Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2015-08-19

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 geekatcmu Think of it from a networking PoV: if the master has to connect to the minions,
00:01 geekatcmu a) it has to know about them first
00:01 geekatcmu b) firewall rules must allow the master *entry* into every minion's subnet
00:02 geekatcmu WIth the minions doing the connecting, the master doesn't have to do any discovery, and only one place needs special incoming firewall rules.
00:02 geekatcmu Puppet and cfengine work the same way.
00:02 mosen and it probably makes more sense for the messaging queue to be on the master
00:03 mosen ahh i guess you could connect to minions then send a message locally
00:03 geekatcmu yes.
00:03 geekatcmu That would be the way ansible is commonly used.
00:04 iggy afaik, it doesn't have a persistent connection though
00:04 geekatcmu ansible?  No.
00:04 mosen I guess salt-ssh does that?
00:04 geekatcmu cfengine and Puppet don't generally do persistent connections, either.
00:05 geekatcmu the persistent connection is what makes orchestration work.
00:05 iggy and reactor
00:05 geekatcmu that, too
00:05 iggy well, I suppose you could do it without, but it would probably suck real bad
00:05 geekatcmu probably
00:06 geekatcmu I need to learn about reactor stuff
00:10 whytewolf humm. I never looked. is there a way to build events that are not default?
00:15 dthom91 joined #salt
00:20 ashmckenzie joined #salt
00:25 jagguli thanks guys, opening ports on each minion would increase the management complexity and surface area i guess ?
00:25 robawt jagguli: not if you limit allowed hosts to connect to those ports
00:26 jagguli point
00:27 iggy whytewolf: yes indeed
00:27 hasues joined #salt
00:27 hasues left #salt
00:27 whytewolf nice,, will have to look into that someday when i find i need to. lol
00:28 iggy jagguli: robawt: think of minions that are behind multiple firewalls/NATed at locations remote to the master
00:28 baweaver joined #salt
00:28 pravka joined #salt
00:28 robawt iggy: you say that and i think of syndics :)
00:28 iggy in the case of NAT, you'd not only have to allow the firewall traffic, you'd also have to do some pretty extensive port mapping (or VPNs or....)
00:29 jagguli syndics also connect to the master-master
00:29 iggy syndics are worse than environments
00:32 yomilk joined #salt
00:36 bfoxwell joined #salt
00:39 zsoftich2 joined #salt
00:40 KyleG Seems this "global name salt not defined" is in a ton of issues
00:40 KyleG I first ran into it just now trying to do a basic pip.installed
00:40 KyleG but noticed even a simple saltutil.sync_all produces the error: https://gist.github.com/kylegato/60c19aa30293eb4ce187
00:40 KyleG That can't be normal right?
00:41 KyleG https://github.com/saltstack/salt/issues/24273
00:41 saltstackbot [#24273]title: "Global name '__salt__' is not defined" in file.managed state on FreeBSD | Hi,...
00:42 KyleG I am also FreeBSD so…maybe related
00:42 otter768 joined #salt
00:53 bones050 joined #salt
00:59 dthom91 joined #salt
01:06 notnotpeter joined #salt
01:06 shaggy_surfer joined #salt
01:13 ITChap joined #salt
01:14 troyready joined #salt
01:15 pfallenop joined #salt
01:15 pfallenop joined #salt
01:18 DammitJim joined #salt
01:21 fersur3 joined #salt
01:21 fersur3 I have a JSON file I want to write a Jinja template for.   How can I escape the JSON file's { and } characters?
01:22 dthom91 joined #salt
01:24 cppking joined #salt
01:24 stevednd joined #salt
01:24 pm90_ joined #salt
01:25 ITChap fersur3: http://docs.saltstack.com/en/latest/ref/renderers/all/salt.renderers.jinja.html
01:25 ITChap sorry http://docs.saltstack.com/en/latest/ref/renderers/all/salt.renderers.jinja.html#salt.utils.jinja.SerializerExtension
01:25 ITChap you can use |json
01:26 ITChap to generate json from your datastructure
01:31 subsignal joined #salt
01:34 fersur3 ITChap, found the serializer while browsing the first link -- can you provide an example?    Like just    host: hostname.example.com   ?
01:35 iggy it might be easier to do a pyrenderer file depending on how you're generating the data
01:35 fersur3 Yeah I'm noob to this I just need an example so I can get on my feet and get started
01:35 fersur3 I can   {{ pillar['hostname'] }}   I got that down I just want to populate a JSON file
01:36 mapu joined #salt
01:40 breakingmatter joined #salt
01:45 ITChap looks like there is a short example in the doc
01:45 edrocks joined #salt
01:45 ITChap you could use the load_yaml tag to write your whole file in yaml
01:47 ilbot3 joined #salt
01:47 Topic for #salt is now Welcome to #salt | 2015.5.3 is the latest | Please use https://gist.github.com for code, don't paste directly into the channel | Please be patient when asking questions as we are volunteers and may not have immediate answers | Channel logs are available at http://irclog.perlgeek.de/salt/
01:49 XenophonF can anyone point me to an example of a reactor formula written in python, as opposed to yaml+jinja?
01:49 ITChap fersur3: I guess something like this should work https://bpaste.net/show/1a4d0eb04688 but don't take my word for it give it a try
01:50 hasues joined #salt
01:50 hasues left #salt
01:52 fersur3 ITChap, under file.managed what do I put in template:  ?
01:52 iggy if you use that paste, jinja
01:53 iggy XenophonF: it's on my todo list (want to do an entire salt tree in #!py
01:53 XenophonF iggy: states, pillars, everything?
01:54 XenophonF neat
01:54 fersur3 iggy, I think I'm close https://bpaste.net/show/bf47c897e651
01:54 iggy XenophonF: that's the plan... we'll see if I get the time
01:55 ITChap1 joined #salt
01:56 ITChap1 joined #salt
01:57 iggy fersur3: https://bpaste.net/show/8ce0a5b51231
01:58 fersur3 iggy, What's with the dashes?
01:58 ITChap1 joined #salt
01:59 iggy gets rid of the extra whitespace (theoretically)
02:02 dthom91 joined #salt
02:02 zsoftich2 joined #salt
02:03 fersur3 Now all working great thank you for the help iggy I now have traction
02:11 birdzhang joined #salt
02:12 wendall911 joined #salt
02:19 XenophonF iggy, in your github webhook reactor, do you check the digest of the payload using the hook' secret (https://developer.github.com/v3/repos/hooks/#create-a-hook)?
02:20 XenophonF i'm not sure the event system is going to give me the raw url-encoded form data
02:24 ITChap joined #salt
02:27 ITChap joined #salt
02:32 DammitJim joined #salt
02:37 jagguli what happened to ps.pgrep in latest doco ??? http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.ps.html
02:38 jagguli is that page empty or is it just me ?
02:39 whytewolf not just you. looks like something happened to the doc. file a bug report [cause the devel version is also blank]
02:41 dthom91 joined #salt
02:41 quasiben joined #salt
02:43 evle joined #salt
02:46 pfallenop joined #salt
02:50 iggy XenophonF: it checks something, I'm not at the office right now, but I'll try to remember to look tomorrow... we also only allow GitHub's IPs in through the firewall
02:50 iggy jagguli: it happens from time to time... check for an issue or file a new one
02:51 XenophonF iggy: i think i've got it - it looks like the raw body's passed through the even system to the reactor formula
02:51 XenophonF at least, i think so based on my reading of the netapi code
02:52 XenophonF as long as i have that, i will be able to use the hook secret to check github's signature
02:58 jeadr joined #salt
02:59 pfallenop joined #salt
03:02 VR-Jack3 joined #salt
03:06 malinoff joined #salt
03:08 boargod2 joined #salt
03:08 jeddi joined #salt
03:18 MTecknology joined #salt
03:18 MTecknology joined #salt
03:18 Ryan_Lane joined #salt
03:20 rome_390 joined #salt
03:21 andreluiz joined #salt
03:24 ageorgop joined #salt
03:24 favadi joined #salt
03:25 calebj joined #salt
03:26 llua http://docs.saltstack.com/en/latest/ref/configuration/master.html#interface is it possible to bind to multiple addresses? when i used a sequence, the master errors with: TypeError: getaddrinfo() argument 1 must be string or None
03:29 iggy joined #salt
03:29 gadams joined #salt
03:29 fish_ joined #salt
03:29 breakingmatter joined #salt
03:30 rome_390 joined #salt
03:33 writtenoff joined #salt
03:37 pfallenop joined #salt
03:38 Furao_ joined #salt
03:38 dthom91 joined #salt
03:43 mosen joined #salt
03:44 ITChap Hi Guys
03:45 ITChap I was thinking about using something like smartstack for communication between services
03:45 ITChap But it looks like HAProxy + Salt could already do the job
03:46 ITChap does some of you use this kind of setup
03:46 ITChap ?
03:46 clintberry joined #salt
03:47 iggy ITChap: checked haproxy-formula? (and possibly forks of it)
03:49 ITChap iggy: yeah but I mean does it make sense to have service discovery solution
03:49 ITChap when you already have configuration management
03:52 gustavobgama joined #salt
03:53 gustavobgama hi guys !! Please I need some help with file.replace state
03:54 gustavobgama I need to manage a hbs template that has the same "open/close tag" of jinja "{{" and "}}"
03:55 iggy ITChap: it depends on your requirements
03:55 gustavobgama the pattern is {{!navigation}} and replacement is {{navigation}}
03:55 iggy ITChap: some people get by using the mine (we do), some require something more like etcd, etc
03:55 gustavobgama i can find the pattern with
03:56 gustavobgama - pattern: \{\{!navigation\}\}
03:56 ITChap iggy: mine seems to be good enough for me and HAProxy can already do some basic healthcheck
03:56 iggy gustavobgama: {{ '{{' }}!navigation{{ '}}' }}
03:56 jeadr joined #salt
03:57 gustavobgama hi iggy, let me try
03:58 gustavobgama iggy, the pattern is ok, my issue is the replace (repl)
03:58 gustavobgama i try and salt write this to file
03:59 gustavobgama OrderedDict([(OrderedDict([('navigation', None)]), None)])
03:59 iggy same pattern
03:59 iggy jinja is replacing the {{ navigtion }} with None
04:00 gustavobgama humm
04:00 gustavobgama i try all kind of stuff to tell salt that i do not want a jinja variable but unsucessful
04:01 gustavobgama try things like that: http://jinja.pocoo.org/docs/dev/templates/#escaping
04:01 iggy you can change the renderer for the whole file (make it just yaml)
04:01 gustavobgama do you know how ?
