
cnfjuju seems to just break shit, and then stop doing stuff16:11
cnfwth :(16:11
cnfmaas brings up the machine with all the right IP's16:11
cnfjuju changes the IP's around to bridge interfaces, except doesn't do it right16:11
cnfand then fails16:11
cnfi think :(16:12
cnfcan anyone help with this?16:12
jamespagejam: any chance you can caste your eyes over cnf's problem above?16:12
jamespageappears to be some sort of network-space device binding allocation lxd type problem16:12
cnfseems every time i file a big, and get around it, something else pops up16:15
cnfjamespage: btw, that person has not called me yet ^^;16:21
cnfdno if you made the link to the mails etc, but we met at cfgmgmtcamp16:21
jamespagecnf: yep I gotcha16:22
ybaumyjamespage: nice that you are here. maybe you can help. is the following right to do. remember i set the root password for the mysql charm already. now i want .. juju add-machine -n2 ; juju add-unit mysql --to machine1 ; juju add-unit hacluster --to machine2 ; juju add-relation mysql/0 hacluster/0 ; juju add-relation mysql/1 hacluster/0 ???16:28
cnfso jam is the person i need for this, right?16:29
ybaumyor is it juju deploy hacluster --to machine2 i guess16:30
cnfhmm16:35
cnfi'm at a loss here16:35
Budgie^SmorelazyPower did you read the backlog in channel?16:38
lazyPowerBudgie^Smore: i did see that you encountered some failure scenario(s) in AWS16:39
ybaumycnf: i feel you16:41
Budgie^SmorelazyPower yup, I need to resize the instances anyway so am going to do a clean install rather than salvage this on but wondered if your team would like any failure data before I destroyed the cluster16:41
kwmonroecnf: i'm pretty sure jam is in UTC+<a couple hours>.  you may have more luck pasting http://termbin.com/vz8q in #openstack-charms.16:42
cnfkwmonroe: i think it's a juju issue, but no harm, i guess16:42
kwmonroecnf: i'm not familiar enough with network space binding to offer much help -- hopefully #openstack-charms has the people with the right know-how for ya.16:44
cnfi hope so16:44
cnfi'm getting quite dispirited...16:44
lazyPowerBudgie^Smore: oh heck yeah16:45
lazyPowerBudgie^Smore: can you get us a juju-crashdump of the model?16:45
lazyPowerBudgie^Smore: snap install juju-crashdump --edge && juju-crashdump. I can get you a secure upload point again16:45
lazyPowerneed a sec tho i'm in an openstack meeting16:45
Budgie^Smoreyeah I need a min or two to get my laptop up and running, etc.16:45
Budgie^Smoremake that a few more than than that since I need more coffee16:46
Budgie^Smoreok I haven't used snap before and getting an error about requiring classic or confinement override16:53
jamespagekwmonroe: I'm already a bit stumped on what the problem is with cnf's deployment16:53
cnfjamespage: bit more reference http://termbin.com/ep44 and http://termbin.com/6o0h16:55
jamespageybaumy: kinda - adding units is nearly as you describe16:55
cnfmaas brings it up fine, then juju tries to make the bridges16:55
jamespageyou'll want todo something like juju add-unit --to lxd:<physical machines id> mysql16:56
jamespagewith regards to hacluster16:56
jamespageybaumy: juju deploy hacluster hacluster-mysql16:56
jamespagejuju add-relation hacluster-mysql mysql16:56
Budgie^SmorelazyPower I added --classic to that snap command16:57
jamespageybaumy: hacluster is a subordinate charm so to make units of it, you relate it to a principle charm like percona-cluster16:57
jamespageor glance or cinder or nova-cloud-controller16:57
ybaumyok16:58
ybaumygonna make a backup before i try that16:58
zeestratjamespage: Do y'all have a reference bundle for OpenStack HA laying around besides https://launchpadlibrarian.net/298175262/bundle.yaml?16:59
zeestratIf not, then that might help you out, ybaumy.16:59
lazyPowerBudgie^Smore: ah good plan, i forgot that flag17:01
lazyPowerBudgie^Smore: sorry, this is what happens when i triple-task.... :\17:01
ybaumyzeestrat: i dont want to start over at that point ..17:02
Budgie^Smoreno worries, being able to figure out issues like that is makes me good at what I do17:02
ybaumyzeestrat: i know of that template you pasted it before for me17:02
ybaumyzeestrat: but i have a setup and dont want to start over every 2 days17:03
ybaumyzeestrat: i already scripted alot to fit the current environment i dont know if the scripts will work with that new setup then17:03
zeestratybaumy: My bad. Memory is not what it used to be!17:05
Budgie^Smoregetting a bunch of runtime/cgo: pthread_create failed: Resource temporarily unavailable17:08
ybaumyzeestrat: yesterday i got a deadline for the POC. and i now have one month to show them that ubuntu/juju/maas is the platform we want to use. else i have to start with redhat or suse17:08
Budgie^Smoregetting a bunch of "runtime/cgo: pthread_create failed: Resource temporarily unavailable:" errors running that command17:08
ybaumyso i need some support17:08
lazyPowerBudgie^Smore: thats emitting from snapd17:12
lazyPowerBudgie^Smore: so long as the process hasn't returned its still tarballing up the relevant bits of the model and preparing a dump package17:12
lazyPowerBudgie^Smore: i encourage you to extract it and take a quick peek before washing hands, this app dumps the full state of a "crashed model" for post analysis, this may be something you want to have in your toolkit as you're building a pretty heady k8s model right?17:13
Budgie^SmorelazyPower, where did you want this ran? I assumed on the client that was connecting to the client but I am thinking now you meant a different system since I got told it needs to run as root but root isn't connected to the controller17:14
lazyPowercory_fu: ^ needs to run as root? huh?17:15
lazyPowerBudgie^Smore: hang on cc'ing a stakeholder on the project17:15
lazyPowerBudgie^Smore: but no, it should be run as your user on your client workstation, that much is correct.17:16
Budgie^SmorelazyPower oh I was intending on holding onto a copy to look at myself too as yes I want to at least try and avoid this scenario but I need to upgrade the underlying infra anyway and always like to start from a known good state17:16
cory_fulazyPower: Trying to get caught up on the backscroll, but what run as root?17:16
cnfno one that has an idea what is going on here http://termbin.com/vz8q ?17:16
lazyPowercory_fu: ah, this was returned from juju-crashdump for Budgie^Smore17:17
lazyPowercory_fu: i was instructing budgie to create a crashdump archive of the model before destroying it so we could do some post-analysis of what went sideways during model deltas.17:17
lazyPowerand apparently its complaining it needs to be run as root? is this new behavior? I've not seen this before.17:17
cory_fulazyPower: Hrm.  crashdump shouldn't require root on the local machine, and anything it does on the remote machine should be done with `juju run` so it should have root (I think)17:17
Budgie^SmorelazyPower, cory_fu here is the ful output from juju-crashdump: http://paste.ubuntu.com/24229662/17:18
cory_fulutostag: ^17:18
ybaumycnf: alot of waiting for machine... what does maas say?17:18
cnfybaumy: all machines up17:18
cnfit's only "waiting" on lxd containers17:18
lazyPoweroh that bubbled up from snapd again. thats so weird.17:18
cnfjuju is fucking up the networking17:18
lazyPowerBudgie^Smore: did you get a crashdump package in $PWD?17:18
cory_fuYeah, I have no idea what those messages are about17:19
cnfybaumy: http://termbin.com/ep44 and http://termbin.com/6o0h17:19
Budgie^SmorelazyPower don't see any files created :-/17:19
cnfmaas makes the net devices, and adds the right IPs17:19
lazyPower:| thats no bueno, it should have left a crashdump-$datestamp package in $PWD.... ok lets get lutostag in on this one to help if he's around17:19
cnfjuju then tries to create bridges, and move the ip's17:20
cnffor some reason it fails17:20
lazyPowerthanks cory_fu for taking a look.17:20
cnfand then complains it can't find ips17:20
ybaumycnf: hmm that looks like a mess. i wouldnt know where to start too sorry17:20
ybaumywhich vlan is the public ip17:21
ybaumyfor the lxd containers17:21
Budgie^SmorelazyPower, lutostag for the record here is the command I used to install juju-crashdump: $ sudo snap install juju-crashdump --edge --classic17:21
cnfyou get BridgeName:br-enp3s0f0.4013}] devices on host "machine-0" for container "machine-0-lxd-7" with delay=0, acquiring lock "machine-lock" to-bridge="enp3s0f0.4013" --activate --bridge-prefix=br-  --reconfigure-delay=0 /etc/network/interfaces <<'EOF'17:21
cnfand then a few blank lines17:21
cnfand then find host bridge for space(s) "space-public" for container "0/lxd/7"), retrying in 10s (3 more attempts)17:22
cory_fulazyPower: lutostag has much more understanding of crashdump.  I just use it from time to time.  ;)17:22
cnfand the same thing again17:22
cnf>,<17:22
lazyPowercory_fu: i still associate you as a stakeholder since you pimp it so much :)17:22
lazyPowerand by extension, i now pimp it just as much17:22
Budgie^Smorelol17:22
ybaumyyou are using maas dhcp right on that vlan?17:22
Budgie^Smorewell apparently you are pimping an STI right now :P17:23
lazyPowerO_O17:23
cnfybaumy: it's not dhcp, it's maas assigned17:23
lazyPowerBudgie^Smore: if you snap list, do you have 1.0.0 of juju-crashdump installed?17:23
jamespagecnf: bridges not appearing right?17:23
jamespagecnf: beisner just highlighted this problem to me - https://bugs.launchpad.net/juju/+bug/167232717:24
mupBug #1672327: Too long names for bridges <juju:Triaged> <MAAS:Triaged> <https://launchpad.net/bugs/1672327>17:24
Budgie^SmorelazyPower hey that was the cleanest of the jokes that flashed through my head... anyway http://paste.ubuntu.com/24229699/17:24
cnfjamespage: well, i'll be...17:25
jamespagecnf: those where not my words...17:25
jamespagedamn ivoks is not here...17:25
cnfwhy do I have to run into every fucking weird bug with this?17:25
jamespageDmitrii-Sh: re bug https://bugs.launchpad.net/juju/+bug/167232717:25
mupBug #1672327: Too long names for bridges <juju:Triaged> <MAAS:Triaged> <https://launchpad.net/bugs/1672327>17:25
jamespageDmitrii-Sh: did you and ivoks figure out a workaround for that?17:26
Budgie^Smorecnf, welcome to the club, just ask lazyPower how many weird issues I have hit17:26
ybaumyjamespage: isnt it possible to use udev for that?17:26
Dmitrii-Shjamespage: as a workaround we just renamed the interfaces to something really short17:26
cnfDmitrii-Sh: renamed them where?17:26
cnfin maas?17:26
Dmitrii-Shjamespage: e.g. instead of en1s0 use e017:26
Dmitrii-Shcnf: yes17:26
cnfhmm, ok17:27
cnfi'm fine with using eth0 and eth1, ffs17:27
jamespagecnf: we all where :-)17:27
Dmitrii-Shcnf: the problem is that UAPI kernel headers have a byte limit of 1517:27
Dmitrii-Shcnf: same with libc17:27
cnf<very quick rant> stupid ass retarded piece of shit systemd!</rant over>17:27
Dmitrii-Shcnf: :^)17:27
cnfok17:28
cnfjamespage: well, i'd say both maas and juju should guard against this17:28
cnfinstead of just silently failing17:28
jamespagedon't disagree17:28
lazyPoweryeah, thats all the same here too Budgie^Smore not sure why its tanking :( this bums me out17:28
Dmitrii-Shcnf: links to the kernel code and libc are in the comment if needed17:28
cnfok, so destroying the setup17:28
cnfchanging network names17:28
cnfand  deploying again17:28
Dmitrii-Shcnf: y17:29
Budgie^SmorelazyPower sorry :-/ the sarcastic side of me has a few choice "jokes" for the devs right now ;-)17:29
Budgie^SmorelazyPower hey at least this one isn't your fault :)17:29
lazyPowerBudgie^Smore: do what you gotta do man ;) i can filter appropriately17:29
cnfjamespage: asked a maas question over in #maas17:29
lazyPowerikr!17:29
lazyPowerfor a change, i dont feel totally responsible17:29
jamespageDmitrii-Sh: how exactly did we do the renames for the interfaces?17:30
Budgie^SmorelazyPower nope I won't got to that dark place, I am reforming ops guy :P17:30
ybaumyi dont know much about that but cant you just modify udev network rules every first boot to rename interfaces17:30
ybaumythats what i would do17:30
cnfybaumy: modify them how?17:31
cnfybaumy: this is all automated deploys17:32
jamespageybaumy: that's pretty much exactly what maas will do on deployment17:32
Dmitrii-Shjamespage: in short: I don't have a script for it yet. I just renamed them via maas gui. Changed interface names to 2-byte names and then redeployed. Any VLAN interfaces are updated automatically by maas17:32
cnfDmitrii-Sh: indeed17:32
ybaumyjamespage: ah ok17:32
cnfi'm collecting a LONG lust of maas and juju bugs  :/17:32
jamespagecnf: hearing you17:33
ybaumyjamespage: i would have modified cloud-init but thats probably what maas does too17:33
cnfDmitrii-Sh: do you know how to get back interfaces you deleted in MAAS?17:34
cnfDmitrii-Sh: assuming you don't know the MAC addresses anymore :P17:34
jamespagecnf: I suspect if you recommission in the machine, they will get re-discovered - but I'd defer to those with superior MAAS knowledge to me17:35
cnfk17:35
Dmitrii-Shcnf: better to recommission them, yes. That should boot an ephemeral ubuntu image via PXE get hw data again and bail out17:36
cnfso br-bond0.4011 is fine, at least17:36
cnfso anyone know how i can change the user a juju controller uses?17:41
cnfto talk to maas, that is17:42
jamespageyou have to switch the credential being used... I'd have to dig docs17:44
ybaumycnf: ~/.local/share/juju there is a credentials file17:45
Budgie^Smorejuju add-credential with the same id for the credential will update it17:45
cnfybaumy: yes, which isn't used after bootstrap17:45
ybaumycnf: last time i just edited that17:45
ybaumyor like Budgie^Smore says17:46
cnfas far as I can see, that doesn't get used after bootstrap17:47
Budgie^Smoreit should be used anytime juju needs to get cloud resources17:48
cnfit isn;t17:48
ybaumyi thought so too17:48
cnftry it17:48
cnfbootstrap with one user17:48
cnfthen change local credentials17:48
cnfand then deploy something17:48
cnfthey'll be added to maas with the original credentials17:48
ybaumyhmm17:49
ybaumythen you have to use the command17:49
ybaumysorry then17:49
ybaumycant try right now. backing up everything17:49
jamespagecnf: I think you should be able todo it with 'juju update-credential'17:51
cnfjjuju update-credential yeah17:51
cnfjamespage: that works, indeed17:51
cnfjamespage: doesn't change what is already running, though :P17:51
cnfbut it is something, thanks17:51
jamespagecnf: in terms of how that's allocated in maas17:51
jamespageno I'd not expect it todo that17:51
Budgie^Smoreok cnf, that is the part that I don't get17:51
cnfok, while those HP machines are booting, i'm going for a shower, and look for food17:51
cnfBudgie^Smore: what?17:52
jamespagecnf: I'm also concerned you might island existing allocated ressources.17:52
ybaumycnf: you cant change the owner of a added ressource in maas once its added i guess17:52
Budgie^Smorecnf when you say change what is already running17:52
cnfjamespage: yeah, and it's the controller :P17:52
cnflets see if we can get openstack working, i'll worry about ACL's and accounts later17:53
cnfbbiab17:53
cnfjamespage: thanks so far17:53
Budgie^Smorecnf I probably missed it but what are you trying to accomplish after you change the credentials juju uses?17:53
cnfBudgie^Smore: juju should use a juju user in talking to maas17:54
cnfi was loged in with my admin user17:54
Budgie^Smorecnf, ok I think there maybe a misunderstanding in the difference of cloud credential and juju user here17:56
ybaumya juju user is just a user of a cloud but not the cloud user17:59
ybaumyright?17:59
=== frankban is now known as frankban|afk
Budgie^Smorecnf, they are 2 separate ACL systems, reason being clouds (including MaaS) auth APIs are different and the juju user is for interfacing with juju18:00
Budgie^Smorecnf, for example for AWS it isn't even a username and password you pass to authenticate, it is 2 keys which are associated with a user account on Amazon's end18:01
sfeolepetevg, ping you around?18:03
petevgstroke: i am.  What's up?18:04
petevgsfeole: silly autocorrect munger your name, though.18:04
sfeolepetevg, hey, i wanted to use some exit handlers in libjuju, one that i looked at was atexit,  But i don't think I can properly utilize that handler with asyncio18:04
petevgsfeole: there are usually asyncio equivalents for that sort of thing.18:05
sfeolepetevg, ahh there are18:05
sfeolepetevg, i'll take a look then18:05
sfeolepetevg, i want to simply destroy a model upon exit18:06
petevgsfeole: cool. Ping me if you want to bounce anything off of me.18:06
sfeolepetevg, sounds good18:06
cnfBudgie^Smore: ybaumy so i talk to juju, not to the cloud18:12
cnfBudgie^Smore: ybaumy so i should not HAVE cloud credentials, juju should18:12
Budgie^Smorecnf what I haven't tried is if you can talk to juju without being able to talk to the cloud (or MaaS) but I have tried logging in as multiple users to juju from the same machine so that both juju accounts had access to my cloud credentials18:15
cnfBudgie^Smore: well, if you have several users talking to maas, that gets a mess18:15
cnfbecause each need their own cloud credentials?18:15
cnfthen you need to mirror ACLs18:15
cnfthat will become a MESS very very fast...18:15
Budgie^Smorecnf and in the juju world, models are "owned" by users and you have to give other users access the model18:15
cnfBudgie^Smore: right18:16
cnfBudgie^Smore: but then do the other users also need access to the same underlying cloud resources?18:16
cnfand what if they don't match?18:16
cnfso i expect the juju controller to use one user / api key / whstever18:16
cnfand deal with juju user itself18:16
Budgie^Smorecnf oh I kinda get that but from a security stand point you want all your ops people to have their own account on both the cloud and juju. this is more important in public clouds though where you already have to set people up there separate from juju18:17
cnfBudgie^Smore: no, no you really don't18:17
cnfBudgie^Smore: because ACLs on both will NOT match up18:17
cnfthey won't have the same mechanisms18:17
cnf( i mean, you want them to have a cloud account to deal with cloud issues, but not to talk to the cloud through juju)18:18
Budgie^Smorecnf and there is why you see why they are separate in juju to start with18:18
cnfBudgie^Smore: what?18:18
cnfa juju user should NOT! need a cloud account to talk to juju and do stuff18:19
Budgie^Smoreno you want them to use their cloud credentials through juju especially since otherwise you wouldn't be able to tell actions apart18:19
cnfno, no you really don't...18:19
cnfthat will be a mess18:19
cnfit just can't work18:19
Budgie^Smorecnf how are you going to get instances spun up with out clound access?18:20
cnfBudgie^Smore: JUJU should have cloud access18:20
cnfnot the juju user18:20
cnfthis is how you set up vnf controllers...18:20
Budgie^Smorecnf how are you going to tell apart who did what through juju to the cloud?18:20
cnfit just doesn't work if you need credentials all the way down the line...18:21
cnfBudgie^Smore: in juju...,18:21
cnfthat is why you have a juju controller...18:21
cnfBudgie^Smore: say i make a budgie/default model, which you have access to18:23
cnfyou need a budgie user on the cloud18:23
Budgie^Smorecnf but that is not how it works nor would any infosec team I know sign off on it working like that. yes you can use juju to determine some of that but infosec onces to be able to see it at every level and shared access at any level is frowned upon significantly18:23
cnfthen i give bob access to budgie/default18:23
cnfnow the bob user on the cloud needs access to your resources on the cloud18:23
cnfbut the cloud has no granularity, so he has access to ALL your resources?18:23
cnfBudgie^Smore: uhm, sure infosec would sign off on it, why would they not?18:23
cnfthat's nonsense18:24
cnfthat's how orchestration works18:24
cnfneeding credentials on every single step along the way is unmaintainable18:24
cnfand as such a security nightmare18:24
cnfit just does NOT work or scale in any form whatsoever18:25
Budgie^Smorecnf I would love to get into the ins and outs of why the design is the way it is and why infosec likes it that way but I do actually have a cluster I need to spin up sorry. your work around is to have a shared account on maas that you give out to everyone18:26
cnfBudgie^Smore: infosec doesn't like it your way :P18:27
cnfand no way18:27
cnfno one is getting cloud access18:27
cnfat all18:27
cnfnot one bit18:27
cnfif juju needs that, i don't think i'll happen at $currentclient18:28
Budgie^Smorecnf oh I highly doubt that but then running 30% of the world's Internet might make me jaded about what enterprise infosec people want18:28
Budgie^Smorecnf on and don't get me started about auditors - internal and external - and their requirements!18:29
cnfyou run 30% of the worlds internet?18:30
Budgie^Smorewas part of the company that does until recently18:32
cnfsure18:33
cnfjamespage: now i;m at message: 'can''t get info for image ''juju/xenial/amd64'': not found' :P18:34
Budgie^Smore http://www.reuters.com/article/us-akamai-tech-results-idUSKBN0NJ2IV20150428 - "Akamai, which delivers between 15-30 percent of all Web traffic"18:36
Budgie^Smorecnf if there is one thing I never lie about it is what I have done in my career. hell it might come across as bragging but truth is it still blows me away what I have accomplished and who I have worked for over the years18:46
Budgie^Smorethink I am going to "test" out JaaS to deploy the new cluster18:51
rick_hBudgie^Smore: let us know if you hit anything.18:52
Budgie^Smorerick_h: ack that18:52
rick_hBudgie^Smore: make sure to login to the website first to make sure your account is ready to go18:52
Budgie^Smorerick_h: I just logged in through the juju interface before I started modelling right?18:53
rick_hBudgie^Smore: rgr18:53
Budgie^Smorerick_h yeah I figured that would be a good first step :)18:54
Budgie^Smorerick_h I have "played" with the demo for years18:54
rick_hBudgie^Smore: sec, let me get you the in dev docs branch as well18:54
rick_hcrash course!18:54
rick_hBudgie^Smore:https://github.com/juju/docs/blob/jaas/src/en/getting-started-jaas.md18:55
rick_hBudgie^Smore: hah, well the "demo" is going to get more fun for you this time18:55
Budgie^Smorerick_h come on now, I am a man and you expect me to read a manual ;-) (side not, would be better if the images actually weren't broken links :P)18:56
rick_hBudgie^Smore: yea, once the branch lands and it's rendered on jujucharms.com/docs it'll be pretty and themed and such18:58
rick_hBudgie^Smore: just some in-flight stuff as it goes through reviews/etc18:58
Budgie^Smorerick_h yeah I get that :) just giving you crap18:58
rick_hBudgie^Smore: bring it on! :P18:58
Budgie^Smorerick_h I could come work with you as a colleague and not just a user :P18:59
cnfjamespage: so things are still not coming up19:12
cnfi think i am missing relatkons?19:12
Budgie^SmoreI am pondering adding charmscaler to this cluster19:37
Budgie^Smorewonder how well it would work in AWS though19:38
rick_hBudgie^Smore: :) https://www.canonical.com/careers19:46
anastasiamaccnf: m almost here now... it's only just before 6am :D how can I help?19:46
Budgie^Smorerick_h, *cough* no comment, I am taking the 5th *cough*19:47
cnfanastasiamac: https://bugs.launchpad.net/juju/+bug/1674759 but i just redeployed :/19:47
mupBug #1674759: juju upgrade-juju doesn't honor proxy settings <juju:Incomplete> <https://launchpad.net/bugs/1674759>19:47
cnfanastasiamac: so take your time :P19:48
cnfit's almost 21:00 here anyway :P19:48
cnfnow i'm stuck on the next issue :/19:52
Budgie^Smorerick_h quick question, is it possible to modify the constraints after you have created a machine in an model or is that something that is only done when addming a machine?19:52
rick_hBudgie^Smore: yea, only done when adding a machine. If you set them on an application level you can change the constraints and new units pick up the new values19:53
Budgie^Smorerick_h oh I get that, just makes it kinda tricky to use bundles where you might want different constraints than default19:54
Budgie^Smorerick_h suppose I could just download the model, modify it to what I want and import it back?19:54
rick_hBudgie^Smore: yea, I think the idea is that you'd swap up any constraints in the bundle yourself as that changes what's setup.19:56
rick_hBudgie^Smore: at some point we'll allow config/placement/etc overrides during the deploy command19:56
Budgie^Smorerick_h ok, follow up question, does the UI have a way of updating the default constraints?19:56
rick_hBudgie^Smore: hmm, I'm trying to trace that question. What are the default constraints?19:57
cnfand i'm betting jamespage has gone home for the day :P19:57
Budgie^Smorerick_h oh that would be nice, kinda like the UI for doing the placement overrides, etc... I can't remember but the last time I left everything alone I got m3.medium instances which is only 4G of mem19:58
rick_hBudgie^Smore: so in the GUI you can alter constraints before hitting deploy19:58
Budgie^Smorerick_h think that is based on the juju controller memor requirements19:58
rick_hBudgie^Smore: I guess I'm not sure which "UI" you're referring and such.19:58
cnfand one message: 'can''t get info for image ''juju/xenial/amd64'': not found'19:58
rick_hBudgie^Smore: well it's a "default" value. Like anything, it needs to not be too crazy for folks trying/testing/etc and those that are running long running production systems19:58
cnfanyone know what that is about?19:59
Budgie^Smorerick_h sorry I am a bit old school use UI to mean GUI and CLI for ... well CLI19:59
rick_hBudgie^Smore: all good19:59
Budgie^SmoreBudgie^Smore ok if I should be able to alter the constraints in the GUI, I am not finding where, only iption I get when clicking on the machine is destroy20:00
Budgie^Smorerick_h about the only way I can think of doing it would be to destroy the "new" machines and "add" new ones with the constraints I want baked in and then replacing the charms back on to the newly created machines... oh and wow when I have a brain fart I have a brain fart20:05
rick_hBudgie^Smore: or download the bundle yaml and go down to the machines and edit the numbers before doing deploy?20:06
Budgie^Smoreyup20:06
Budgie^Smoreseems a little counterproductive when the GUI does give the ability to add constraints that it wouldn't have a way to update predeploy because techinical the machine isn't added until after it is deployed20:07
hatchBudgie^Smore you are correct - this feature has been on our roadmap BUT if you're feeling adventurous you could file a feature request here: https://github.com/juju/juju-gui/issues  :)20:08
Budgie^Smorehatch thanks :) I might do that... good knowing someone else thinks it is worth "fixing"20:09
hatchBudgie^Smore in fact https://github.com/juju/juju-gui/issues/1982 :D20:09
Budgie^Smorehatch in the meantime I have a "workaround" that will do it anyway20:10
hatchgood good20:10
Budgie^SmoreI have liked and am watching the issue20:11
hatchgreat thanks20:13
tvansteenburghrick_h: i need some clarification about resources. i thought a resource was attached to a specific revision of a charm, but that doesn't seem to be the case.20:39
rick_htvansteenburgh: when you do a release you release with a specific revision of a charm and a specific revision of a resource20:42
rick_htvansteenburgh: I'm actually playing with the charm command today and making it part of the release output that it shows what version of the charm and what revision of each resource are in each channel20:43
tvansteenburghrick_h: right, that's what i thought. so the resource revisions sticks with that charm revision20:46
rick_htvansteenburgh: well it's mallable via the release calls20:49
rick_htvansteenburgh: so a single charm revision can have a series of resource revisions over time20:50
tvansteenburghrick_h: i have a situation where old revisions of a charm are deploying with a much newer resource than they were published with, which was unexpected. trying to figure out how that happenend20:51
rick_htvansteenburgh: either a bug or someone did new releases with the charm command and updated resources20:51
Budgie^Smore rick_h do I need to be running juju 2.2 cli to log into JaaS from the cli?20:55
rick_hBudgie^Smore: no, 2.x20:56
Budgie^Smorerick_h using juju loging jaas?20:58
Budgie^Smorerick_h I would get it if I knew where to find the register command I need :)21:01
hatchBudgie^Smore juju register21:01
rick_hjuju register jimm.jujucharms.com21:01
hatchjuju register jimm.jujucharms.com jaas21:01
hatchrick_h don't forget the fancy name :)21:02
rick_hdoh!21:02
Budgie^Smoreah ok, I vagurely remember that from somewhere :)21:02
rick_hBudgie^Smore: *cough* in that docs page *cough*21:02
Budgie^Smorerick you sure about that?21:03
hatchBudgie^Smore were there places you looked for that command? It's possible we should have it in more places, or more accessible places21:03
Budgie^SmoreI was looking at the controller page of the jaas branch for starters rick_h21:03
tvansteenburghrick_h: sorry, i don't see how someone could update a resource that was already released ?21:04
Budgie^Smorerick_h but that is after I scanned that page and couldn't see anything about registering to the controller21:04
tvansteenburghrick_h: e.g. `charm release wily/django-42 --resource website-3` <- afaik, neither django-42 nor website-3 can be changed now right?21:05
hatchBudgie^Smore you're right, it's on a special CLI docs page21:05
rick_htvansteenburgh: sec otp21:05
hatchBudgie^Smore https://github.com/juju/docs/blob/jaas/src/en/jaas-cli.md21:05
hatchwe should probably make these options more obvious at the top of each page21:06
rick_htvansteenburgh: I can always do charm release wily/django-42 --resource website-421:06
hatchthanks Budgie^Smore21:06
tvansteenburghrick_h: ok, i didn't know that21:06
tvansteenburghrick_h: but in my case, i don't think someone went through every old charm rev and updated the resource21:06
Budgie^Smorehatch I keep forgetting that the CLI is it's own section, to be honest I almost always expect to see UI and CLI steps in the same place in the docs21:07
tvansteenburghtechnically i see it's possible now, i'll need to check21:07
Budgie^Smorehatch to me the CLI page is for stuff the CLI can do that the UI can't21:07
rick_htvansteenburgh: k, just stating what can be done there.21:07
Budgie^Smoreoh and hatch, (based on my login just now) rick_h had it right, you can't pass 'jaas' that way... register seems to take only 1 argument21:11
hatchheresy!21:11
hatchBudgie^Smore 2.1.0?21:12
hatcher, version 2.1.021:12
hatchwait you21:12
hatchre right21:12
Budgie^Smorehttp://paste.ubuntu.com/24230847/21:12
hatchI failed21:12
hatchplz disregard me :)21:12
Budgie^Smoresometimes you gotta give credit where credit is due21:14
hatchhaha indeed21:15
cory_fulayer-basic PR for general review: https://github.com/juju-solutions/layer-basic/pull/9221:17
Budgie^SmorelazyPower I am going to "stop" that cluster until we can determine what we want to get off it and how21:23
tvansteenburghninja'd marcoceppi21:23
* tvansteenburgh notches belt21:24
kwmonroemarcoceppi: you are awesome... i'm pretty sure you're responsible for charm build messages like "build: layer.yaml includes hbase-quorum which isn't used in metadata.yaml".  saving my hide all day chief!21:37
magicaltrouti told you not to break it....21:38
Budgie^SmoreOK next crazy question ... where does juju get the 10.0.0.0 IP range when it is deploying lxd containers?21:38
kwmonroehell, this juju magic makes it damn near impossible to break things.  #amirite magicaltrout?21:39
cnfhaha!21:39
cnffunny21:39
Budgie^Smoreok I have found what I was looking for, what's the best way to override the IP address scheme when deploying LXD into a mixed LXD / machine environment so that they share the same range?21:49
Budgie^Smoreok I feel like I am missing something basic when it comes to the Juju deployment of LXD containers21:57
smgollerHey all, how does juju tell maas about containers it creates?22:04
smgolleri.e. in the code22:04
rick_hBudgie^Smore: so having containers on the same host network range is only supported on Maas right now22:05
rick_hBudgie^Smore: aws only lets a host have 1 Mac address so containers can't have the addresses and the host for instance22:05
rick_hBudgie^Smore: there's work to make that work on manual/OpenStack/etc22:06
rick_hWhere there's something to do up address management on the network.22:06
cnfdoes anyone know what this means: 'can''t get info for image ''juju/xenial/amd64'': not found'22:06
cnfalso, how do i kick something to tell it stuff has changed, and it should try again?22:09
Budgie^Smorerick_h ah ok now that make sense22:11
kwmonroecnf: wadda you mean by stuff?  if a charm is in an error state, you can say "juju resolved <foo>/<x>" to make juju retry the last thing that may have failed.22:11
cnfit's not in an error state22:11
Budgie^Smorerick_h do all the instances need public IPs or can internal stuff use the VPC's private IP and only give public IPs to instances I want access to?22:12
kwmonroerick_h: is the bundle spec public, or rather, can i make a wish list for the next bundle spec?22:12
cnfit just says 'can''t get info for image ''juju/xenial/amd64'': not found'22:12
kwmonroerick_h: my kingdom for "services:  foo:  charm:  foo\n channel: edge"22:12
cnfso idno what the fuck to do :/22:13
rick_hkwmonroe: file bugs on GH/juju/charm maybe?22:13
cnfi can't use retry-provisioning, because that doesn't support containers22:13
cnfso how do i kick it?22:13
kwmonroesure rick_h - i don't mind opening an issue, just wanted to get the right place... for ex, https://github.com/juju/charmstore/blob/v5-unstable/docs/bundles.md is the last place i saw reference to version X of a bundle spec.22:14
kwmonroeif gh/juju/charm is the right place, i'll open my wants there.22:15
rick_hkwmonroe: yes there's a v6 unstable branch now22:15
cnfso how do i make it retry provisioning containers? o,O22:15
rick_hcnf: juju retry-provisioning ?22:16
cnfrick_h: doesn't support containers!22:16
cnferror: invalid machine "1/lxd/0" retry-provisioning does not support containers22:16
rick_hcnf: ah my apologies.22:16
cnfrick_h: i do apologize if i'm a bit snappy, been running into problems like this for a few weeks now22:18
rick_hUnderstand, my fault. I recall that now.22:18
cnfi keep running into deadlock issues it seems22:18
cnfnot confidence inspiring22:19
cnfi have stuff that has failed, and no bloody way to fix it >,<22:20
cnfhmm22:27
rick_hcnf: I'm at my son's violin. Do me a favor. Let's regroup tomorrow. I'd like to help but not sure about the background of your setup and what state things are in. Maybe tomorrow we can set a base via Hangouts and see where to go forward.22:27
cnfrick_h: that'd be nice, i'm in CET though22:27
cnfdon't know if your timezone matches up22:28
cnfrick_h: but now, be at your sons violin22:28
rick_hEST here22:28
cnfyou ain't getting that back22:28
kwmonroeoh lordy rick_h.  kid's violin.  you are a brave soul.22:28
rick_hAll good, he's with a teacher22:28
rick_hI'm sitting outside but we're about to leave. Lessons end in 2min22:28
cnfrick_h: i'll be at the office between 10:00 and 18:00 CET tomorrow22:28
magicaltroutJunior Strings used to practice down the hall from the Junior Jazz Band when I was a kid22:29
magicaltroutit was like strangling cats22:29
rick_hCnf ok, so your some 5hrs ahead of me22:29
cnfrick_h: i'll go in late(er) and stick around a while22:29
rick_hcnf: so I'll be a bit late for your morning but will ping when I get my breakfast in from of my computer22:29
cnfi can make that 11:00 to 19:00 or so22:29
cnfrick_h: thanks, that'd be appreciated22:30
=== grumble is now known as grumble2
=== grumble2 is now known as grumble
Budgie^Smorerick_h one more crazy question if you are still around, is there a way to specify the AWS VPC ID to use in the GUI?22:53
hatchBudgie^Smore nope23:04
Budgie^Smorehatch can you do it from the cli using jaas or am I going to need my own controller?23:05
hatchhmm23:05
Budgie^SmoreI came across a juju bootstrap command that forces the vpc-id using --config23:06
hatchright....23:06
Budgie^SmoreI am wondering if I constraint the add machine to a space that is assigned to a subnet in the right VPC if that would be sufficient23:07
hatchBudgie^Smore so I'm not actually sure, there was some discussion around vpc-id on a per model basis but that's outside of my ballpark23:09
hatchI can find out tomorrow though when the correct peeps get in23:09
hatchare you able to file a bug on the GUI project to that effect and I can reply in kind?23:09
Budgie^Smorehatch I think it would be awesome to have a per model VPC23:09
hatchtomorrow that is23:09
Budgie^SmoreI will try and get around to that, I need to get this cluster up today if I can23:10
hatchsure, thanks, I'll make a note none the less to bring it up, so if you're around tomorrow I'll try and get back to you23:10
Budgie^Smoretrying to secure it as best I can at the moment and the legacy stuff is using the default vpc is a mess23:10
Budgie^Smorehey hatch so I started "hand building" my model using the CLI and I don't see the mode in the jaas version of the GUI23:53
hatchBudgie^Smore when you run `juju list-controllers` do you see the jaas controller?23:53
hatchselected23:53
hatchit should have a * beside it23:53
Budgie^Smoreyeah and I didn't get any errors running juju deploy23:54
Budgie^Smorejaas*  k8s-aws     gburgess@external  (unknown)                      -         -     -  2.0.023:54
hatchcan you run `juju list-controllers--refresh`23:55
hatchit's showing there that you have no models/machines23:55
hatchthose last few dashes23:55
hatcher23:55
hatchcan you run `juju list-controllers --refresh`23:56
Budgie^Smoreyeah looks like it is having problems aloocating a machine, if what I am reading from juju status is anything to go by23:57
Budgie^Smoreok that command still hasn't returned hatch23:57
hatchhmm23:57
hatchit's fast here23:58
hatchmaybe it got hung in the wild wild webs23:58
hatch:)23:58
hatchBudgie^Smore when you visit https://jujucharms.com/u/gburgess do you see your model? You may have to log in if you haven't already23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!