*** Jmainguy has joined #ara | 00:01 | |
*** gvincent has quit IRC | 00:07 | |
*** gvincent has joined #ara | 00:08 | |
*** gvincent has quit IRC | 00:12 | |
*** gvincent has joined #ara | 00:13 | |
*** gvincent has quit IRC | 00:14 | |
*** gvincent has joined #ara | 00:14 | |
*** gvincent has quit IRC | 00:21 | |
*** gvincent has joined #ara | 00:21 | |
*** gvincent has quit IRC | 00:28 | |
*** gvincent has joined #ara | 00:28 | |
*** gvincent has quit IRC | 00:32 | |
*** gvincent has joined #ara | 00:32 | |
*** jungleslow has quit IRC | 05:42 | |
*** gvincent has quit IRC | 05:53 | |
*** gvincent has joined #ara | 05:53 | |
*** gvincent has quit IRC | 06:32 | |
*** gvincent has joined #ara | 06:33 | |
apollo13 | dmsimard: I didn't do anything :) | 07:21 |
---|---|---|
*** themroc has joined #ara | 07:44 | |
*** zbr|pto is now known as zbr | 08:23 | |
*** gvincent has quit IRC | 10:28 | |
*** gvincent has joined #ara | 10:28 | |
*** gvincent has quit IRC | 10:49 | |
*** gvincent has joined #ara | 10:49 | |
*** gvincent has quit IRC | 10:50 | |
*** gvincent has joined #ara | 10:51 | |
*** gvincent has quit IRC | 12:23 | |
*** gvincent has joined #ara | 12:23 | |
ara-slack | chief_wrench: hi everyone | 13:14 |
ara-slack | chief_wrench: we are evaluating ara for our shop | 13:21 |
ara-slack | chief_wrench: and we could use a little advice | 13:22 |
ara-slack | chief_wrench: we are working with the same ansible scripts from distributed locations | 13:22 |
ara-slack | chief_wrench: and also have some automated deployments via gitlab CI | 13:23 |
ara-slack | chief_wrench: Therefore I assume this requires a database that is reacheable over the internet | 13:24 |
ara-slack | chief_wrench: mysql or postgres | 13:25 |
ara-slack | chief_wrench: my question: how does everyone secure their connections to the database? | 13:25 |
ara-slack | chief_wrench: I somehow do not like the idea of exposing the database directly for everyone to try to hack | 13:26 |
ara-slack | chief_wrench: ssh tunnels maybe? | 13:26 |
ara-slack | chief_wrench: Looking forward to some juicy ideas | 13:27 |
*** apollo13 has quit IRC | 13:43 | |
*** apollo13 has joined #ara | 13:45 | |
*** e-tienne has joined #ara | 14:25 | |
*** e-tienne is now known as etienne | 14:27 | |
dmsimard | @chief_wrench aggregation and authentication is easier in the upcoming ara 1.0 | 14:49 |
dmsimard | In 0 | 14:49 |
dmsimard | In 0.x, you need to put the database credentials directly in your ansible.cfg or env variables, it works but it's not awesome | 14:50 |
dmsimard | In 1.0, you have an API with different ways of approaching security: https://ara.readthedocs.io/en/feature-1.0/api-security.html | 14:51 |
dmsimard | There's a demo of the API here: https://api.demo.recordsansible.org/api/v1/ | 14:52 |
dmsimard | I should be able to tag alpha4 for 1.0 by the end of the week but the API itself is already very usable. | 14:55 |
*** themroc has quit IRC | 15:26 | |
*** gvincent has quit IRC | 15:28 | |
*** gvincent has joined #ara | 15:29 | |
ara-slack | robert.sossomon: @robert.sossomon has joined the channel | 16:28 |
ara-slack | robert.sossomon: I'm running AWX and have multiple venv set up under it. I've tried adding ansible.cfg to one of them AND to the git project (and sub-directory for another project inside it where the main.yml is called) but I still don't have any data in ARA | 16:31 |
dmsimard | @robert.sossomon: when I got ara working with awx, it was by installing ara in a different venv (i.e, not the default ansible one because of this issue: https://github.com/ansible/awx/issues/1737 ) and by setting the path to the ara callback plugin directory in the (global?) awx settings | 16:41 |
dmsimard | the issue has a screenshot of what it would look like: https://user-images.githubusercontent.com/1291204/49156361-37129080-f2eb-11e8-8a2c-6bf6f564dfd2.png | 16:42 |
ara-slack | robert.sossomon: Yeah, I found that bug and did that, ARA still is empty.. I'm going to put it in every env and see if that helps | 16:51 |
ara-slack | robert.sossomon: I'm running it with python3.6 which may be further complicating it | 16:51 |
dmsimard | shouldn't be any issues related to python3.6 | 17:05 |
dmsimard | ara runs fine on python3 | 17:05 |
dmsimard | if there is an issue, it's a bug | 17:05 |
dmsimard | @robert.sossomon: is there a database at the default location ? ~/.ara/ansible.sqlite -- relative to awx, that's probably /var/lib/awx/.ara but I don't have an instance running right now to confirm | 17:07 |
dmsimard | there's two possible outcomes | 17:07 |
dmsimard | 1) the database is there, which means the callback was at one point or another loaded correctly -- but the web interface isn't able to access that database or isn't looking at the right place (i.e, if running under a different user the ~/.ara/ansible.sqlite path is different) | 17:08 |
dmsimard | 2) the database isn't there, which means the callback was never loaded properly | 17:09 |
dmsimard | Putting AWX aside for a moment, enabling ara for Ansible requires installing ara for the same python interpreter as Ansible (in a virtualenv or not) and then setting the callback_plugins configuration to look at the right location for the callback plugin | 17:11 |
dmsimard | That's all there is to it | 17:12 |
*** etienne has quit IRC | 18:17 | |
*** gvincent has quit IRC | 18:21 | |
*** gvincent has joined #ara | 18:21 | |
*** etienne has joined #ara | 18:21 | |
ara-slack | robert.sossomon: # find / -name "ansible.sqlite" | 18:31 |
ara-slack | /root/.ara/ansible.sqlite | 18:31 |
ara-slack | LS -ALF /ROOT/.ARA/ANSIBLE.SQLITE | 18:31 |
ara-slack | -rw-r--r-- 1 root root 33792 Apr 2 11:42 /root/.ara/ansible.sqlite | 18:31 |
ara-slack | robert.sossomon: Found the sqlite, but it hasn't updated at all from any of the ansible runs | 18:31 |
*** openstackgerrit has joined #ara | 18:38 | |
openstackgerrit | David Moreau Simard proposed openstack/ara feature/1.0: Update the recording workflow diagram to be more accurate https://review.openstack.org/649424 | 18:38 |
dmsimard | @robert.sossomon: documenting the proper set up for usage with AWX has been on the to-do list, I'd love to help but I need to go. Happy to help later if you haven't figured it out by then. | 20:26 |
*** harlowja has joined #ara | 22:10 | |
*** etienne has quit IRC | 22:46 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!