04:02 iggy that's where I got the {{ '{{' }} from
04:03 iggy did you actually try it?
04:03 CeBe joined #salt
04:03 gustavobgama yep, tried too {% raw %}
04:04 gustavobgama in all cases the file ends up with OrderedDict([(OrderedDict([('navigation', None)]), None)])
04:05 iggy what's the actual state look like? (gist it)
04:06 gustavobgama one minute
04:06 jeadr joined #salt
04:07 gustavobgama https://gist.github.com/gustavobgama/03c28d79a335524deabd
04:13 gustavobgama iggy your suggestion works
04:13 gustavobgama changing the file to yaml renderer
04:16 gustavobgama it is not the perfect scenario because in this file i need a jinja renderer to get a grain data, but it is a good start
04:16 pfallenop joined #salt
04:20 otter768 joined #salt
04:21 vlcn joined #salt
04:22 Zachary_DuBois joined #salt
04:23 ramteid joined #salt
04:29 malinoff joined #salt
04:32 subsignal joined #salt
04:32 dalom left #salt
04:33 jeadr joined #salt
04:44 Aidin joined #salt
04:44 rdas joined #salt
04:46 Furao joined #salt
04:55 Zachary_DuBois joined #salt
05:05 gustavobgama left #salt
05:07 catpigger joined #salt
05:08 Fiber^ joined #salt
05:18 breakingmatter joined #salt
05:22 Sen_ joined #salt
05:23 Sen_ Hey I am trying to implement gitfs
05:23 Sen_ installed yum install python-pygit2
05:23 Sen_ Followed HTTPS section mentioned in the doc http://docs.saltstack.com/en/latest/topics/tutorials/gitfs.html#gitfs-ssh-fingerprint
05:24 Sen_ Restarted Master
05:24 Sen_ For testing I have commited one file to git repo
05:24 Sen_ But its not getting syced with the master
05:24 Sen_ master log not showing any error
05:25 Sen_ By default, Salt updates the remote fileserver backends every 60 seconds
05:25 Sen_ This is not happening
05:25 Sen_ Please help me to trouble shoot
05:25 JPaul joined #salt
05:26 calvinh joined #salt
05:26 iggy sudo salt-run -l debug fileserver.update
05:31 katyucha joined #salt
05:35 subsignal joined #salt
05:52 Ztyx joined #salt
06:02 Ztyx joined #salt
06:04 colttt joined #salt
06:06 Ztyx1 joined #salt
06:14 jakubm joined #salt
06:15 Sen_ iggy: https://gist.github.com/seenae/beb8cb053cb11bf34d3b
06:15 Sen_ this is the ouptut
06:20 AndreasLutro joined #salt
06:21 whytewolf Sen_: that output looks like it said everything worked. how are you sure it isn't working?
06:22 Ztyx joined #salt
06:22 Sen_ whytewolf: I have uploaded a file to github repo to location  srv/salt/files
06:23 jeadr joined #salt
06:23 Sen_ But this file is not getting downloaded in the master
06:23 whytewolf gitfs is a virtual filesystem. it doens't download to the master
06:23 whytewolf [well it puts it into a db in a cache
06:24 whytewolf salt '*' cp.list_master | grep filename
06:30 otter768 joined #salt
06:30 jeddi joined #salt
06:31 Sen_ whytewolf: Hmm I have mis understanding it seems
06:31 Sen_ whytewolf: yea the file name is listing there
06:32 dopesong joined #salt
06:32 Ztyx joined #salt
06:32 Sen_ whytewolf:  Basically what I am looking for is , any one can upate the salt repo locally that change should be pulled automatically from salt master
06:36 subsignal joined #salt
06:38 whytewolf Sen_: not sure if i am understanding you corrrectly. but it sounds like you want something more like states.git keeping the /srv/salt files in check. cause gitfs is kind of like that it just doens't store files where they can be edited on the master. it just checks the repo
06:40 Sen_ whytewolf:  got it  :)
06:40 Sen_ whytewolf: Thanks
06:45 stanchan joined #salt
06:49 fersur3 joined #salt
06:50 fersur3 I want to have the 127.0.0.1 address be a pillar variable, but I don't think I can templatize that file in a clean way with Jinja?   https://bpaste.net/show/01006bf0511d
06:52 kukacz_ joined #salt
06:56 kukacz_ joined #salt
06:58 AndreasLutro "{{ pillar.whatever }}" should work fine
07:02 lionel joined #salt
07:03 Ztyx joined #salt
07:06 Sen_ whytewolf: What would be file_root in case of gitfs
07:06 Sen_ when running high state getting Comment: No Top file or external nodes data matches found
07:07 Sen_ salt '*' cp.list_master | grep top     - srv/pillar/top.sls     - srv/salt/top.sls
07:07 Sen_ file_roots:   base:     - /srv/salt
07:07 breakingmatter joined #salt
07:16 eseyman joined #salt
07:16 kawa2014 joined #salt
07:18 markm joined #salt
07:21 jhauser joined #salt
07:30 linjan joined #salt
07:32 dopesong joined #salt
07:33 GreatSnoopy joined #salt
07:44 che-arne joined #salt
07:57 jhauser joined #salt
08:03 Ztyx joined #salt
08:11 KermitTheFragger joined #salt
08:12 jakubm joined #salt
08:19 Xevian joined #salt
08:20 Ztyx joined #salt
08:20 s_kunk joined #salt
08:21 timbyr_ joined #salt
08:29 DjDeaf joined #salt
08:31 otter768 joined #salt
08:35 thefish joined #salt
08:39 BigBear joined #salt
08:44 rofl____ can i load a pillar.example in a statefile?
08:44 lothiraldan joined #salt
08:47 sunkist joined #salt
08:52 N-Mi joined #salt
08:57 breakingmatter joined #salt
08:59 supersheep joined #salt
09:01 Grokzen joined #salt
09:02 yomilk joined #salt
09:02 Tiriel joined #salt
09:13 kukacz_ joined #salt
09:30 jeddi joined #salt
09:31 shinshenjs joined #salt
09:35 evle1 joined #salt
09:50 impi joined #salt
09:51 jeadr joined #salt
10:01 tmmt_ joined #salt
10:02 jakubm joined #salt
10:05 impi joined #salt
10:09 Edgan joined #salt
10:11 eagles0513875 joined #salt
10:13 monokrome joined #salt
10:13 dopesong joined #salt
10:23 bluenemo joined #salt
10:27 bitc01d joined #salt
10:27 dopesong_ joined #salt
10:32 otter768 joined #salt
10:33 supersheep joined #salt
10:33 giantlock joined #salt
10:36 ITChap I am trying to generate a list in yaml using a macro
10:37 ITChap how do you ensure that the indentation level is right
10:37 ITChap do I need to add the indentation in my macro ?
10:38 malinoff joined #salt
10:39 subsignal joined #salt
10:41 kukacz_ joined #salt
10:42 jeddi joined #salt
10:43 AndreasLutro ITChap: use the | indent(spaces) filter
10:43 AndreasLutro {{ my_macro(arg1, arg2) | indent(8) }}
10:44 ITChap AndreasLutro: if I call my macro with "- {{ mymacro() }}" will it indent automatically at the level of the {{ ?
10:45 jeddi joined #salt
10:45 AndreasLutro yeah
10:45 AndreasLutro but only the first line of the return value of the macro
10:45 ITChap :/
10:45 quasiben joined #salt
10:45 ITChap ok i will use the filter
10:46 breakingmatter joined #salt
10:46 ITChap the indent(8) will be added to the indentation already in the macro ?
10:46 jeddi joined #salt
10:47 AndreasLutro yes
10:50 supersheep joined #salt
10:51 shinshenjs joined #salt
10:56 jeadr joined #salt
10:57 ITChap AndreasLutro: any idea https://bpaste.net/show/277bcfc2832c ?
10:57 Tiriel Hi, how can I get data from a file in a minion into a state file
10:58 Tiriel To be precise, I want to add a 'creates' parameter to a cmd.run state, however, the created file has a version stamp and I can only get the version number from a version.txt file present on the minion
10:58 DanyC joined #salt
11:00 beardo joined #salt
11:00 Tiriel So, I'd like to have, on the cmd.run state a "- creates: filename-{{ version }}.tgz"
11:01 AndreasLutro ITChap: idea of what?
11:02 ITChap AndreasLutro: what I did wrong
11:02 AndreasLutro no - do you get any errors?
11:02 ITChap looks like my macro is way too complicate also ...
11:02 ITChap Conflicting ID 'backend'
11:02 ITChap look like the indent doesn't work
11:03 AndreasLutro it does - but you're defining yaml dict keys in a for loop
11:03 AndreasLutro you can't have duplicate keys in a yaml dict
11:03 ITChap but it's a list of dict
11:04 ITChap frontend and backend are at the same level
11:04 ITChap so it should be one item of the list
11:04 Tiriel Nevermind, found it
11:04 AndreasLutro eh, yes, but it's all just 1 dict
11:04 AndreasLutro you only have one - in your macro
11:05 evle joined #salt
11:05 ITChap oh yeah
11:05 ITChap I forgot one for the backends
11:05 ITChap :)
11:05 AndreasLutro even if you add that... you're still risking duplicate keys inside the first for loop
11:05 AndreasLutro for cluster, paths in mappings
11:06 ITChap yeah I forgot an item
11:07 ITChap should be acls: and then the path+backend should be an item of another list
11:09 ITChap arff
11:09 ITChap the whole structure is not adapted
11:09 ITChap it's way too messy
11:09 ITChap I will try to find something simpler
11:12 pravka joined #salt
11:14 sleetdrop joined #salt
11:14 pravka joined #salt
11:18 sleetdrop When I followed saltstack get started guide to vagrant up  salt-vagrant-demo  from github, I  got the following error. https://gist.github.com/sleetdrop/b55fe2bbe9b864300c98
11:19 yomilk joined #salt
11:19 AndreasLutro sleetdrop: this one? https://github.com/UtahDave/salt-vagrant-demo
11:20 sleetdrop @AndreasLutro: yes
11:20 AndreasLutro sleetdrop: in each of the `master_config.vm.provision :salt do |salt|` blocks, add salt.bootstrap_options = "-P"
11:21 AndreasLutro you may neeed to do some extra stuff as well... not sure
11:24 aqua^c joined #salt
11:27 impi joined #salt
11:27 shinshenjs hi. I have a scenario where i need to run a script on master after its minion completed its state
11:28 shinshenjs is there a proper way to do this?
11:28 pravka joined #salt
11:29 pravka joined #salt
11:29 ingslovak joined #salt
11:30 pravka joined #salt
11:31 pravka joined #salt
11:33 sleetdrop AndreasLutro:thanks a lot, it does work.
11:37 slav0nic joined #salt
11:38 the_drow joined #salt
11:38 pfallenop joined #salt
11:44 supersheep joined #salt
11:46 otter768 joined #salt
11:48 pfallenop joined #salt
11:51 sleetdrop AndreasLutro: though every vm was started successfully, but no salt is installed in the vms.
11:52 AndreasLutro sleetdrop: try `vagrant provision` to re-provision each box, since it failed the first time
11:55 ingslovak joined #salt
11:55 sleetdrop AndreasLutro:thanks, :) I should read some vagrant document first.
11:56 AndreasLutro sleetdrop: can't hurt ;)
11:58 jakubm joined #salt
12:00 Aidin joined #salt
12:02 rideh joined #salt
12:05 wm-bot4 joined #salt
12:20 tmclaugh[work] joined #salt
12:30 _JZ_ joined #salt
12:35 lothiraldan joined #salt
12:35 breakingmatter joined #salt
12:37 dthom91 joined #salt
12:43 Nika_ joined #salt
12:46 rodio_ua joined #salt
12:46 rodio_ua left #salt
12:46 DanyC All, where can i see the version mapping to the codename? I see through various commits saying Boron and have no clue if is 2015.8 or s'thing way in the future. A quick wiki/ readme somewhere will be nice to have which keep tacks of all this codenames
12:48 kawa2014 joined #salt
12:49 BigBear joined #salt
12:49 che-arne joined #salt
12:49 AndreasLutro DanyC: http://docs.saltstack.com/en/stage/topics/releases/version_numbers.html
12:50 Twiglet sleetdrop: I made my salt/vagrant setup public which makes defining new minions really simple (just a yaml file) if you want to check it out: https://github.com/ryanwalder/saltstack-lxc-vagrant
12:52 dopesong joined #salt
12:53 DanyC AndreasLutro: thanks ! funny for Boron & Beryllium there is a TBD .. and in the code i do see commits like : versionadded: Boron - great, when will that be out/ planned at least (even if might slip later on)
12:53 jakubm joined #salt
12:53 dthom91 joined #salt
12:54 sleetdrop Twiglet:I have star it, I will try it later, now I am following the official document to learn salt.
12:55 subsignal joined #salt
12:55 Twiglet Cool, mine does assume a little previous knowledge of salt I guess and the readme isn't exactly the best for beginners ;)
12:59 bhosmer joined #salt
13:01 subsigna_ joined #salt
13:04 revjim joined #salt
13:04 hasues joined #salt
13:04 hasues left #salt
13:05 revjim this gets a "Error encountered while render pillar top file." What did I do wrong? https://gist.github.com/dlashua/b1390f4aa536d5751bc4
13:06 AndreasLutro DanyC: best to assume the TBD is there for a reason, but beryllium *may* be out this month
13:06 colttt joined #salt
13:07 cpowell joined #salt
13:09 kawa2014 joined #salt
13:11 bfoxwell joined #salt
13:14 _JZ_ joined #salt
13:15 jdesilet joined #salt
13:19 revjim this does basically what I want, but it seems... dirty: https://gist.github.com/dlashua/29e4a3518d572d071731
13:20 ageorgop joined #salt
13:23 pm90__ joined #salt
13:23 giantlock joined #salt
13:26 dthom91 joined #salt
13:27 khaije1 To manage the entries in a /etc/hosts file is there a particular strong way to accomplish that?
13:28 khaije1 I want to add a line if it doesn't exist, and add items to the line if they arent already there
13:28 AndreasLutro khaije1: there is a host state
13:28 AndreasLutro http://docs.saltstack.com/en/latest/ref/states/all/salt.states.host.html
13:29 khaije1 AndreasLutro: you are beautiful
13:34 jakubm joined #salt
13:35 perfectsine joined #salt
13:35 XenophonF would anyone mind reviewing a salt reactor written in python?
13:35 XenophonF https://gist.github.com/xenophonf/58c3c78c34f8dabffb04
13:35 XenophonF it's for processing github webhooks
13:36 XenophonF i'm not sure how to test it
13:37 N-Mi joined #salt
13:38 Akhter joined #salt
13:39 breakingmatter joined #salt
13:40 racooper joined #salt
13:49 mpanetta joined #salt
13:51 dthom91 joined #salt
13:55 andrew_v joined #salt
13:55 XenophonF can anyone share reactors written python? i'd like a clue as how best to do things like debug logging
14:01 favadi joined #salt
14:01 zmalone joined #salt
14:03 otter768 joined #salt
14:05 pravka joined #salt
14:11 kbyrne joined #salt
14:13 Heartsbane joined #salt
14:16 adelcast joined #salt
14:21 dthom91 joined #salt
14:26 kaptk2 joined #salt
14:26 ekristen joined #salt
14:27 masterkorp Hello everyone
14:27 masterkorp How do prompt your fellow collegues to give you their sudo passwords?
14:27 dlloyd er what?
14:28 masterkorp openssl passwd -1 -salt <username>
14:28 Sketch "sudo make me a sandwich^W^W^W^W^give me your password"
14:29 masterkorp so far i've been asking them to run this command, input their desired password and place the hash as pillar data on users formula
14:29 masterkorp But this generates a rather weak hash
14:30 * Sketch notes that there is no such thing as a sudo password, it's just your regular user password...
14:30 masterkorp true that
14:30 SheetiS joined #salt
14:30 Sketch if you're using salt to distribute system passwords, i'd just use one machine as a master, run passwd on it, then pull the users from the system passwd file
14:30 masterkorp since I don't allow password loging, this is the only use case
14:31 masterkorp Sketch: but that is not practical, many users, are far away from doing that. That would require a specific machine
14:31 masterkorp I would be able to generate a proper hash that would be awesome
14:32 defmikekoh joined #salt
14:33 impi joined #salt
14:34 Sketch maybe something here http://unix.stackexchange.com/questions/52108/how-to-create-sha512-password-hashes-on-command-line
14:34 rideh joined #salt
14:36 jhauser_ joined #salt
14:37 masterkorp nice thanks
14:40 BlackJackAc3 joined #salt
14:41 venu0336 joined #salt
14:41 NotClever joined #salt
14:42 masterkorp http://serverfault.com/questions/574586/what-is-the-purpose-of-openssl-passwd
14:42 masterkorp related
14:43 revjim for two days now... I've been struggling with this. 'role:blah' goes inside of "base:" not next to it.
14:43 fyb3r joined #salt
14:46 venu0336_ joined #salt
14:48 XenophonF masterkorp: there's something in the users module i think that can generate a suitable password hash
14:49 XenophonF masterkorp: but my preference is to set some default (random) password, and then set enforce_password to False
14:49 masterkorp XenophonF: i would be very thankful if you could me provide me with a link
14:49 masterkorp XenophonF: but then I would have to trasnmit the password to the user
14:49 ekristen joined #salt
14:49 masterkorp and try to convince your colleagues of using GPG.. not easy
14:49 XenophonF you have to anyway when creating their accounts for the first time
14:50 masterkorp I that case it would be the hash only
14:50 XenophonF if you're going for self-service...
14:51 XenophonF ah here we go, shadow.gen_password
14:51 XenophonF masterkorp: http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.shadow.html#salt.modules.shadow.gen_password
14:53 pravka joined #salt
14:53 yomilk joined #salt
14:54 tvinson joined #salt
14:55 XenophonF hm, salt-call wants to run as the same user as the salt-minon service, so that's not going to work
14:56 masterkorp XenophonF: thank you
14:56 XenophonF masterkorp: take a look at the code for salt.utils.pycrypto
14:56 XenophonF there's a short function there called gen_hash
14:57 XenophonF you should be able to adapt that into a short script that users can run to generate hashes for you
14:57 XenophonF then it will be identical to what salt would do
15:03 DammitJim joined #salt
15:03 jalbretsen joined #salt
15:05 TyrfingMjolnir joined #salt
15:08 scurry joined #salt
15:08 clintberry joined #salt
15:11 butterSoap joined #salt
15:12 sdm24 joined #salt
15:13 supersheep joined #salt
15:13 masterkorp python -c "import crypt, getpass, pwd; \
15:13 masterkorp print crypt.crypt('password', '\$6\$saltsalt\$')"
15:13 fyb3r im trying to find a way to have my minions communicate back to the master what version of a service they are running, then have the master create a pillar based on that
15:13 masterkorp i think is is it
15:14 ari__ joined #salt
15:19 jeadr joined #salt
15:19 favadi joined #salt
15:21 favadi joined #salt
15:21 iggy XenophonF: reactors don't call pillars?
15:22 XenophonF so would i get configuration data like a preshared key from the master config?
15:22 iggy fyb3r: there's salt.wheel.pillar_roots
15:22 XenophonF thanks for taking a look at that, by the way
15:23 stevednd does anyone have any modules/states for grafana v2+ or flapjack v1+
15:23 iggy fyb3r: but unless it's considered for targetting data, just use a grain... much easier
15:26 fyb3r iggy, yeah I think ill end up going with grains. Is there a way for me to have the minions actively update the grain with the latest version of said service? Like some way to constantly monitor a text file or something of that sort and on modification have it update the grain then fire an event? I thought beacons may be the way to go but im still unsure
15:27 iggy fyb3r: grains update fairly often, unless you need that "event notification" when it changes, I wouldn't worry about it
15:27 iggy but yes, if you need the event, then beacons would be the way to go
15:27 fyb3r right on. and id need the grain itself to update as well
15:28 theologian joined #salt
15:29 PredatorVI joined #salt
15:33 PredatorVI Morning folks!  Is there a way to dump the YAML out after salt or salt-run has done all the pillar or jinja substitutions/renderings to inspect the "effective SLS"?
15:34 nkuttler PredatorVI: hm, the minion in debug mode will log it..
15:34 nkuttler (iirc)
15:34 iggy and salt-call -l debug on the minion will show it as well
15:35 Brew joined #salt
15:35 iggy combine with test=True for less breakage
15:36 murrdoc joined #salt
15:39 dthom91 joined #salt
15:41 zsoftich2 joined #salt
15:43 Brew joined #salt
15:44 DammitJim how can I see what the minion is doing?
15:45 * PredatorVI thinks all questions posted to this channel should be prefixed with 'DammitJim!'
15:46 DammitJim no, dammit!
15:46 DammitJim dammit-PredatorVI,
15:46 DammitJim lol
15:46 PredatorVI LOL
15:48 PredatorVI DammitJim: Won't upping the debug level on the minion give the detail?
15:48 DammitJim I don't know... salt-minion is running as a service
15:48 DammitJim where do I change that?
15:48 PredatorVI in /etc/salt/minion
15:48 stevednd DammitJim: either check the logs, or if you want to play along with it stop the service then `salt-minion -l debug`
15:49 DammitJim oh
15:49 tanta joined #salt
15:49 PredatorVI joined #salt
15:49 Grokzen joined #salt
15:50 PredatorVI In config you can set 'log_level: <level>' One of 'garbage', 'trace', 'debug', info', 'warning', 'error', 'critical'.
15:50 DammitJim oh ok, I'll change it there
15:50 PredatorVI or from cmd-line
15:50 _mel_ joined #salt
15:50 DammitJim where do I see a list of versions for salt?
15:50 DammitJim I think we are on 2015.5.3?
15:50 DammitJim but my version is something like 0.17.5_ds-1
15:50 PredatorVI What os?
15:51 DammitJim ubuntu
15:51 PredatorVI dpkg -l | grep salt
15:51 DammitJim ii  salt-minion                         0.17.5+ds-1
15:51 PredatorVI Or there is a command you can run on the master to list all minions versions
15:51 DammitJim I'm using the creates option for cmd.run
15:51 PredatorVI That is Ooooold
15:51 DammitJim but it doesn't seem to be working... but the notes say it was added to version 2014.7.0
15:51 PredatorVI How are you installing?
15:52 DammitJim apt
15:52 DammitJim default repos for 14.04.2
15:52 PredatorVI Do you have updated apt source or using default in distro?
15:52 iggy DammitJim: 0.17 is older than 2014.*
15:52 DammitJim DAMMIT!!!!
15:52 PredatorVI You have to add the repo to get newer
15:52 DammitJim ...jim
15:52 PredatorVI :)
15:52 iggy that's probably from the trusty default repo
15:52 DammitJim I guess I'll use salt to do that ;)
15:52 iggy you're going to want to add the ppa
15:53 dthom91 joined #salt
15:53 DammitJim when using unless: what should I use to test if a directory exists?
15:53 iggy use creates:
15:53 DammitJim [ ! -d <dir } ?
15:53 DammitJim creates doesn't work
15:54 iggy what version is your master?
15:55 DammitJim same
15:55 DammitJim 0.17.5+ds-1
15:55 DammitJim I can't get distracted by upgrading right now
15:55 DammitJim I'm going to use unless and then change it later
15:56 Brew joined #salt
15:56 iggy okay, ask Ubuntu for support then
15:56 DammitJim yes, thank you
15:56 DammitJim but when using unless, can I just do [ ! d <dir> ] ?
15:58 DammitJim it worked... sorry to bother you guys. I should just have tried it
16:02 RedundancyD joined #salt
16:03 giantlock joined #salt
16:04 otter768 joined #salt
16:05 gnord joined #salt
16:06 viq joined #salt
16:08 dthom91 joined #salt
16:09 yomilk joined #salt
16:09 malinoff joined #salt
16:09 DammitJim can I just have something like this to make sure the instances state is done?
16:09 DammitJim I have other file.managed entries (about 5) that require it, but I don't want to have a require: tomcat7.instances in each of those
16:10 malinoff joined #salt
16:10 katyucha joined #salt
16:11 shaggy_surfer joined #salt
16:12 DammitJim I guess I need to figure out a good balance between doing a "require" vs defining all the states that should be run for a minion
16:13 orion joined #salt
16:14 jeadr joined #salt
16:14 orion Hi. Is salt a fairly good replacement for vault?
16:14 mimiandi joined #salt
16:16 orion I'm talking about this: https://vaultproject.io
16:16 zmalone orion: different purposes
16:16 mrwboilers All of my minions have 2-3 instances of the minion running. Is that expected?
16:17 zmalone https://vaultproject.io/intro/vs/chef-puppet-etc.html
16:17 robawt mrwboilers: if they're running a salt highstate that's fine
16:17 mrwboilers They aren't. I haven't configured any states at all. At this point I'm only using salt for remote commands
16:18 zmalone You can use Salt for storing secrets, but Vault is a more specialized way of storing secrets, and is probably more secure.
16:18 zmalone But you can use Vault from your Salt formulas as the source of secrets.
16:19 nitay joined #salt
16:21 mrwboilers all my ubuntu boxes (which are running salt-minion 2015.5.0) have 3 instances running.
16:21 mrwboilers The centos boxes (salt 2015.5.3) all have 2 instances running
16:21 iggy orion: but that said, we've all been talking about a vault ext_pillar
16:21 iggy mrwboilers: expected
16:21 iggy on Ubuntu there's an extra "watcher" process
16:22 fyb3r DammitJim, salt '*' saltutil.is_running shows what the minion is running in regards to salt processes
16:22 fyb3r whoa oops, way late there
16:22 mrwboilers iggy: thanks. Just wanted to check. This is a recent rollout. We removed salt a couple years ago because we found hundreds of instances running on each box.
16:23 mrwboilers Hoping to not have a repeat of that!
16:23 DammitJim thanks fyb3r
16:23 orion zmalone: "But you can use Vault from your Salt formulas as the source of secrets" -- cool. Are there pre-existing tools to aid me in that pursuit?
16:23 iggy mrwboilers: did you file a bug about that
16:23 fyb3r DammitJim, np. sry about that, for some reason my screen was scrolled up and I thought that was a current question haha
16:23 mrwboilers I can't remember. It was several versions ago.
16:24 mrwboilers I tried recreating the issue with the current version before rolling out again, and was unable to.
16:24 zmalone orion: I don't believe there's a Vault pillar at this time, so it would probably be shelling out to vault as a client in order to retrieve your secrets.
16:24 AirOnSkin Hey guys, I need a little help with a Jinja2 condition. In one of my files, I have the following: {% if salt['pillar.get']('sudo') != none %},{% endif %}
16:24 dyasny joined #salt
16:25 AirOnSkin Now, in my Pillar files there is either sudo: "" or sudo: "/path/to/some/binary"
16:25 dthom91 joined #salt
16:25 iggy then your check needs to be "" not none
16:26 AirOnSkin Oh... I wasn't even finished explaining ;) ... you're fast oO
16:26 writtenoff joined #salt
16:26 AirOnSkin iggy: I'll test it, just a sec
16:26 coval3nce joined #salt
16:26 capricorn_1 joined #salt
16:26 aarontc joined #salt
16:27 AirOnSkin iggy: like this? {% if salt['pillar.get']('sudo') is not "" %},{% endif %}
16:28 iggy != ""
16:29 AirOnSkin What's the difference between 'is not' and '!=' ? I've seen both online...
16:29 AirOnSkin It works, by the way :)
16:29 robawt 'is not' is more pythonic
16:30 Rasathus joined #salt
16:30 coval3nce Anyone know if jinja map files can be used in pillar trees? If so, can they use grains to set pillar data for a minion?
16:30 orion iggy / zmalone: I understand that Salt and Vault provide for different use cases, but is there a reasonable expectation that things like TLS keys and the like are inaccessible to hosts which shouldn't have them, but are otherwise authenticated to talk to Salt? I.e., the mysql server can't get nginx's TLS keys.
16:30 rideh joined #salt
16:30 AirOnSkin I'm asking because 'is not' produced the following error: expected token 'name', got 'string';
16:30 AirOnSkin while != worked
16:31 robawt https://docs.python.org/2/library/stdtypes.html#comparisons  << AirOnSkin
16:31 AirOnSkin coval3nce: You can certainly call grains in pillar files... about the rest, I don't know
16:32 AirOnSkin robawt: Thanks, I'll have a look at that
16:32 coval3nce AirOnSkin: what i’d like to do, is use minion grains to set pillar data for ntp servers, so i can setup ntp using an upstream ntp.ng state
16:34 breakingmatter joined #salt
16:34 Rasathus Hi.  Im trying to write a patch for an issue I've run into, but wanted to check Salt's supported python versions before I got too far.  I just noticed that one of the stdlib methods I was intending to use is >=2.6 and couldn't find any documentation suggesting which python versions Salt is supporting.  Thanks
16:34 bhosmer joined #salt
16:35 robawt Rasathus: http://docs.saltstack.com/en/latest/topics/installation/#dependencies
16:35 freelock joined #salt
16:36 Rasathus @robawt Ok, Thanks
16:37 AirOnSkin coval3nce: We're doing this in our Pillar files: env: {{ salt['grains.get']('env') }}
16:37 coval3nce Cool, i’ll muck around and see what i can do with a jinja map to create some entries
16:38 AirOnSkin Have fun :)
16:39 iggy orion: pillar is the only thing that is expected to contain "sensitive" data
16:39 linjan joined #salt
16:39 iggy orion: but yeah, if you target your pillars correctly, you shouldn't be able to access minionA's pillar data from any other minion
16:40 zacdev joined #salt
16:40 iggy and if not, it'd definitely be considered a bug and should be reported
16:40 orion iggy: Great! Thank you.
16:43 wendall911 joined #salt
16:44 iggy orion: note: you'll see examples of targeting using grains... that is not considered secure (as grains can be overridden by the minion) (i.e. targeting the nginx ssl keys based on the roles grain, etc)
16:44 ericof joined #salt
16:46 orion Ah, ok.
16:46 orion iggy: At this time, is writing an ext_pillar difficult?
16:46 iggy depends
16:47 mohae joined #salt
16:47 orion I'm content to hack something together that just barely works for my use case.
16:47 PredatorVI When running salt.function as part of an orchestration that targets 3 minions, will those be run in parallel or in series?
16:47 iggy on your level of salt and python familiarity
16:47 khaije1 anyone know if I can recurse a path using file.stats ?
16:53 defmikekoh joined #salt
16:53 gimpy2938 How can I write a state to say "only do this state if file X exists, otherwise do nothing and do not report an error"?
16:54 enarciso joined #salt
16:55 aw110f joined #salt
16:55 Bryson joined #salt
16:55 dlloyd http://docs.saltstack.com/en/latest/ref/states/requisites.html#onlyif
16:55 [1]PredatorVI joined #salt
16:56 iggy creates would do the opposite
16:58 SheetiS gimpy2938: a quick and dirty way to do that is to do wrap it in jinja that says {% if salt['file.file_exists']('/path/to/file' %}. You could also use a file.exists state as a requisite, but that would indeed leave errors behind.
16:58 SheetiS (forgive my trailing ) there as well in the syntax)
16:59 gimpy2938 SheetiS: That should be what I need, I tried the jinja way but I guess I was doing it wrong
16:59 SheetiS Keep in mind that the word 'dirty' exists in my sentence above.  I'm not sure of a good and clean way, but calling modules in jinja can lead to unexpected weirdness with nothing returned to let you know why.
17:00 arimbr__ joined #salt
17:00 pm90_ joined #salt
17:00 aparsons joined #salt
17:00 bhosmer joined #salt
17:00 SheetiS http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.file.html#salt.modules.file.file_exists has the usage for the module function.
17:01 gimpy2938 So why is it 'file.file_exists' instead of 'file.exists'?  Is that the way all salt states used in jinja work?
17:02 iggy file_exists ... directory_exists
17:03 favadi you know, we use file.directory, so :)
17:05 gimpy2938 iggy: Yea but I don't get why it is different.  See: https://gist.github.com/anonymous/bcd3425a5c0353aad61c
17:06 iggy gimpy2938: file.exists is a state
17:06 iggy file.file_exists is a module
17:07 iggy !salt states.file.exists
17:07 saltstackbot http://docs.saltstack.com/en/latest/ref/states/all/salt.states.file.html#salt.states.file.exists
17:07 iggy !salt modules.file.file_exists
17:07 saltstackbot http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.file.html#salt.modules.file.file_exists
17:08 BradThurber joined #salt
17:08 Norrland !salt states.cron
17:08 saltstackbot http://docs.saltstack.com/en/latest/ref/states/all/salt.states.cron.html
17:12 drawsmcgraw joined #salt
17:12 drawsmcgraw I think I may have accidentally made a poor man's PaaS... I used a masterless minion to prep an image for our Openstack cluster
17:12 drawsmcgraw And I forgot to uninstall salt-minion before making the image available
17:13 freelock joined #salt
17:13 drawsmcgraw ...Now that I'm thinking about it, all my howto's on using our Salt automation have always started with "run this script to install a masterless minion" but... that's already in the image now.
17:13 drawsmcgraw Anyone else done something like that? Deliberately or otherwise?
17:14 BradThurber any tips for better structure of map.jinja files with lots of chained merges? For example, I am trying to figure out how to change the apache formula map.jinja https://github.com/saltstack-formulas/apache-formula/blob/master/apache/map.jinja to provide apache:version of 2.2 or 2.4 to the formula states based on grain items os-family and osmajorrelease (as apache version doesn't seem to change within a majorrelease). I'm looking at all the existing m
17:14 BradThurber erges there and can't imagine adding more without going crazy
17:15 rideh joined #salt
17:15 iggy drawsmcgraw: I think that's basically how ryan lane (lyft) works
17:16 drawsmcgraw iggy: I really need to watch his stuff.... His is the "Saltstack at Scale" material, right?
17:16 shaggy_surfer joined #salt
17:17 iggy he did at least 3 talks at the last conference
17:17 iggy I need to start thinking of something to do for next years (The call should start soon)
17:18 drawsmcgraw Word. I've got an idea or two I need to chase down to see if they're viable.
17:19 jopecko joined #salt
17:19 impi joined #salt
17:19 khaije1 joined #salt
17:20 theologian joined #salt
17:22 dcs_ joined #salt
17:23 forrest joined #salt
17:26 pm90__ joined #salt
17:26 gerhardq1x BradThurber: I did the dict updates manually at https://github.com/gerhardqux/influxdb-formula/blob/master/influxdb/map.jinja#L31
17:28 BradThurber gerhardq1x: thank you for the example
17:29 gerhardq1x yw, hope it helps
17:33 XenophonF i can call my webhook via salt-api but not wsgi :(
17:35 revjim anyone have a good url to explain environments and how to use them "properly"?
17:35 revjim if seen this, of course: http://docs.saltstack.com/en/latest/ref/states/top.html
17:36 breakingmatter joined #salt
17:36 bhosmer joined #salt
17:36 XenophonF also disappointing is that the 'body' element of the event is empty, when i need it to contain the original, raw HTTP request body in order to validate GitHub's signature
17:39 XenophonF i'm guessing that rest_cherrypy has a local socket open that the wsgi instance can't happen
17:41 KyleG joined #salt
17:41 KyleG joined #salt
17:42 jeadr joined #salt
17:43 murrdoc Gareth:  dude
17:46 mpanetta Afternoon all.  Was salt-api recently changed to require python-cherrypy3 instead of python-cherrypy?
17:46 dingo git log -p | grep cherrypy
17:47 mpanetta Don't have it checked out.
17:47 mpanetta Was meaning in the actuall release.
17:47 mpanetta For some reason salt-api wont start anymore
17:47 BigBear joined #salt
17:47 mpanetta But if I install python-cherrypy3 it works fine.
17:49 dingo well i searched for you on github.com/saltstacl/salt-api
17:49 dingo i didn't find anything relevant
17:49 dingo so you should open an issue, there
17:49 mpanetta Ok, thank you dingo.
17:49 kukacz_ joined #salt
17:49 dingo clearly describe your problem and how to reproduce it in a virtualenv environment always helps
17:49 iggy no
17:49 iggy salt-api repo is dead
17:49 freelock joined #salt
17:49 iggy salt-api is in upstream salt now
17:50 dingo oh, well this guy says salt-api
17:50 mpanetta Ah... hmmm
17:50 dingo so i'm thinking, oh
17:50 dingo https://github.com/saltstack/salt/issues/25277
17:50 saltstackbot [#25277]title: CherryPy recommended versions | salt-api works together with all versions of cherrypy 3.2.3 - 4.x. when in non-SSL mode. We tested this for a long while at the beginning of the year....
17:51 kukacz joined #salt
17:51 pcn Why does salt-call pillar.items show me different results than salt 'minion-name' pillar.items from the master?
17:51 dingo "Version 3.2.3 is currently recommended"
17:54 zsoftich3 joined #salt
17:55 mpanetta Ok so it was the salt-salt formula that downgraded the package on my master when I ran it... Gonna try and see what is up
17:55 mpanetta Thanks for the help dingo, iggy
17:55 forrest pcn: Did you make sure to refresh the pillar data on the minion?
17:55 forrest pcn: http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.saltutil.html#salt.modules.saltutil.refresh_pillar
17:55 Brew joined #salt
17:55 forrest give that a shot from the master on the associated minion, see what salt-call gives you
17:56 baweaver joined #salt
17:56 dthom91 joined #salt
17:56 linjan joined #salt
17:56 Akhter Hey guys, I've upgraded one of my salt minions.  And I'm attempting to reconnect to the master.
17:57 forrest Akhter: Are the same versions running on the minion and master? They need to be the same release.
17:57 Akhter However the key is not being passed.
17:57 Akhter master 2014.7.5 minion is upgraded to 2014.7.5
17:57 yomilk joined #salt
17:57 Akhter forrest: I've been able to connect to minions that have 2015 release while the master is 2014.
17:58 forrest Akhter: Yeah sometimes you can, certain functionality might not work
17:58 Akhter The previous version of the minion was 2014.7.0
17:58 forrest Akhter: So we usually just tell people to make sure it's the same release because otherwise there can be issues.
17:58 Akhter Right, in this case they are the same release.
17:58 forrest Akhter: Is there anything in the log? If not you might want to start the minion in debug mode and see if that dumps anything out when it tries to connect.
17:59 Akhter I've started salt-minion with all log level, it states that it included and read the config file that specified the master.
17:59 joeskyyy joined #salt
17:59 Akhter But nothing about connecting to the master.
18:00 joeskyyy Alright, I've got a strange one here :| I've got an ext_pillar set up talking to a MySQL Database, however, when I try to query based on the pillar key, it says it can't talk to the minion, but doing a standard salt ... test.ping returns just fine immediately after
18:00 joeskyyy http://hastebin.com/noxosofaza.cs -- examples of what I'm talking about for clarification
18:01 Akhter forrest: Never mind it just took about 10 minutes.
18:01 forrest Akhter: Oh okay, weird.
18:01 Akhter Yeah....
18:02 gordonm joined #salt
18:02 iggy someone else was seeing that recently
18:02 iggy check recent issues (like last 2 weeks)
18:02 linjan joined #salt
18:02 iggy and maybe channel logs
18:02 joeskyyy iggy: re: my issue or Akhter's?
18:02 iggy Akhter's
18:03 iggy yours... no clue
18:03 iggy looked at your output, but don't see anything obviously wrong
18:03 Akhter iggy: All right, I'll check recent issues.
18:03 Akhter Thanks.
18:03 joeskyyy iggy: Well at least I'm not the only one (: thought I was going insane and missing something blatently obvious haha
18:03 iggy joeskyyy: play around with the match module on the minions maybe?
18:04 jeadr joined #salt
18:04 CeBe joined #salt
18:04 iggy !salt modules.match
18:04 saltstackbot http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.match.html
18:04 joeskyyy Would that require me to share the pillars to the minions?
18:04 iggy joeskyyy: no, the minions should cache their pillar data locally (might have to run refresh_pillar)
18:05 otter768 joined #salt
18:05 joeskyyy Even if it's an ext_pillar?
18:05 iggy but I guess that'd be another interesting test
18:05 iggy salt-call pillar.items
18:05 ajw0100 joined #salt
18:06 gordonm joined #salt
18:06 nitay joined #salt
18:06 pravka joined #salt
18:06 tanta joined #salt
18:07 freelock joined #salt
18:07 joeskyyy Hmm, so yeah my minons return fine on match.pillar
18:07 joeskyyy Which makes sense, since the master still targets the minions, itj ust doesn't respond back? o.O and I can see the salt traffic coming from a tcpdump as well
18:08 iggy what did salt-call pillar.items say?
18:09 impi_ joined #salt
18:09 murrdoc moo
18:09 SheetiS can always try to salt-call saltutil.refresh_pillar and then try and get pillar.items again after if it is not showing all the things
18:10 iggy that's the direction I'm headed
18:10 joeskyyy iggy: http://hastebin.com/coqujejade.rb
18:13 baweaver joined #salt
18:15 khaije1 using the user.present function and would like to provide a password but I see it only takes a hash ... Dont different systems use different types of hashes? Is there a way to set the password in a way that doesn't depend on the target configuration?
18:16 murrdoc https://github.com/jfindlay released this 6 days ago · https://github.com/saltstack/salt/compare/v2015.5.4...develop to develop since this release
18:16 giantlock joined #salt
18:16 murrdoc 8073 commits to develop
18:16 murrdoc since last release
18:16 murrdoc (clap)
18:17 iggy khaije1: I think it takes a password too
18:19 dingo khaije1: you could use "plaintext password", but gpg encrypted and unencrypted by minion on application
18:19 dingo so that it is something of a "hash" (not really, asymmetricly encrypted password) that evaluates platform independently as its natural password after it is rendered through | gpg
18:21 dthom91 joined #salt
18:22 DammitJim is there a salt function to remove a service from rc.d ?
18:22 DammitJim on an Ubuntu minion?
18:23 murrdoc salt sys.doc service.dead
18:23 DammitJim thank you sir!
18:23 joeskyyy iggy: http://hastebin.com/eyibamuwok.rb -- super interesting.... pillar.get * returns nada, but pillar.items clearly has it o.O
18:24 joeskyyy Slightly related issue maybe? https://github.com/saltstack/salt/issues/10900
18:24 saltstackbot [#10900]title: timeouts when targeting by pillar | I'm running master 0.17.5 (the latest available for ubuntu via PPA),...
18:24 khaije1 iggy: dingo: seems worth a try
18:25 iggy joeskyyy: did you try a refresh_pillar at some point?
18:26 joeskyyy Yup, tried a sync_all too for extra preparedness
18:26 joeskyyy Did it right before that laste paste actually
18:27 DanyC joined #salt
18:28 iggy There are some bugs open about the disparity between pillar.item(s) and pillar.get
18:28 iggy and that bug you linked looks similar
18:28 joeskyyy Yeah I think I might jyst tack ontop of this issue and see what's up
18:28 iggy can't read all of it though... work to do
18:28 joeskyyy s/jyst/just
18:30 ajw0100 joined #salt
18:30 phw joined #salt
18:32 joeskyyy wtf and now it's working
18:32 joeskyyy -_-
18:32 _pravka_ joined #salt
18:32 joeskyyy *sigh* I'll blame the data centre beasts.
18:36 iggy joeskyyy: can't remember if you said or not... what version?
18:37 jeadr joined #salt
18:40 joeskyyy iggy: salt 2015.5.3 (Lithium)
18:43 Akhter Hey iggy, sorry to bother you again, I'm trying to mine a grain and I want to make sure I'm not missing something.
18:43 Akhter So to start off I have to send the grain.  salt 'target' mine.send grains.get (insert grains here)
18:44 Akhter But then when I run salt 'target' mine.get '*' grains.get (grain)
18:44 Akhter Nothing shows up.
18:44 iggy Akhter: I think you can only mine.send things that are already in your mine_functions
18:45 Akhter iggy: So how would I go about mining a specific grain from a target then?
18:45 Akhter I was following http://docs.saltstack.com/en/2014.7/ref/modules/all/salt.modules.mine.html
18:48 SheetiS Akhter:  Since you need a mine function, you would also need this part https://docs.saltstack.com/en/develop/topics/mine/index.html
18:51 DanyC iggy: earlier you mentioned  "targeting using grains ...is not secure" ...what are the alternatives then? nodegroup and roles maybe defined in pillar ?
18:51 SheetiS pillar-defined roles can definitely work as long as you are not trying to use those roles to target inside the pillar.
18:52 SheetiS They are EXCELLENT for states and your state topfile and other bits though.
18:55 DanyC SheetiS: i see, thx ! Do you have any handy examples ?
18:57 SheetiS This is a mine function to mine all grains (eww ugly too much data!  but it works!) https://bpaste.net/show/c02496491e8a
18:58 SheetiS you could also go with a grains.item: and then list the item below if you only wanted to mine one grain
18:58 jeffspeff joined #salt
18:59 DanyC SheetiS: right, thx
19:00 SheetiS I just put my mine functions in /srv/pillar/mine/<whatever>.sls and then include mine.<whatever> in my pillar top for whatever needs those particular items mined
19:00 jeffspeff what am i doing wrong here? i can run the command with those install flags manually from powershell and it works fine, but doesn't work with salt. is salt actually putting commas in the command argument it executes like it shows in the log? here's the log and the state that i'm having problems with.
19:00 jeffspeff https://gist.github.com/jeffclay/54e50f67a00c1ffe9e65
19:00 SheetiS for things that need to be universal, I just put that in init.sls and include just mine
19:01 DanyC SheetiS: that is an elegant way to do it.
19:01 freelock joined #salt
19:03 GreatSnoopy joined #salt
19:03 DanyC a different question, so i'm trying get minions to join an Elasticsearch cluster but i'd prefer to use more the reactor/ orchestration rather then the mine_function. currently i'm using grains as below {% set hosts=salt['mine.get'] ('*elasticsearch-master*', 'grains.item', expr_form='glob').values() %} follwoed by discovery.zen.ping.unicast.hosts: [{% for host in hosts %}{{ host['ip_interfaces']['eth0'][0]}}{% if not loop.last %},{% endif
19:04 SheetiS jeffspeff: I don't often use windows with salt, so I'm not going to be a good resource, sorry about that!
19:05 ajw0100 joined #salt
19:06 DanyC anyone has a cleaner way of auto populate the "list"? If i had to use pillar, would i be able once the minions comes online to update the pillar list?  In my reactor.conf i have  - 'salt/minion/*/start':                 - '/srv/reactor/startup_orch.sls' which then points to cat >> /srv/reactor/startup_orch.sls << EOF             startup_orch:               runner.state.orchestrate:                 - mods: orchestration.startup
19:08 SheetiS DanyC: while I'd use a reactor and (possibly) orchestration to trigger states when things start up, you may still need to store data in a mine for consumption to make the states clean/elegant.  Also it might be easier if you put your examples in bpaste or similar pastebin (or even a github gist if multiple files) so that we don't lose formatting looking at them
19:08 DanyC SheetiS: this is what i'm doing now, 2 ticks
19:08 jeffspeff SheetiS, do you know if the command arg it is executing actually contains commas like it shows in the log? if so, that is the issue.
19:09 SheetiS jeffspeff: install_flags: '/S /V"UI="Silent" REBOOTPC="1" /l*v "%ProgramData%\compapps\logs\ops2400w.LOG""' what about the double double quotes at the end?
19:10 SheetiS that seems to make things 'uneven' as far as quotes go.
19:10 SheetiS or is that all part of the /V or whatnot
19:10 iggy the first one is after /V
19:11 jeffspeff you're right, there's an extra quote
19:11 SheetiS well the first one after the /V matches it
19:11 SheetiS but the fact that it is all same kind of quotes even when nested
19:11 SheetiS Does that cause issues when running that way manually from CLI?
19:12 PredatorVI joined #salt
19:12 jeffspeff no, it runs fine form cli
19:13 DanyC SheetiS: my current setup ... https://bpaste.net/show/b47e1504410a and as i said i'd love to use more the "minion discovery" and get them injected into the yml file as they come online
19:14 jeffspeff i think the problem is on lines 3 and 4 in the log excerpt. how can i get that to be seen as one string instead of salt putting the switches into an array like that?
19:15 pcn forrest: regarding refresh_pillar, how long does the minion, using salt-call, show different pillar data?  I thought pillar data came from the master?
19:16 forrest pcn: I honestly don't know, I haven't run into that before so I'm not sure why you're getting cached info, iggy do you remember?
19:17 bhosmer_ joined #salt
19:17 iggy pillar.item(s) pulls from the master, pillar.get pulls from the local cache (iirc)
19:17 scurry joined #salt
19:17 pcn I was using pillar.items on both sides
19:17 iggy That's why if you use pillar.item(s) in states, we take away your editor
19:18 SheetiS A pillar refresh happens at the beginning of a highstate
19:18 iggy I haven't really been following along, that's just what I remember on the topic
19:18 SheetiS but if you are calling other modules at the cli and targetting pillar data, it may never be in sync until you manually refresh the pillar
19:21 baweaver joined #salt
19:22 DanyC what do you tink SheetiS is any clean way for me to auto populate the state elesticearch.yml file with the new minions ?
19:25 SheetiS DanyC: I'd still do it with mine data myself.
19:26 DammitJim joined #salt
19:27 DanyC SheetiS: but how would that auto populate/ update the elasticsearch.yml state file when new minions get "online" ?
19:30 SheetiS When the new minion starts the first time, it can trigger a reactor event that triggers states or an orchestration that will populate the mine, force the mine.update, and then trigger the state on the system with the elasticsearch.yml to consume the new mine data and (if needed) restart services.
19:33 yaryarrr joined #salt
19:33 yaryarrr i'm trying to use external pillars via git, but i'm getting this message in the master log: [ERROR   ][16041] Failed to load ext_pillar git: [Errno 2] No such file or directory
19:33 yaryarrr i'm not sure where to look, or what is missing
19:34 baweaver joined #salt
19:34 iggy gitfs dependencies would be the first thing I'd look at
19:35 yaryarrr I have GitPython and python-pygit2 installed
19:35 iggy well then, that sounds okay
19:35 drawsmcgraw yaryarrr: Can you post your configs for ext_pillar?
19:35 iggy try salt-run -l debug fileserver.update
19:36 freelock joined #salt
19:36 drawsmcgraw I like iggy's idea
19:36 sunkist joined #salt
19:36 yaryarrr here is the output of the debug: https://gist.github.com/anonymous/798271ef4f65992344a4
19:36 drawsmcgraw Also, I noticed that I have this in my master config -> gitfs_provider: pygit2
19:37 Ztyx joined #salt
19:37 drawsmcgraw I'm using ext_pillar via git with success. Not sure if that config option is relevant (I have it in there for GitFS backend)
19:37 yaryarrr the gitfs_remote works, it's the ext_pillar that is not working
19:38 PredatorVI yaryarrr:  what is the format of your ext_pillar.
19:38 yaryarrr - git: master ssh://git@git.isostech.com:7999/sal/salt-stsi.git root=pillar
19:38 iggy DanyC: https://gist.github.com/iggy/b7599a97c18ddd6e6ca4
19:38 drawsmcgraw Oh wait... iggy, wouldn't fileserver.update just update the salt file server?
19:39 iggy yeah, I thought about that
19:39 iggy ffs salt... merge the ext_pillar and gitfs backends already
19:40 drawsmcgraw yaryarrr: I'm using http for my location
19:40 drawsmcgraw - git: master http://github.derpydonkeys.com/team/salt-pillar.git
19:40 iggy git+ssh
19:41 Akhter iggy: Mine funtions sls file is kept in the pillar?  Just wanting to confirm and test.
19:41 drawsmcgraw Unless your github *requires* ssh access, I'd just stick with the http access since you only ever need to read from it.
19:41 iggy - git: master git+ssh://git@salt-pillars-github.com/iggy/salt_pillars.git
19:41 Akhter pillar directory*
19:41 jeffspeff is this the correct way to express if not? {% if version != '24.00.00' %}
19:42 iggy Akhter: I'm not entirely sure tbh... we have the same thing in pillar and in the minion config files for some reason
19:42 iggy jeffspeff: for string comparison, yes
19:42 yaryarrr that gives me: 2015-08-19 15:42:28,155 [salt.pillar                                ][CRITICAL][21938] Specified ext_pillar interface git+ssh is unavailable
19:42 jeffspeff thanks iggy
19:43 Akhter iggy: Thanks, I'll try and follow the example without the HAProxy.
19:43 drawsmcgraw jeffspeff: http://jinja.pocoo.org/docs/dev/templates/#logic
19:44 drawsmcgraw yaryarrr: Have you tried just 'http' ? :)
19:44 yaryarrr i can't use http... it's ssh only, and requires a key
19:45 drawsmcgraw yaryarrr: Ah, I was afraid of that....
19:45 jeadr joined #salt
19:46 drawsmcgraw yaryarrr: Are you certain you've configured the SSH key that Salt is supposed to use?
19:46 PredatorVI yaryarrr:  We use SSH w/ key but I don't have the 'root=pillar' or other options at the end.  Ours looks like:  - git: master ssh://git@gitlab.mycompany.com/gitgroup/salt-pillars.git
19:46 yomilk joined #salt
19:46 yaryarrr ahh, you have a repo just for the pillars? i specified the folder so that i could keep it all in the same repo
19:47 PredatorVI Yes
19:47 yaryarrr earlier in the configuration, i specify which ssh key to use... and it works for the states
19:47 linjan joined #salt
19:48 khaije1 impressions of vCAC and it's use with Salt?
19:48 PredatorVI yaryarrr:  FWIW, I'm not using pygit2 yet.
19:49 PredatorVI If you are using pygit2, I think you might need to add a ':' at the end of that line and include the '- pubkey: <keypath>  - privkey: <keypath>' options
19:51 yaryarrr i have that defined for the gitfs_remotes above.... but i didn't see anything in the docs about it for the ext_pillar
19:52 PredatorVI yaryarrr:  I'm just guessing since I am using gitpython :P
19:52 saltstackbot [reddit-saltstack] salt-mine frustrations https://www.reddit.com/r/saltstack/comments/3hmj51/saltmine_frustrations/ - 2015-08-19 - 20:48:36
19:53 DammitJim does service.running add a script that is in /etc/init.d to rc.d?
19:53 DammitJim I can't find a salt state that does this or the equivalent of update-rc.d
19:54 PredatorVI DammitJim:  I dont' think so, if it isnt part of the package install, you will probably need a managed file
19:54 DammitJim I have the managed file
19:54 DammitJim I don't have a way to: sudo update-rc.d <service> defaults
19:54 DammitJim unless I use cmd.run
19:54 fredvd joined #salt
19:55 PredatorVI I recently added an upstart script for a custom daemon we have here.  I put it in /etc/init and the service.* commands find it just fine
19:55 PredatorVI With one caveat
19:56 DammitJim I don't know why service.running didn't find my service
19:56 DammitJim do I have to specify the whole path or something?
19:56 PredatorVI If the name of the service is not the same as the process it runs, you might have to rename the process or provide a '- sig:'
19:57 PredatorVI My daemon was a Java JAR file run using the Apache JSVC framework.  The name of the process started by JSVC didn't match my service or jar name.
19:57 DammitJim oh ok
19:57 DammitJim brb
19:57 PredatorVI Luckily JSVC has an option to name the service so it matches in the 'ps' call.
19:58 freelock joined #salt
19:58 DammitJim joined #salt
19:58 DammitJim what do you mean by upstart?
19:59 jhauser joined #salt
20:00 PredatorVI DammitJim:  Upstart is supposedly a replacement for the sysctl init.d stuff.
20:00 DammitJim oh, I shouldn't be using service.running?
20:00 PredatorVI the salt 'service' module is a wrapper around that
20:00 PredatorVI It should work with either
20:00 PredatorVI (I think)
20:01 PredatorVI The upstart scripts are a little cleaner
20:03 ajw0100 joined #salt
20:03 iggy PredatorVI: yaryarrr: ext_pillar doesn't use the same backend as gitfs... it's gitpython only for now
20:05 yaryarrr iggy: if i uninstall pygit2, that would force the gitfs to use gitpython, right?
20:05 yaryarrr (i'd have to finangle the keys a bit and such)
20:05 otter768 joined #salt
20:06 PredatorVI iggy:  good to know
20:07 iggy yaryarrr: correct... shouldn't be required though
20:07 iggy yaryarrr: try stopping the master service, run salt-master -l debug in a terminal, then do a pillar_refresh from a minion
20:08 PredatorVI yaryarrr: My understanding is that gitpython only looks in a fixed location (e.g., ~/.ssh) for the keys so you can only have one key and that key would need to work for all gitfs remotes.  iggy (et.al.):  Is this right?
20:08 bhosmer joined #salt
20:08 iggy you can use ssh aliases to have different keys
20:08 PredatorVI ok
20:08 yaryarrr i have a single key, and it should provide access to the repo
20:08 yaryarrr and by should... i mean it does lol
20:08 * PredatorVI hates security.
20:08 iggy (that's what the salt-pillars-github.com is about in my config above)
20:10 iggy yaryarrr: so you can (as whatever user the minion runs as) git clone ssh://git@git.isostech.com:7999/sal/salt-stsi.git
20:10 yaryarrr correct
20:10 iggy I'm assuming you've actually tried before, because that was a quick answer
20:10 yaryarrr yeah, a couple of times in my troubleshooting before jumping on here
20:11 DanyC iggy: thx a lot for the gist !! so basically , if i understood it right, you not using the mine function, just the reactor and your are tagging based on the graines to reaply the state, correct?
20:12 dthom91 joined #salt
20:12 saltstackbot [reddit-saltstack] Minion Naming and Aliases - what do you suggest? https://www.reddit.com/r/saltstack/comments/3hmmdq/minion_naming_and_aliases_what_do_you_suggest/ - 2015-08-19 - 21:10:07
20:13 iggy DanyC: no, that reactor runs whenever our repo server starts up, it then updates the mine (which is where we pull our pkgrepo data from)
20:13 shaggy_surfer joined #salt
20:13 iggy lots of reddit-saltstack traffic today
20:13 Gabemo joined #salt
20:14 yaryarrr iggy: https://gist.github.com/anonymous/bbf3c6157508f0d9a2f2
20:14 yaryarrr thats the output from the pillar refresh
20:15 iggy yaryarrr: change it back to just ssh (i.e. take off the git+)
20:18 evilrob joined #salt
20:20 yaryarrr iggy: i see no errors in the debug output
20:20 yaryarrr i can see the pillars returned in the out
20:20 yaryarrr *output
20:21 DanyC iggy: ah i see, so still using mine then... I guess i'll need to look at how to implement what SheetiS said earilier " When the new minion starts the first time, it can trigger a reactor event that triggers states or an orchestration that will populate the mine, force the mine.update, and then trigger the state on the system with the elasticsearch.yml to consume the new mine data and (if needed) restart services."
20:21 iggy DanyC: that's basically what my gist does
20:22 iggy "trigger reactor, orchestrate, update mine
20:22 yaryarrr and now it seems the high states are running.... could the pillar_refresh have resolved an issue?
20:22 iggy it just doesn't do the "trigger the state on the system with the elasticsearch.yml"
20:23 iggy maybe? restarting the master? (did you do that before?)
20:23 yaryarrr several times
20:23 iggy then no clue
20:23 yaryarrr ugh, i hate it when things are fixed and i don't know why!
20:23 yaryarrr lol
20:24 jdesilet joined #salt
20:25 jdesilet joined #salt
20:25 nitay joined #salt
20:26 DanyC iggy: thx again!
20:26 jeadr joined #salt
20:26 nitay did this issue get resolved - https://gist.github.com/nitay/a6c104517cf3425a1f7a I’m still seeing it I recall some talk about it
20:26 nitay namely the problem is the machine has pip installed, it can load it in python, etc, but some reason it doesnt register in salt
20:27 iggy nitay: does your pip version have pip.req?
20:28 afics joined #salt
20:28 aqua^c joined #salt
20:28 nitay iggy: does this mean it does? https://gist.github.com/nitay/6db48a769718d9b6376d
20:28 yaryarrr iggy: now i'm really confused... when i stopped the salt-master -l debug and started the service.... the error returns
20:28 yaryarrr but in the debug i was able to run a highstate and all that business
20:30 Ztyx joined #salt
20:30 Ztyx joined #salt
20:32 nitay iggy: any ideas?
20:32 iggy nitay: not really, looks sane
20:33 DammitJim joined #salt
20:33 evilrob joined #salt
20:33 nitay iggy: what should I do - this is quite a blocker for me, cant really use salt cause of this
20:34 nitay breaks a bunch of states
20:35 DammitJim man, I am trying to start a service but it returns false
20:35 iggy open an issue and hope the devs look at it
20:35 iggy pay for support
20:35 iggy I don't really know
20:35 bhosmer joined #salt
20:36 DammitJim how do I "install" a service with saltstack?
20:36 baweaver joined #salt
20:37 tvinson DammitJim: either pkg.installed or service.enabled or both depending on what you mean
20:38 PredatorVI DammitJim:  What service are you needing?
20:38 DammitJim weird
20:38 DammitJim I guess one needs to run initctl reload-configuration when one adds a new conf file to /etc/init.d
20:39 PredatorVI DammitJim:  I do that with our custom upstart script.
20:40 sk_0 joined #salt
20:41 DanyC PredatorVI: if you still around, i remember you were looking at sorting out your rabbitmq state. I'm currently at the stage where i got all this wire https://bpaste.net/show/fdade796920a however what i don't like is the need to stick in /etc/hosts the short hostname (not FQDN) otherwise Rabbit will go nuts. Seeing the reedit topic https://www.reddit.com/r/saltstack/comments/3hmj51/saltmine_frustrations/ i was wonder if you could share how
20:41 saltstackbot [REDDIT] salt-mine frustrations (self.saltstack) | 0 points (50.0%) | 2 comments | Posted by SpaceJesusOnAStick | Created at 2015-08-19 - 19:48:36
20:41 programmerq joined #salt
20:43 zacdev joined #salt
20:45 |_[O_O]_| afternoon gents, is there a way to get salt-call pillar.item to spit out the dictionary which is rendered from yaml?
20:47 nitay filed a bug for my issue - https://github.com/saltstack/salt/issues/26493
20:47 saltstackbot [#26493]title: pip.installed state not found | salt master:...
20:49 iggy |_[O_O]_|: --out=yaml
20:49 iggy maybe
20:49 coval3nce_ joined #salt
20:50 evidence so it appears when using pyobjects all module functions are run first, the state ones?  it doesn't appear you can mingle the ordering
20:53 PredatorVI DanyC:  I'll admit my n00bness with rabbitmq and state that I didn't know that the short host name was a requirement.  It just so happened that by default we add the short and long name of the system name to our /etc/hosts by default.
20:53 murrdoc joined #salt
20:58 DanyC PredatorVI: ahh, i'm avoiding (at least trying :) ) to go via  DNS resolution but i have to make this exception for Rabbit which makes me yeld ...  if anyone knows a way how to achive it, pls shout !!
21:00 yaryarrr iggy: can you think of any reason i can run a highstate without issue running salt-master in debug, but not as a service?
21:01 rideh joined #salt
21:02 yomilk joined #salt
21:06 hal58th joined #salt
21:08 dthom91 joined #salt
21:11 evilrob joined #salt
21:14 rideh joined #salt
21:15 ntropy we have a colo that has terrible connectivity to the master and i occasionally find minion process die on nodes in that colo
21:15 ntropy well, im guessing the minions die because of connectivity issues, but im not certain
21:15 dopesong joined #salt
21:16 ntropy the question is, is running the minion with more verbose logging the way to troubleshoot this?
21:16 ntropy i dont currenly see anything in the minion or master logs about that minion, default logging level (info?)
21:21 rideh joined #salt
21:23 thefish joined #salt
21:25 iggy depending on how busy your setup is, you could try `cache_sreqs: False`
21:25 baweaver joined #salt
21:26 iggy but yeah, debugging is mostly going to come back to logging
21:27 iggy if you aren't running the latest version, I would definitely update as well... we had endless trouble with wonky networks before 2015.2
21:29 markm joined #salt
21:29 capricorn_1 joined #salt
21:31 Akhter joined #salt
21:33 ntropy thanks for the ideas, we are running 2014.7.0 there still
21:33 iggy what's the master?
21:34 ntropy 2015.5.2
21:35 iggy you could try one and see
21:35 sk_0 joined #salt
21:36 ajw0100 joined #salt
21:38 freelock joined #salt
21:39 ntropy yes, that should not be too complicated (change approval etc :)
21:41 Ztyx1 joined #salt
21:41 iggy well, depending on your setup, you could just spin up a new instance/host... but I guess that would still need approval some places
21:44 fyb3r left #salt
21:47 shaggy_surfer joined #salt
21:51 freelock joined #salt
21:52 dthom91 joined #salt
21:53 fgimian joined #salt
21:58 wm-bot476 joined #salt
22:06 wm-bot4 joined #salt
22:06 otter768 joined #salt
22:10 dthom91 joined #salt
22:14 yomilk joined #salt
22:15 ajw0100 joined #salt
22:17 viq joined #salt
22:22 hal58th joined #salt
22:27 mosen joined #salt
22:29 hasues joined #salt
22:30 nitay joined #salt
22:30 rideh joined #salt
22:35 sbogg joined #salt
22:37 evilrob joined #salt
22:41 PredatorVI joined #salt
22:41 Gabemo joined #salt
22:45 RedundancyD joined #salt
22:46 ajw0100 joined #salt
22:47 rhand joined #salt
22:49 KyleG joined #salt
22:49 KyleG joined #salt
22:56 nitay joined #salt
22:57 RedundancyD joined #salt
22:58 pravka joined #salt
22:59 baweaver joined #salt
22:59 otter768 joined #salt
23:00 ahammond I'm seeing the following error: 2015-08-19 16:00:20,260 [salt.loaded.ext.pillar.pillar_files      ][WARNING ][20433] (<type 'exceptions.TypeError'>, TypeError('coercing to Unicode: need string or buffer, dict found',), <traceback object at 0x1fb1998>)
23:00 ahammond any suggestions where I should look to locate it?
23:01 pm90_ joined #salt
23:03 evilrob joined #salt
23:04 murrdoc uneedthatutf8
23:04 freelock joined #salt
23:06 hasues left #salt
23:07 breakingmatter joined #salt
23:11 mrmarv joined #salt
23:12 Aidin joined #salt
23:19 freelock joined #salt
23:20 PredatorVI joined #salt
23:22 sav joined #salt
23:23 dingo_ joined #salt
23:31 forrest iggy: Do you remember if there were problems with refresh from pkg.installed on 2014.7?
23:32 forrest I had to downgrade to that to work around some issues, and now sometimes it seems like the refresh option doesn't work
23:37 sunkist joined #salt
23:38 SheetiS joined #salt
23:53 aqua^c joined #salt
23:59 TheoSLC joined #salt
23:59 TheoSLC salt salt-api is not allowing me to login with pam.  gives me "Authentication failure of type "eauth" occurred"  Am I missing anything?

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary