Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2015-07-09

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:04 subsignal joined #salt
00:05 sgargan joined #salt
00:05 amcorreia_ joined #salt
00:17 pcn In a jinja template, how can I remove newline whitespaces, but leave indentation whitespaces?
00:19 napsterX joined #salt
00:20 murrdoc u cant
00:21 pcn orly?
00:21 murrdoc or maybe u can
00:21 murrdoc i really dont know
00:21 murrdoc there is a config for trim_whitespaces
00:21 lloesche joined #salt
00:22 murrdoc jinja_trim_blocks: True
00:23 jaybocc2 any tips on using gpg inside of py sls files?
00:24 kevinquinnyo joined #salt
00:24 sectionme joined #salt
00:45 clintberry joined #salt
00:46 otter768 joined #salt
00:47 lpmulligan joined #salt
01:03 Singularo joined #salt
01:03 Singularo joined #salt
01:05 patrek joined #salt
01:22 napsterX joined #salt
01:25 kevinquinnyo which git provider do you all use for gitfs?  There seem to be some options, and I haven't dug into the differences.  Which is best and why?  gitpython, pygit2 ?
01:28 yomilk joined #salt
01:28 beauby joined #salt
01:29 anotherZero joined #salt
01:29 desposo joined #salt
01:35 furrowedbrow joined #salt
01:36 timoguin joined #salt
01:37 TyrfingMjolnir joined #salt
01:41 ageorgop joined #salt
01:42 kevinquinnyo also, if you use a github private repo to house your salt master's "root_dir" and friends, is it good practice to setup a "Deploy Key" in github, and if so, should it have write access to the repo -- or should it be read-only -- ie:  is it a good idea to allow myself to push changes directly from the salt-master?
01:46 mapu joined #salt
01:47 beauby joined #salt
01:56 ITChap joined #salt
01:57 sgargan joined #salt
02:04 Furao joined #salt
02:04 ITChap joined #salt
02:05 penguinpowernz joined #salt
02:09 beauby joined #salt
02:10 TOoSmOotH joined #salt
02:13 sectionme joined #salt
02:25 evle joined #salt
02:29 CeBe1 joined #salt
02:31 sunkist joined #salt
02:33 beauby joined #salt
02:35 ITChap Hi,
02:36 ITChap since few days I am working on this gitfs issue where my saltmaster can connect to by git repo but I don't get any states.
02:36 ITChap I was using the 2015.5.1
02:38 ITChap yesterday I upgraded to the 2015.5.3 and it still didn't work
02:38 ITChap but this morning I installed the same 2015.5.3 from pip this time
02:38 ITChap and everything works fine
02:38 ITChap is there any way to check if the pip version and my package version come with different modules/versions ?
02:40 desposo joined #salt
02:40 nosratheno joined #salt
02:44 ITChap joined #salt
02:47 otter768 joined #salt
02:48 Corey https://gist.github.com/patio11/24a3a68fd26f65e484e1 <-- WANT
02:52 anotherZero joined #salt
02:58 ITChap joined #salt
03:00 favadi joined #salt
03:01 ITChap joined #salt
03:05 amcorreia_ joined #salt
03:06 N-Mi joined #salt
03:07 murrdoc joined #salt
03:10 beauby joined #salt
03:13 sectionme joined #salt
03:34 ramblinpeck evening all, I've got an overlapping vagrant/salt/aws question. I'm trying to do some build out with vagrant on aws, and using salt for the provisioning, but having trouble setting the hostname, which leads to the salt error "No Top file or external nodes data matches found".  Is there a special way to set it in vagrant/aws so that salt will pick up the
03:34 ramblinpeck match in my top.sls?
03:37 napsterX joined #salt
03:40 aqua^c_ joined #salt
03:45 TyrfingMjolnir joined #salt
03:59 mks1945 joined #salt
04:09 timoguin joined #salt
04:09 spookah joined #salt
04:13 ITChap joined #salt
04:13 TyrfingMjolnir joined #salt
04:15 yomilk joined #salt
04:26 ITChap joined #salt
04:31 ITChap I have errors when using gitpython with my salt-master. Looks like the git command is not found.
04:31 jaybocc2 joined #salt
04:31 ITChap Is there a way to fix this
04:31 ITChap I have git installed and the version match the requirements
04:31 ITChap I would like to check if there is an issue with the path or something else
04:31 ITChap any idea
04:34 ITChap looks like a env issue since it works when ran from the CLI
04:35 stoogenmeyer_ joined #salt
04:41 Aidin joined #salt
04:48 otter768 joined #salt
04:48 jaybocc2 joined #salt
05:00 Bryson joined #salt
05:00 karlthane joined #salt
05:02 sectionme joined #salt
05:18 cmb joined #salt
05:18 cmb joined #salt
05:18 cliluw joined #salt
05:21 jonlangemak joined #salt
05:47 napsterX joined #salt
05:53 dopesong joined #salt
05:54 stoogenmeyer_ joined #salt
05:56 jaybocc2 joined #salt
05:58 catpigger joined #salt
06:02 colttt joined #salt
06:03 favadi joined #salt
06:08 rdas joined #salt
06:11 Furao joined #salt
06:12 jaybocc2 joined #salt
06:13 impi joined #salt
06:16 malinoff joined #salt
06:18 linjan joined #salt
06:19 sirex joined #salt
06:20 sectionme joined #salt
06:20 harkx joined #salt
06:23 IanV0rn2341 joined #salt
06:25 julienlavergne joined #salt
06:34 jaybocc2 joined #salt
06:37 KermitTheFragger joined #salt
06:49 otter768 joined #salt
06:51 karlthane joined #salt
06:53 sectionme joined #salt
07:03 Ztyx joined #salt
07:06 ndrei joined #salt
07:07 Ztyx1 joined #salt
07:07 markm joined #salt
07:11 jaybocc2 joined #salt
07:11 desposo joined #salt
07:14 kawa2014 joined #salt
07:15 AndreasLutro joined #salt
07:18 colttt_ joined #salt
07:20 joeto joined #salt
07:25 IanV0rn2341 joined #salt
07:31 ITChap joined #salt
07:36 gcfhvjbkn joined #salt
07:37 kawa2014 joined #salt
07:39 BretFisher joined #salt
07:41 yomilk joined #salt
07:42 ITChap joined #salt
07:46 BretFisher good day salters, I'm on 2015.5.2, curious how you would return the "instance number" of a minion based on it's hostname/minionid. If I have web-1 and web-2 minions and wanted to do things programmatically in states based on which node it was, how would you determine that in a state? I've got lots of nodes so didn't want to do simple if grain hostname = "web-1", but was hoping I could figure a pillar somehow to return the last digit of
07:46 BretFisher hostname/minion... thoughts?
07:46 jaybocc2 joined #salt
07:47 malinoff BretFisher, something like {{ grains['id'].split('-')[-1] }}
07:48 BretFisher oh, split, nice
07:48 BretFisher malinoff thanks, trying that now
07:50 ITChap joined #salt
07:55 thalleralexander joined #salt
08:09 BretFisher @malinoff worked like a champ, made it a macro.
08:12 Xevian joined #salt
08:14 s_kunk joined #salt
08:16 s_kunk_ joined #salt
08:18 lb1a joined #salt
08:21 ndrei joined #salt
08:21 harkx joined #salt
08:22 jaybocc2 joined #salt
08:24 nk joined #salt
08:24 ITChap joined #salt
08:31 s_kunk joined #salt
08:45 juanito joined #salt
08:47 fisuk joined #salt
08:47 \ask joined #salt
08:48 julez joined #salt
08:48 MTecknology joined #salt
08:49 nikogonzo joined #salt
08:50 otter768 joined #salt
08:52 emid joined #salt
09:02 IanV0rn2341 joined #salt
09:04 impi joined #salt
09:08 keimlink joined #salt
09:09 tongpu joined #salt
09:10 julez joined #salt
09:14 julienlavergne joined #salt
09:23 che-arne joined #salt
09:24 favadi joined #salt
09:40 desposo joined #salt
09:42 zz_cro joined #salt
09:42 nisa joined #salt
09:43 nisa does anyone have experience in using saltstack for windows
09:45 stephanbuys joined #salt
09:46 malinoff nisa, don't use salt on windows, use windows-oriented tooling like powershell and AD
09:55 stephanbuys joined #salt
09:58 jaybocc2 joined #salt
09:59 aqua^c joined #salt
10:00 nisa thanks for the advice malinoff...but basically to coordinate a set of windows machine I need some tools. Currently I have set up my own tooling where I setup cygwin on windows and communicate via a single linux server  and ssh tunnel to the cygwin. But main problem is to do any system level tasks, other than starting stopping machines etc. I have to build a separate  layer...I thought saltstack could help....
10:00 nisa what is AD ?
10:00 favadi joined #salt
10:02 Furao that don’t start well
10:02 Twiglet heh
10:02 Twiglet nisa: Active Directroy
10:03 nisa no...we need to reinit the machines on daily basis before running complex tasks on daily basis and this happens via cron on linux (and ssh tunnel to windows).
10:04 nisa But sometimes we do something on a single windows machine (like setting up an application), and we want that process to be replicated to all other windows system based on some kind of pub/sub mechanism which is possible in saltstack (zeromq)....atleast that was my idea...
10:04 Furao wow, I didn’t know you could automate more than virus propagation in windows
10:06 sectionme joined #salt
10:07 nisa well, what I have described above is already working fine...I have a redis based channel open from all windows machine and a windows service continuous polls and publishes status to the redis channel...so I can monitor all machines easily....Later I found about saltstack and realized I was doing something similar except they were using zeromq...
10:07 malinoff nisa, my suggestion is to avoid *nix-oriented tooling when trying to automate something on windows
10:08 malinoff I dropped such tryings after 2 days of trying to automate mssql express edition installation
10:08 malinoff which i finally found impossible
10:08 nisa yes...I come from linux / unix world so that was my only options ... @malinoff...what was your final choice...?
10:08 Furao maybe there is a way to control mouse pointer with salt?
10:08 malinoff nisa, to drop windows support
10:09 malinoff nisa, too much pita for the same price
10:09 nisa But what is the options...I need to maintain/coordinate the windows as our application runs on that platform
10:09 malinoff nisa, use powershell scripts and active directory, i already said that
10:10 nisa @malinoff ....is there any pointer / tutorial of how to do these sort of sync between set of windows machines... using powershell ?
10:12 malinoff nisa, google windows ad group policy script
10:12 nisa we use LDAP Internally so AD is not an option....
10:13 malinoff nisa, https://en.wikipedia.org/wiki/Active_Directory#Logical_Structure
10:13 malinoff nisa, Objects in Active Directory databases can be accessed via LDAP
10:14 malinoff nisa, i don't want to google for you more
10:14 julez joined #salt
10:14 nisa thanks malinoff...I will do that. But I was wondering why use AD when there is LDAP...
10:14 malinoff nisa, :|
10:17 nisa YES...
10:17 nisa total newbie to windows...
10:17 nisa stupid question....
10:18 malinoff nisa, /join #windows
10:20 nisa but how can the windows machines communicate with one another....how do they centrally report status....I am guessing you will say via AD
10:20 chiui joined #salt
10:23 go joined #salt
10:24 nisa thanks everyone for their input...but basic question is : has anyone used saltstack....?
10:24 sgargan joined #salt
10:32 trikke joined #salt
10:38 lb1a joined #salt
10:38 giantlock joined #salt
10:39 jespada joined #salt
10:42 kawa2014 joined #salt
10:45 jaybocc2 joined #salt
10:50 stephanbuys joined #salt
10:51 otter768 joined #salt
10:53 denys joined #salt
10:55 mks1945 joined #salt
11:01 TyrfingMjolnir joined #salt
11:06 evle joined #salt
11:06 TyrfingMjolnir joined #salt
11:10 gfa joined #salt
11:15 rm__ joined #salt
11:17 zerthimon joined #salt
11:18 rm__ hi. i have master at version 2014.7.0 and minions at versions 2015.5.2 (freebsd) and 0.17.5+ds-1 (ubuntu)
11:18 rm__ freebsd clients stopped to work after update to 2015.5.2
11:19 AndreasLutro I don't think master-minion with different versions are officially supported
11:19 rm__ yes. there is https://github.com/saltstack/salt/issues/24660 where compatibility was broken
11:20 rm__ i need to know what should i patch in 2015.5.2 to make it work with master 2014.7.0
11:21 rm__ in mentioned issue it looks like something simple to locally patch.
11:22 lb1a joined #salt
11:29 arount joined #salt
11:31 zipkid Hi, is it expected that salt '*' grains.item <whatever> always returns <whatever>: wether it exists or not on the minions? 2014.7.5 does not show non-existing grains....
11:31 helderco joined #salt
11:31 Ztyx joined #salt
11:31 zipkid Hi, is it expected that salt '*' grains.item <whatever> always returns <whatever>: wether it exists or not on the minions in version 2015.5.2? 2014.7.5 does not show non-existing grains....
11:31 JDiPierro joined #salt
11:32 zipkid same with salt-call
11:32 arount Hi, I'm trying to create a module method who returns a minions-id dict indexed by some grain's data, but I'm not sure how I can list my minion ids from a module method. There is a builtin module who do that ?
11:35 OliverMT how do I require: - file: someFileLoadedInAnotherSls
11:35 OliverMT if I require the sls, am I guaranteed that the state in that sls is fulfilled first?
11:35 OliverMT (granting the same effect I am looking for)
11:39 colttt joined #salt
11:44 anotherZero joined #salt
11:48 aqua^c joined #salt
11:52 julez joined #salt
11:55 _JZ_ joined #salt
12:01 lloesche joined #salt
12:04 julez joined #salt
12:09 giantlock joined #salt
12:11 furrowedbrow joined #salt
12:15 impi joined #salt
12:15 amcorreia_ joined #salt
12:18 yomilk joined #salt
12:21 DammitJim joined #salt
12:22 patrek joined #salt
12:26 patrek joined #salt
12:30 gcfhvjbkn joined #salt
12:33 patrek joined #salt
12:35 stoogenmeyer__ joined #salt
12:37 DammitJim I'm doing a demo for my company on salt since I want to start using it inhouse
12:37 DammitJim do you guys have bullet points for a presentation?
12:39 marnom joined #salt
12:42 marnom peer publishing keeps giving 'None' as output for anything other than a test.ping when I'm doing this through a syndic, wondering if I should raise an issue on github or if it's just a configuration issue somewhere
12:49 aqua^c joined #salt
12:51 otter768 joined #salt
12:53 subsignal joined #salt
12:56 che-arne joined #salt
12:58 stephanbuys joined #salt
12:59 lothiraldan joined #salt
13:00 murrdoc joined #salt
13:02 julienlavergne1 joined #salt
13:07 hasues joined #salt
13:07 JDiPierro joined #salt
13:07 hasues left #salt
13:07 nisa joined #salt
13:10 Tecnico1931 joined #salt
13:20 DammitJim where does the master log all the stuff that is going on when running a state?
13:21 murrdoc in the returner
13:21 murrdoc if u want to see it on the minion
13:21 murrdoc run it with returner syslog
13:21 DammitJim where do I set that?
13:22 DammitJim I"m only asking because installing java is taking forever
13:22 DammitJim on a minion
13:23 murrdoc its a param to salt
13:23 murrdoc check cli docs
13:24 DammitJim ok, thanks!
13:24 primechuck joined #salt
13:27 yomilk joined #salt
13:27 DammitJim if I change mi init.sls in my pillar, do I need to refresh anything?
13:29 desposo joined #salt
13:31 peters-tx joined #salt
13:31 lothiraldan joined #salt
13:31 pdayton joined #salt
13:32 elfixit joined #salt
13:33 jespada joined #salt
13:34 Deevolution DammitJim: pillar.item(s) will not require a refresh.  If you're using pillar.get, it may require it (better to do it just to be safe).
13:35 DammitJim thanks Deevolution
13:35 DammitJim I meant in regards to a new minion
13:35 scoates joined #salt
13:37 mpanetta joined #salt
13:39 DammitJim can salt do like a history of the stuff that has been run and who did it?
13:39 DammitJim what does one call that so I can google it?
13:40 Deevolution DammitJim: I don't think there's an innate history, but depending on what level you're logging at you'll have a good idea of what was done.
13:40 ndrei joined #salt
13:41 DammitJim oh, I thought there was a mechanism for that
13:41 DammitJim what is that called anyway?
13:41 DammitJim trail?
13:41 fredvd joined #salt
13:41 pguinardco an audit trail, log... What may also work is checking your config into git and managing it through git while not letting anyone touch the actual salt server
13:42 DammitJim yes
13:42 DammitJim audit trail
13:42 DammitJim yeah, git
13:42 pguinardco You can setup a highstate to run say every 20 minutes or hour to push changes out and have that email you changes
13:42 DammitJim hhhmmmm
13:43 DammitJim I was looking for something simpler... like every time the master does something, it gets logged
13:43 DammitJim with the results
13:43 DammitJim and who ran it
13:43 Deevolution DammitJim:  A lot of what's possible/available will depend on how your Salt environment is setup.
13:44 DammitJim but it is possible, right?
13:44 Deevolution yes, it's possible.
13:44 Deevolution Setting logging to debug will produce pretty verbose documentation of what happens.
13:44 Deevolution You'll probably have to grab logs from both the master and the minions.
13:44 DammitJim and one can >> it to a database?
13:44 Deevolution We use Splunk for this kind of thing, but syslog/logstash/etc...  can do it.
13:44 PI-Lloyd DammitJim: if you are using Linux, you can use sudo-io to log commands sent to salt through sudo by users. FOr collecting the logs, use something like logstash and ship it to elasticsearch
13:45 DammitJim Splunk, thanks!
13:45 dyasny joined #salt
13:45 DammitJim I'll make a note of that!
13:45 PI-Lloyd Splunk also works ^^
13:45 DammitJim PI-Lloyd, but how do I make salt log everything?
13:46 Deevolution DammitJim: Something like - log_level_logfile: debug
13:46 DammitJim I would set that in the master configuration, right?
13:46 PI-Lloyd setting debug logging is never good unless actually debugging, especially when shipping to splunk/logstash
13:47 Deevolution PI-Lloyed:  It's the only way to get verbose enough logging.
13:47 PI-Lloyd the debug output contains info from pillar which you may want to keep secret
13:47 DammitJim I don't necessarily want debugging... but it seems that salt doesn't log the output from running a state for example, or does it?
13:47 pguinardco What about terse?
13:47 PI-Lloyd the minion will log the state output
13:47 pguinardco (I think that's what it's called when the master only records changes)
13:47 DammitJim oh ok, so I just have to get the state output from the minion!
13:48 PI-Lloyd correct
13:48 timoguin joined #salt
13:49 DammitJim my minion is telling me I should install python-software-properties
13:49 DammitJim to determine my ppas properlly
13:49 DammitJim hhmmmmm
13:49 PI-Lloyd yeah we have that warning, we ignore it. PPAs still work
13:49 DammitJim thanks guys! this is why I am going with Salt... a good support community and a variety of choices to solve a problem
13:51 jdesilet joined #salt
13:52 penguin_dan joined #salt
13:53 DammitJim weird... do I have to enable something on the minion to see stuff in /var/log/salt/minion ?
13:54 kaptk2 joined #salt
13:55 julienlavergne joined #salt
13:57 PI-Lloyd are you running commands on minions from the master?
13:58 DammitJim copying files
13:58 DammitJim installing from ppa
14:00 DammitJim weird
14:00 DammitJim I just ran salt 'demominion' state.sls java.java
14:00 DammitJim and it returned
14:00 DammitJim no error, no nothing :(
14:00 ramblinpeck I've got an overlapping vagrant/salt/aws question. I'm trying to do some build out with vagrant on aws, and using salt for the provisioning, but having trouble setting the hostname, which leads to salt outputing "No Top file or external nodes data matches found". Is there a special way to set it in vagrant/aws so that salt will match in my top.sls
14:00 Deevolution DammitJim:  This is why we have logging on minions turned up to debug.
14:01 JDiPierro joined #salt
14:01 ramblinpeck looking at this example, https://github.com/JustinCarmony/salt-demo and trying to do the same thing, but setting the name tag, the hostname value, etc doesn't seem to work
14:02 DammitJim Deevolution, where do I do that? /etc/salt/minion... where?
14:02 DammitJim the second time I ran it, it worked
14:02 cpowell joined #salt
14:03 Deevolution /etc/salt/minion
14:03 sgargan joined #salt
14:03 andrew_v joined #salt
14:04 PI-Lloyd /etc/salt/minion - log_level_logfile:
14:04 murrdoc joined #salt
14:05 PI-Lloyd that supposedly defaults to warning, try setting it to info and restart the minion, see if that makes a difference
14:06 DammitJim oh, I deleted the minion from the master
14:06 DammitJim but I might have missed something
14:08 PI-Lloyd that option would likely need to be set on all minions
14:11 TyrfingMjolnir joined #salt
14:11 andrew_v_ joined #salt
14:12 lb1a joined #salt
14:16 IanV0rn2341 joined #salt
14:20 rc71_ joined #salt
14:21 yexingok joined #salt
14:22 stoogenmeyer__ joined #salt
14:23 zerthimon joined #salt
14:24 clintberry joined #salt
14:32 Xevian joined #salt
14:33 giantlock joined #salt
14:34 sgargan joined #salt
14:36 lpmulligan joined #salt
14:38 aqua^c joined #salt
14:38 jespada joined #salt
14:39 lothiraldan joined #salt
14:39 heise joined #salt
14:40 certainty joined #salt
14:41 DammitJim joined #salt
14:43 bhosmer joined #salt
14:44 DammitJim is there something else I need to do when I remove a minion from a master?
14:44 DammitJim I am doing salt-key -d 'servername'
14:45 murrdoc reboot the master
14:45 murrdoc (no no no)
14:52 otter768 joined #salt
14:54 jalbretsen joined #salt
14:56 ben_NN joined #salt
14:57 bluenemo joined #salt
14:57 scoates joined #salt
15:00 adelcast left #salt
15:01 adelcast joined #salt
15:02 ramblinpeck or maybe let me turn the question, using vagrant, aws, and salt what is the best approach to targetting? I was attempting to use hostname, but maybe I need to go further and look into roles based on grains and ec2 userdata?
15:03 snave joined #salt
15:03 murrdoc i use grains and roles
15:05 ecdhe If I'm using an orchestrate runner to run an sls, and I set highstate: True, does highstate get called before or after the sls?
15:06 clintber_ joined #salt
15:07 julez joined #salt
15:07 whytewolf ecdhe: depends. is the highstate before or after the sls?
15:07 terratoma joined #salt
15:08 ramblinpeck murrdoc: I'm a bit confused by roles, are they defined in their grain file?
15:09 murrdoc you can set them up as u like
15:09 ramblinpeck murrdoc: heh, I think part of my confusion is all the options on how to do things :)
15:09 julez joined #salt
15:12 ingslovak joined #salt
15:17 VSpike Right, so you can't have chained "extends" in salt cloud cloud profiles
15:17 VSpike Otherwise horrible errors occur
15:19 ramblinpeck so with using vagrant for the initial creation, I need to associate a given grain/roles with an ec2-instance vagrant creates. So that salt can do its stuff
15:20 andrew_v joined #salt
15:20 ramblinpeck hostnames don't seem to be setable to salt to target, so I guess I need to look at adding specific ec2-user data to each one and target that?
15:21 ramblinpeck or is there a better path than that? lots of posts from 2013/2014 so not sure if things have changed
15:21 TooLmaN joined #salt
15:23 spark_ joined #salt
15:24 napsterX joined #salt
15:27 kusams joined #salt
15:29 tomspur joined #salt
15:35 ingslovak joined #salt
15:35 zmalone joined #salt
15:37 ageorgop joined #salt
15:38 spark_ joined #salt
15:38 quique joined #salt
15:39 quique where do i find the modules supported in orchestrate?  I was looking in salt '*' sys.doc some seem to be supported some not
15:42 bhosmer joined #salt
15:43 lothiraldan joined #salt
15:43 theologian joined #salt
15:44 pguinardco ramblinpeck: you can set it by hostname if you would like in top.sls, it's matching by grain of hostname or fqdn
15:45 pdayton1 joined #salt
15:46 ecdhe whytewolf, is order literally determined by order of declaration attributes in yaml?
15:46 ecdhe with the exception of requisites, of course?
15:46 iggy ecdhe: yes, top-down
15:47 iggy quique: I don't think there's a limited list... the master fires off jobs to the minions, if the minions can't handle it, they complain back to the master
15:49 quique iggy: i get for example: State 'states.mount' was not found in SLS 'orchestration.commonorch'
15:49 quique trying to use states.mount.mounted
15:50 pravka joined #salt
15:50 quique maybe i'm formating it wrong
15:50 whytewolf quique: salt.function works on modules. not states. states go in an sls. and get called by the sls.
15:51 jondonas joined #salt
15:51 whytewolf gist up what you are trying
15:55 kusams joined #salt
15:56 kusams joined #salt
15:57 clintberry joined #salt
15:57 ramblinpeck pguinardco: thats kind of what led to the start of the problem, I wasn't able to have vagrant-aws set the hostname so thats when I started looking at other things to target on
15:58 JDiPierro joined #salt
15:59 ramblinpeck am I just setting myself up for trouble here trying to use vagrant for duplicating the dev/prod environments and I should just use salt-cloud?
16:04 wendall911 joined #salt
16:05 spookah joined #salt
16:05 tzero joined #salt
16:06 tomasq joined #salt
16:06 tomasq in a cmd.wait, can I use watch:, onlyif:, and unless: statements simultaneously? or will the first watch: statement be evaluated and the command run from there?
16:07 sectionme joined #salt
16:08 iggy tomasq: I'm pretty sure the watch will over ride the others
16:08 tomasq thanks, I think so too. my output seems to agree but wasn't 100% clear
16:12 andygabby joined #salt
16:13 quique whytewolf: ok here is the orchestrate sls: https://gist.github.com/baniobloom/5167cddf53d08b5c21b7 here is the common.mount sls: https://gist.github.com/baniobloom/fef8940a04b1d936ca40  Is there a way to pass a variable to the sls file from the orchestrate file?
16:13 permalac joined #salt
16:13 quique i'm trying to pass 'volume'
16:15 darkhuy hey guys is it possible to pass -i switch for salt-ssh via the python client?
16:15 timoguin joined #salt
16:15 kawa2014 joined #salt
16:16 iggy quique: you know gist supports multiple files per paste right?
16:16 pguinardco ramblinpeck: you can have vagrant populate grains as well if you don't want to be tied to aws
16:16 quique iggy: no didn't know that
16:16 quique ahh i see add file
16:17 Edgan joined #salt
16:19 iggy quique: I'd try pillar maybe
16:19 ramblinpeck pguinardco: could you point me to any examples doing that? that is the solution I would love to get to
16:20 iggy murrdoc: https://github.com/saltstack/salt/blob/develop/salt/state.py#L600  <-- state object runs _gather_pillar() on init
16:20 ramblinpeck I don't see us moving away from AWS but having the option to would be really nice
16:21 whytewolf quique: pillar.
16:21 quique iggy, whytewolf: i don't understand how that would solve my problem, i'm doing a loop and need to mount the current volume the loop is dealing with
16:22 quique oh you mean use - pillar?
16:22 pguinardco These can be set in etc/salt/grains: http://docs.saltstack.com/en/latest/topics/targeting/grains.html and you can do it by roles instead of hostname
16:22 iggy there's an example on the main reactor docs that shows passing event data via pillar to a local state run
16:22 whytewolf quique: yes. you can pass pillars through orchenstrate.
16:22 murrdoc iggy:  yup … but if an ext_pillar fails … like it doesnt return data, it just fails
16:23 iggy quique: http://docs.saltstack.com/en/latest/topics/reactor/index.html#passing-event-data-to-minions-or-orchestrate-as-pillar
16:23 Bryson joined #salt
16:24 pguinardco Something like echo "role: database_server" >> /etc/salt/grains should get you what you need out of vagrant.
16:25 ramblinpeck pqguinardco: I think I'm missing something, how would I get vagrant to set that on a given instance
16:26 aparsons joined #salt
16:26 ramblinpeck ah, so like a vagrant ishell, I was thinking as just duplicating a file
16:26 aqua^c joined #salt
16:27 clintber_ joined #salt
16:27 timoguin joined #salt
16:28 pguinardco I'm not terribly familar with vagrant so I may not understand it the whole way but I understand it as you can tell a system to pull in things on the "up", so one script for vagrant on db servers, one for webservers, one for type 3
16:28 spark_ joined #salt
16:32 ramblinpeck pguinardco: thanks, I'll look into that, I wasn't thinking about being able to define grains in the file so I think that should work
16:36 amcorreia_ joined #salt
16:40 KyleG joined #salt
16:40 KyleG joined #salt
16:43 bja joined #salt
16:53 otter768 joined #salt
16:54 iggy anybody know if there's a config setting that will make the minion ignore the cached copy of the master's public key?
16:57 clintberry joined #salt
17:00 theologian joined #salt
17:00 kusams joined #salt
17:01 Steven- joined #salt
17:04 druonysus joined #salt
17:05 druonysuse joined #salt
17:08 impi joined #salt
17:12 raddessi joined #salt
17:14 raddessi hi all, I'm trying to use the module salt.modules.yumpkg via a python script without actually running a salt master, is this possible?
17:14 murrdoc it is possible
17:14 murrdoc but it wont work
17:14 murrdoc thank u salt.loader
17:14 zz_ashmckenzie joined #salt
17:14 raddessi yeah I keep getting errors about no global __salt__ available but it's there...
17:15 viq joined #salt
17:17 joeto joined #salt
17:19 Deevolution joined #salt
17:20 julez joined #salt
17:23 Gareth morning morning
17:23 bhosmer joined #salt
17:23 wendall911 joined #salt
17:29 frank_rizzo joined #salt
17:29 frank_rizzo hi
17:30 frank_rizzo i am trying to run a high state and i keep on getting this error Name: states - Function: no.None - Result: Failed
17:31 pdayton joined #salt
17:35 joeto1 joined #salt
17:36 spark_ joined #salt
17:36 primechuck joined #salt
17:36 Gareth what do your state files look like?
17:44 DammitJim joined #salt
17:47 twork one. damn. character. of whitespace. half an hour of "wtf?" time to go editor shopping. again.
17:48 murrdoc u need vim in your life twerk
17:48 twork 'twork' please. 'twerk' is something very differnt.
17:48 murrdoc oh i know it is
17:48 twork and, yeah, i use vim but apparently i don't have the right mojo applied.
17:48 murrdoc HAHAHA
17:49 ageorgop joined #salt
17:49 twork one. damn. character. (and oh what a character... i was so upset...)
17:49 murrdoc are u using salt-vim and ansible=yaml
17:50 twork never heard of them
17:50 twork i go looking
17:52 soren joined #salt
17:53 geekatcmu "there's a mode for that"
17:54 twork there always is, i know... trouble is, as with everything, "what does this name mean" is so much easier than "what is the name for this meaning"
17:54 icflournoy joined #salt
17:55 donmichelangelo joined #salt
17:59 ekristen joined #salt
17:59 denys joined #salt
18:00 numkem lol
18:00 numkem oups
18:01 numkem my bad
18:02 kusams joined #salt
18:07 gcfhvjbkn joined #salt
18:10 raddessi so, there is not _any_ way to call salt modules in a pythonic way via a standalone python script without using a salt master or some other running daemon?
18:11 iggy salt-call --local does something similar, but it basically spins up an embedded minion to do it
18:12 raddessi is that the same as a salt.client.Caller instance? I can't seem to find a way to use the yumpkg module via that instance I have
18:12 raddessi I'm fine with it spinning up an embedded minion instance, I just don't want to run a full time daemon for a one-off script
18:12 iggy I imagine you have to pass an arg to the init
18:13 iggy but never done it myself, so pure speculation
18:13 joeto joined #salt
18:15 raddessi hmm ok thanks iggy, I'll keep looking
18:15 aqua^c joined #salt
18:21 quique joined #salt
18:29 SEJeff joined #salt
18:29 SEJeff left #salt
18:34 baweaver joined #salt
18:36 bhosmer joined #salt
18:40 tomasq is anyone familiar with passing jinja through the cli? I'm looking to run simple one-line if logic for testing, my example is: http://pastebin.com/mymNcD4g
18:40 ayee I can specify an FQDN by -L 'fqdnhere' cmd.run 'foobar'
18:40 ayee Is there a way to specify an IP?
18:42 tomasq ayee: salt -G 'fqdn_ip4:$ipaddress' cmd.run 'blargh'
18:43 ayee tomasq: Thanks!
18:50 DammitJim joined #salt
18:52 whytewolf tomasq: salt 'minion-name' cmd.run template=jinja " echo {{ salt[cmd.run]('rpm -qa | grep package_name') }}" [the echo is just to make sure the info is correct]
18:54 tomasq whytewolf: no joy, similar errors, blows up on unknown tag salt or variable cmd is undefined
18:54 otter768 joined #salt
18:54 tomasq I'm honestly not sure if this should work or not, considering I'm trying to use salt, to call salt
18:55 whytewolf tomasq: odd cause this worked for me salt '*' cmd.run '{{ salt["cmd.run"]("echo ls -l") }}' template=jinja
18:57 tomasq ah, needed to wrap cmd.run in quotes ;)
18:57 whytewolf if that isn't working for you. you might want to file a bug. I'm working in develop
18:57 tomasq my original example was missing them
18:57 whytewolf ahh didn't even notice that lol
18:58 JoeHazzers how would you iterate over this yaml in a jinja template, such that i can access the names 'thing1','thing2','thing1' and also their contents?
18:58 JoeHazzers https://gist.github.com/JoeHazzers/94e131695a183616aa5c
18:58 tomasq thanks for the help in the right direction heh
18:59 whytewolf tomasq: np
19:03 geekatcmu So, here's a crazy question.
19:05 lala joined #salt
19:07 hybridpollo joined #salt
19:07 raddessi left #salt
19:09 bhosmer joined #salt
19:10 iggy JoeHazzers: {% for key, vals in salt['pillar.get']('something').iteritems() %}
19:10 iggy JoeHazzers: or something similar
19:14 sunkist joined #salt
19:14 ingslovak joined #salt
19:14 kusams joined #salt
19:15 JoeHazzers iggy: well, as i thought... the listobject has no attribute iteritems
19:16 iggy oh right, does it have to be a list?
19:16 JoeHazzers yes, since the names aren't guaranteed to be unique
19:17 JoeHazzers i could always add the "name" key, but that just seems unclean
19:17 clintberry joined #salt
19:18 thusoy joined #salt
19:18 chiui joined #salt
19:20 julienlavergne joined #salt
19:21 ecdhe Is orchestration not available in masterless setups?
19:25 iggy how would that even work?
19:26 pillarpissinmeof joined #salt
19:29 pillarpissinmeof Hey guys, I'm trying to run my highstate and its telling me "Unable to manage file: Jinja variable 'dict object' has no attribute 'sentry'" ...when its obviously in my pillar production>core>init.sls  ...anyone know why this is happening?
19:30 iggy does pillar.items show it?
19:30 pillarpissinmeof that shows nothing
19:30 pillarpissinmeof escort-mcu:     ----------
19:30 whytewolf pillar.items shows nothing then the minion knowns of 0 pillars
19:31 pillarpissinmeof thats what i was thinking but all the other pillar variables have worked except sentry
19:31 JoeHazzers how can they? the minion clearly doesn't know of any pillars if it "shows nothing"
19:32 cberndt joined #salt
19:32 ecdhe iggy, how would orchestration work on a single node?  Well, there are some commands that I don't want to run except when the node is first provisioned.
19:32 ecdhe I was going to use salt-run orchestration.install_my_stuff but salt-run isn't on the minion...
19:33 iggy just use a state
19:33 whytewolf ecdhe: orchenstration is a runner. runners need master. if you need to have an order on a single system just use state.sls to run your steps
19:33 iggy orchestrate is for running things across multiple minions
19:33 tmilam joined #salt
19:34 ecdhe Including a state from the top file means that the state is run over and over as I run highstates later on; I just wanted to explicitly declare that certain states/functions are only to be run once, when the node is provisioned.
19:35 whytewolf ecdhe: not in the top file. just run the state directly
19:35 ecdhe salt-call --local state.install_my_stuff?
19:35 whytewolf ecdhe: salt-call state.sls state
19:35 JoeHazzers ecdhe: there's no requirement to put it in the top file if you just want to run the state ad-hoc
19:36 whytewolf ecdhe: http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.state.html#salt.modules.state.sls
19:37 kusams joined #salt
19:37 ecdhe JoeHazzers, understood, in fact, I do that all the time... But I've only ever caused states to be enforced by putting them in 'top.sls' and enforcing highstate.
19:37 pillarpissinmeof how can i get pillar to show its items..or why doesn't it
19:38 pillarpissinmeof im using a salt deployment that works on recent machine
19:38 whytewolf pillarpissinmeof: salt 'minion' pillar.items http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.pillar.html#salt.modules.pillar.items
19:38 bhosmer joined #salt
19:38 whytewolf pillarpissinmeof: as for why we need to know more about your pillar setup. where is the top file for your pillar
19:39 pillarpissinmeof production>core>init.sls     the top file in salt is just in salt> top.sls
19:39 whytewolf pillarpissinmeof: pillar has a seperate top file
19:39 pillarpissinmeof oh i see pillar has one too
19:40 pillarpissinmeof production>top
19:40 * ecdhe has always wondered why it was called 'highstate'.  Is it because the master is "higher" than the minion?
19:40 whytewolf is production>top listed as the pillar root?
19:40 pillarpissinmeof in the master file yes i changed that
19:41 whytewolf did you restart the master after making that change to the config?
19:41 pillarpissinmeof mmm..i dont think so
19:43 danlsgiga joined #salt
19:43 whytewolf ecdhe: to seperate it from the lowstate
19:43 pillarpissinmeof hahaha thanks guys :D
19:43 ecdhe whytewolf, what's the difference?  What is lowstate?
19:43 whytewolf pillarpissinmeof: no problem. sometimes it is just the simple things
19:44 whytewolf ecdhe: http://docs.saltstack.com/en/latest/ref/states/layers.html
19:44 danlsgiga Hi all... Is there any way to merge the pillar by os_family AND osmajorrelease?
19:45 ecdhe Thanks whytewolf!  I like how that page mentions that you can, like I have been doing, use salt without understanding the layers.
19:45 danlsgiga *by those grains?
19:45 clintber_ joined #salt
19:46 whytewolf ecdhe: hehe yeap. honestly I never got in depth to the layers. but always knew that page existed
19:46 danlsgiga I have some specific configurations to be made to sshd config that depends on the os_family AND the osmajorrelease
19:46 ajw0100 joined #salt
19:46 spark_ joined #salt
19:46 whytewolf danlsgiga: merge or target based on?
19:46 danlsgiga merge using the map.jinja
19:47 ekristen anyone using boto_route53? it seems that add new entries while successful, the verification status always times out?
19:47 whytewolf ahh. most likely a funky use of salt.merge. but i am sure it is possable.
19:47 danlsgiga whytewolf: I'm already merging my defaults.yaml to the grains os_family... I need to have some specific configurations based on the osmajorrelease as well
19:48 danlsgiga whytewolf: Or there's another more elegant way of acomplishing this?
19:48 whytewolf danlsgiga: have a second merge that merges the result of the first merge with the changes you want for osmagorrelease?
19:49 baweaver joined #salt
19:50 danlsgiga whytewolf: Ah... so I set a variable os_majorrelease_map = ... grains.filter_by using the osmajorrelease and then after I update the os_family_map with a merge...
19:50 danlsgiga whytewolf: Ok... that should work! =) Lemme try
19:51 whytewolf honestly i have no idea. I don't work with map.jinja often since i only work with one os for my own stuff. and i don't work on formulas
19:53 danlsgiga whytewolf: No formulas? How come?
19:53 whytewolf for all i know. merge can take a comma delimided list of dicts. and merge them all
19:54 whytewolf danlsgiga: cause I currently am working on building an orchenstration for my personal openstack cloud. and none of the formulas out there fit my needs
19:54 danlsgiga whytewolf: ah ok! makes sense
19:55 danlsgiga sdsd
19:55 danlsgiga oops
19:55 danlsgiga sorry
19:55 kusams joined #salt
19:55 furrowedbrow joined #salt
19:55 s_kunk joined #salt
19:56 dopesong joined #salt
19:56 whytewolf I really need to get better at python :/ nuetron.create_subnet isn't going to fix it's self.
19:58 Ztyx joined #salt
19:59 iggy danlsgiga: I think the postgres and mongo formulas do multiple levels of merging
19:59 iggy (as something to look at for an example)
20:03 Vynce joined #salt
20:03 danlsgiga iggy: Thanks... will take a look now!
20:03 Vynce joined #salt
20:05 hybridpollo joined #salt
20:11 chiui joined #salt
20:13 sunkist joined #salt
20:15 julienlavergne joined #salt
20:18 Ztyx joined #salt
20:24 ipmb joined #salt
20:28 Ztyx joined #salt
20:30 iggy salt-api takes an unusually high amount of cpu
20:30 iggy murrdoc: do you guys use salt-api?
20:30 murrdoc sometimes
20:30 murrdoc its on todo list
20:31 iggy sometimes as in "you have multiple masters and some of them run it or as in you start the service and stop it when you don't need it?
20:31 murrdoc start/stop
20:31 X67r joined #salt
20:32 murrdoc i have only prototyped it
20:32 iggy is it running on that master that can't handle highstating 300 minions?
20:33 JoeHazzers how can i configure a minion to not allow any remote execution from the master? i recall doing this before but i can't remember the setting.
20:33 murrdoc no
20:33 murrdoc its not
20:34 murrdoc saltmaster001:~# status salt-api
20:34 murrdoc status: Unknown job: salt-api
20:34 murrdoc its not running
20:35 iggy I don't know what it's doing, but it was causing about 5x as much load as normal in our dev env
20:35 iggy shut it down and everything is back to normal
20:35 iggy guess it's time to file more bugs
20:36 murrdoc i am on 2014.7
20:36 iggy eww
20:36 murrdoc no eww
20:36 murrdoc its yay
20:36 iggy you misspelled unsupported
20:36 Vynce joined #salt
20:37 murrdoc i started in 2014.1
20:37 murrdoc got to 2014.7.2
20:37 murrdoc then to .6 a
20:37 Vynce left #salt
20:37 murrdoc and stopped cos based pi couldnt figure out if 2015.2 would be a thing or not
20:38 primechuck joined #salt
20:39 Ztyx joined #salt
20:46 iggy slow news day
20:52 Ahlee tell me more about this unsupported. ;)
20:54 murrdoc 2014.7 is more unsupported then 0.17
20:55 otter768 joined #salt
20:55 Ahlee sure, but do you have dozens of backports cherry picked into your 2014 ;)
20:56 murrdoc Ahlee:  https://www.youtube.com/watch?v=dVSjCvGFMnM
20:57 Ahlee you gonna prebail on my next meetup too?
20:57 Ahlee 'oh, i was in cali, i couldn't make it'
20:57 Ahlee s/my/our/
20:57 Bart_ joined #salt
20:57 murrdoc having a kid on the 31st
20:57 Ahlee oh snap
20:57 Ahlee congrats
20:57 murrdoc if wifey lets me get out on the 4th
20:58 murrdoc i ll be there
20:58 murrdoc thanks man
20:58 Ahlee i suppose you get  apass
20:58 Ahlee crazy breeders
20:58 iggy it's always something with you
20:58 Gareth murrdoc: https://www.youtube.com/watch?v=l4UFQWKjy_I
20:58 Bart_ Hi guys, I have a quick question regarding creating a simple custom Salt Modules
20:58 julez joined #salt
20:59 twork glory be: the salt, it did a thing! an actual, not cribbed from the docs thing!
20:59 * twork does a little dance
20:59 murrdoc Ahlee:  first one
20:59 Bart_ Anyone with good Salt Kung-Fu ?
20:59 murrdoc Gareth:  hahah
20:59 giantlock joined #salt
20:59 Ahlee Bart_: fire away, we'll steer you how we can
20:59 iggy Bart_: ask away, and paste whatever you can
21:00 Bart_ Great
21:00 murrdoc except in the chat
21:00 murrdoc and only use gist for paste
21:00 JoeHazzers >call it a p3 or medium if you like but from my pov raet is completely busted right now
21:00 JoeHazzers i laughed.
21:00 Bart_ import sys import salt   def hello( MESG = sys.argv[1] ):     return MESG
21:00 murrdoc Gareth:  i will be upgrading next week
21:00 murrdoc to 2015.5 ?
21:00 murrdoc whatever the n-1 version is
21:00 Bart_ Simple Module to pass a sysarg
21:01 JoeHazzers is RAET really busted with ioflo >=1.2.0?
21:01 Bart_ weird thing is, it works on the minion if I do a salt-call testing.hello "test"
21:01 Bart_ on the master I get a 'testing' __virtual__ returned False
21:02 iggy Bart_: there's no sys.argv when the daemon is started via init script
21:03 iggy so sys.argv[1] would cause an IndexError
21:03 Bart_ How do I pass "Arguments" to a salt module then ?
21:03 Bart_ Simple Hello World would help me
21:03 Ahlee def hello(val1, val2):
21:04 Ahlee Bart_: https://docs.saltstack.com/en/develop/ref/modules/index.html#documentation
21:04 Bart_ I looked at that doc
21:04 Ahlee see how spam takes eggs as a variable, then returns eggs. so if you ran salt '*' test.spam foo
21:04 Bart_ if I do a hello(var1)
21:04 Ahlee you'd get foo back
21:05 X67r joined #salt
21:05 iggy this is why you actually paste code to gist instead of trying to one-line it in chat
21:05 Bart_ Ok for a definded variable
21:05 Bart_ but what if I want to pass a variable that changes everytime
21:05 Bart_ message of the day for example
21:05 zooz joined #salt
21:06 Ahlee def hello(my_variable_that_changes):
21:06 quique how do i get the salt contrib grains to download before the first salt run?
21:06 Ahlee Bart_: You pass in whatever changes
21:06 Ahlee so, def hi(variable_name): return "I did something"
21:07 iggy quique: saltutil.sync_all
21:07 raddessi joined #salt
21:07 Ahlee foo.hi $(cat /etc/motd)
21:07 Ahlee or whatever you're trying to do
21:07 Bart_ Trying to have a message popup, so the actual Arg is a sentence
21:07 Bart_ print "bla blablablabalabl"
21:07 Bart_ for example
21:08 Ahlee and bla blablahbla is what you pass to it?
21:08 Bart_ yes
21:08 Ahlee perfect
21:08 quique iggy: thanks
21:08 Bart_ testing.popup "message of the day"
21:08 Bart_ would be the command for example
21:08 Ahlee def popup(var): return var
21:08 Ahlee then testing.popup "message of the day"
21:08 Ahlee will return you "message of the day"
21:08 iggy quique: there's an example in the reactor docs how to get that to happen when a minion first comes online
21:08 go joined #salt
21:09 raddessi is there any way to get a verbose output of what went wrong when a call like caller.sminion.functions['blah.foo']() returns False?
21:09 murrdoc no the example for EVERY minion start tag
21:09 Bart_ I'm passing the argument in the modules, I should manage to make it work
21:09 murrdoc not just the first one
21:09 quique iggy: that would be cool, but also is there anyway to get the grains to be sent with that first start event?
21:10 Bart_ so   def test(arg1)   will not expect me to have "arg1"  as the input command or argument, it could be anything
21:10 quique iggy: basically with_grains=True
21:10 quique on start?
21:10 iggy I'm not really sure what you're asking, if you do that sync_all before you do anything else, you'll be fine
21:10 Ahlee Bart_: indeed, the lovely world of dynamically typed languages
21:11 Bart_ Thanks Ahlee, I'll give it a shot, Baby Stepping in Python
21:11 Ahlee everybody starts somewhere :)
21:12 SheetiS What I do for things in the reactor that I only want to run on the first start is I have a grain that is set on the machine if that first-start state has been run.  Then I do a compound match on the reaction "{{ data['id'] and not G@bootstrap:completed }}" or the like.
21:12 quique iggy: when you do an salt-call event.send 'tag' with_grains=True it sends the grains, does the tag salt/minion/*/start send the grains in data?
21:12 JoeHazzers how on earth did this not land in 2015.5.3? https://github.com/saltstack/salt/pull/24187
21:13 SheetiS That way even though the reactor triggers on every start, it only runs whatever needs run the first time.
21:13 iggy quique: I wouldn't count on it
21:14 Ahlee SheetiS: nice
21:16 ramblinpeck hi all, I'm having trouble getting grain matching for my top.sls file. My /etc/salt/grains and top.sls https://gist.github.com/peck/87768a039cac4d3e9c08, am I doing something obviously wrong?
21:18 JoeHazzers ramblinpeck: yaml relies on indentation. always use spaces. your `- apiserver` line on the minion should be indented, and your `- elixir` line on the master should be indented to match the previous line
21:19 snave joined #salt
21:20 zz_cro joined #salt
21:20 ramblinpeck JoeHazzers: hmm, just bad formatting on my paste for the top.sls, but the other does look off. Its being generated by salty-vagrant-grains plugin, let me see if I can make it work adding some spaces
21:20 JoeHazzers ramblinpeck: it should look like this: https://gist.github.com/JoeHazzers/e5d506be782ec65603cb
21:21 raddessi left #salt
21:22 desposo1 joined #salt
21:28 [dee] left #salt
21:28 zsoftich1 joined #salt
21:28 ramblinpeck JoeHazzers: thanks, looks like this helpful plugin wasn't very helpful afterall
21:28 spookah joined #salt
21:30 Ztyx joined #salt
21:31 pdayton1 joined #salt
21:33 h220hawk joined #salt
21:37 Zachary_DuBois joined #salt
21:38 clintberry joined #salt
21:40 baweaver joined #salt
21:46 KyleG joined #salt
21:46 KyleG joined #salt
21:48 cberndt joined #salt
21:48 ekristen joined #salt
21:49 JoeHazzers really, am i just delusional in thinking that there was some way of preventing remote execution on a minion?
21:50 gfa joined #salt
21:52 aqua^c joined #salt
21:59 spark_ joined #salt
22:00 Bart_ Ahlee:  I got it working thanks to you
22:00 yomilk joined #salt
22:05 Zachary_DuBois joined #salt
22:08 johnkeates joined #salt
22:10 ajw0100 joined #salt
22:11 clintber_ joined #salt
22:14 sunkist joined #salt
22:17 johnkeates joined #salt
22:18 Ztyx joined #salt
22:20 jasonrm joined #salt
22:23 timoguin joined #salt
22:40 voxxit joined #salt
22:45 danlsgiga whytewolf: Got it working... the merging by multiple grains... pretty neat
22:47 julez joined #salt
22:47 danlsgiga whytewolf: For reference... http://pastebin.com/5B3HKZzm
22:48 perfectsine joined #salt
22:50 druonysus joined #salt
22:50 danlsgiga whould be great to have it in the docs... http://pastebin.com/5B3HKZzm
22:51 frosty996 joined #salt
22:52 frosty996 Is there a way to configure saltstack’s openstack driver to force using endpoint_type of internalURL? It seems to always use the PublicURL and I can’t talk to that from my master
22:54 frosty996 looks like maybe I need to use bypass_url
22:55 h220hawk I'm looking for some guidance on configuring multiple IP's on a single interface. Over time the IPs will change (number, count, etc). Currently we use a file in /etc/sysconfig/network-scripts/ifcfg-eth0 in the format: "IPADDR1=a.b.c.d NETMASK1=255.255.255.255 IPADDR2=l.m.n.o NETMASK2=255.255.255.255
22:55 h220hawk This gives us the IPs as though you used `ip addr add`
22:56 otter768 joined #salt
22:56 al joined #salt
22:56 h220hawk So far what I'm coming up with on google looks like interface aliases (eth0:1, eth0:2, etc), or I'm stuck restarting network service by watching the ifcfg-eth0 file
22:56 h220hawk What is "best practice" here?
22:57 snuffychi joined #salt
22:58 h220hawk To replicate exactly what we have today I've made a jinja template and populated pillar with the data I need, it works, but it's... disruptive to say the least if all my servers with this style config change at once
22:58 theologian joined #salt
23:02 Aidin joined #salt
23:05 asoc joined #salt
23:06 frosty996 oh bypass_url I guess is what i need
23:06 frosty996 would be nice if I could just specify: enpoint_type: internalURL in the provider config
23:06 manfred frosty996: you should be able to do that
23:06 manfred someone opened a bug about it and I added the ability
23:08 asoc Would the mine be the best thing to use to locate a certain servers hostname that is running a specific service so I can dynamically specify them in my states?
23:09 baweaver joined #salt
23:10 Singularo joined #salt
23:10 manfred frosty996: https://github.com/saltstack/salt/pull/12643
23:10 asoc just put something in there to distunguish it and then search on that data to find the server I am looking for?
23:11 frosty996 manfred: I was able to get going with base_url
23:11 manfred kk
23:11 frosty996 but it would be nice to just specify the endpoint_type so it could pull the info out of the api itself
23:11 manfred cool
23:11 frosty996 I had to go look it up
23:11 manfred you can
23:12 manfred well, i don't know if you can in the openstack one
23:12 manfred but you can in nova
23:12 frosty996 manfred: I tried specifying endpoint_type but it seemed to ignore it
23:12 manfred frosty996: http://docs.saltstack.com/en/latest/topics/cloud/openstack.html
23:12 frosty996 is nova considerd stable?
23:12 manfred in the config, you specify compute_name
23:12 manfred we are deprecating the openstack one
23:12 jondonas joined #salt
23:13 frosty996 oh that’s good to know. Let me try the nova driver then.
23:14 manfred fair warning, there is a regression in develop
23:14 manfred but 2015.5 is good
23:15 frosty996 it says nova.get_configured_provider() could not be found.
23:15 frosty996 is that the regression?
23:15 manfred no
23:15 manfred install python-novaclient
23:16 frosty996 it’s installed
23:16 frosty996 python-novaclient (2.26.0)
23:17 manfred the only regression is in that ssh_interface can only do public_ips in develop
23:17 frosty996 ouch
23:17 manfred how did you install novaclient?
23:17 manfred and how did you install python
23:17 frosty996 pip
23:18 manfred err salt*
23:18 frosty996 it’s in a virtualenv
23:18 manfred and salt is in that venv?
23:18 frosty996 that’s correct
23:18 manfred do a salt-cloud -l debug
23:18 manfred and see if it gives you a stack trace
23:19 eXistenZNL joined #salt
23:19 frosty996 it just gives me a warning that novalicent.v1_1 is deprecated
23:19 quasiben joined #salt
23:20 manfred that is fine, it recursively loads the correct thing
23:20 frosty996 https://gist.github.com/jfrost/140514cb6d962b5cbb40
23:21 manfred that is fine
23:21 frosty996 anything suspect there?
23:22 frosty996 oh wait, this one still says provider: openstack in the doc link you sent me
23:22 spark_ joined #salt
23:22 manfred yes
23:22 manfred that is 15.2
23:23 manfred 2015.2
23:23 manfred we haven't updated the docs yet
23:23 frosty996 I have a working config for provider: openstakc, I just have to force the base_url to be an internal one
23:23 manfred https://github.com/saltstack/salt/pull/24728
23:23 manfred https://github.com/saltstack/salt/pull/24686
23:23 frosty996 but if I specify provider: nova then I get that error
23:25 manfred i did a clean install of only salt and python-novaclient, and it loads it correctly
23:26 frosty996 ah, I was being silly and running the salt-cloud in /usr/bin explicitly
23:26 frosty996 so, it gives me the same error as the openstack provider which is that it can’t find anything. presumably because it’s talking to the publicurl
23:27 manfred probably
23:27 frosty996 so, can I ask it to only use internalurl?
23:27 manfred it uses novaclient directly
23:27 manfred so whatever novaclient does
23:28 manfred you should be able to pass bypass_url to nova though
23:28 manfred because it just does a check on the possible values to novaclient
23:28 manfred and passes them as kwargs
23:28 frosty996 so then will it respect the environment variables?
23:28 manfred frosty996: https://github.com/saltstack/salt/blob/develop/salt/utils/openstack/nova.py#L94
23:28 manfred it doesn't use the novaclient.shell
23:28 manfred so no
23:29 frosty996 basically, I want to pass this: OS_ENDPOINT_TYPE=internalURL
23:29 manfred the stuff I had to do to get plugins to work. https://github.com/saltstack/salt/blob/develop/salt/utils/openstack/nova.py#L150
23:29 manfred you cannot do that
23:30 frosty996 https://github.com/saltstack/salt/blob/develop/salt/utils/openstack/nova.py#L190
23:30 manfred frosty996: https://github.com/saltstack/salt/issues/10149
23:30 manfred ahh, yup would need a patch to that to allow internalURL
23:31 frosty996 so, you were just teasing me when you said the nova driver could do it. :-)
23:31 manfred i thought it could do it
23:31 manfred because of how it allows you to pass the extra args of anything for novaclient
23:32 frosty996 it was driving me crazy, because nova and neutron cli worked fine, but then salt-cloud would just die with a weird error
23:32 frosty996 tcpdump to the rescue
23:32 manfred openstack wrote the clients awfully
23:32 manfred they built them as command line first, and then built a library behind the cli
23:32 manfred if you check the novaclient binary, it calls novaclient.shell
23:33 manfred which reads your environment stuff
23:33 frosty996 oh I know. I’m ok without the env variable, I just wish I could pass the info somehow
23:33 frosty996 but bypass_url will get me where I need to go
23:33 frosty996 this all worked fine on my old havanna release because publicURL was the same as internalURL
23:33 ingslovak joined #salt
23:33 frosty996 but now they aren’t and the API happily ignores me on the publicURL
23:33 frosty996 :-/
23:34 whytewolf manfred: any reason the move away from libcloud to the openstack clients?
23:34 manfred because libcloud is awful
23:34 manfred it doesn't have everything exposed
23:34 whytewolf ahhh
23:34 manfred like, it doesn't expose the serviceCatalog at all
23:34 manfred so we can't lsit providers in openstack
23:37 whytewolf ahh i total missed that openstack them selves switched from recomending libcloud to "python sdk" which is just the clients anyway
23:38 manfred yeah
23:38 manfred and they are moving away from pyrax as well
23:38 petong left #salt
23:38 manfred and are rewriting it as python-openstackclient
23:39 whytewolf yeah i cought the python-openstackclient. that actually seems to function a lot more easily then the old client style. [at least from the command line. havn't played with the API]
23:39 manfred yes
23:39 manfred the api has to be better, cause the classes in the clients are awful
23:40 manfred https://github.com/saltstack/salt/blob/develop/salt/utils/openstack/nova.py#L150-154
23:40 manfred https://github.com/saltstack/salt/blob/develop/salt/utils/openstack/nova.py#L160-165
23:40 manfred look at that black magic I had to do to get extensions to work in the nova driver
23:41 frosty996 interestingly, I couldn’t destroy an instance with the nova provider, but I can with the openstack one
23:41 aqua^c joined #salt
23:42 whytewolf yikes. that is some dark magic.
23:43 whytewolf how is that going to work when auth v3?
23:43 manfred hopefully we can just strip it out.
23:43 pdayton joined #salt
23:45 whytewolf I hope so.
23:48 murrdoc joined #salt
23:50 subsignal joined #salt
23:50 aqua^c joined #salt
23:52 pdayton joined #salt
23:55 frosty996 left #salt
23:56 amcorreia joined #salt
23:58 mosen joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary