Tuesday, 2019-04-02

*** Jmainguy has joined #ara00:01
*** gvincent has quit IRC00:07
*** gvincent has joined #ara00:08
*** gvincent has quit IRC00:12
*** gvincent has joined #ara00:13
*** gvincent has quit IRC00:14
*** gvincent has joined #ara00:14
*** gvincent has quit IRC00:21
*** gvincent has joined #ara00:21
*** gvincent has quit IRC00:28
*** gvincent has joined #ara00:28
*** gvincent has quit IRC00:32
*** gvincent has joined #ara00:32
*** jungleslow has quit IRC05:42
*** gvincent has quit IRC05:53
*** gvincent has joined #ara05:53
*** gvincent has quit IRC06:32
*** gvincent has joined #ara06:33
apollo13dmsimard: I didn't do anything :)07:21
*** themroc has joined #ara07:44
*** zbr|pto is now known as zbr08:23
*** gvincent has quit IRC10:28
*** gvincent has joined #ara10:28
*** gvincent has quit IRC10:49
*** gvincent has joined #ara10:49
*** gvincent has quit IRC10:50
*** gvincent has joined #ara10:51
*** gvincent has quit IRC12:23
*** gvincent has joined #ara12:23
ara-slackchief_wrench: hi everyone13:14
ara-slackchief_wrench: we are evaluating ara for our shop13:21
ara-slackchief_wrench: and we could use a little advice13:22
ara-slackchief_wrench: we are working with the same ansible scripts from distributed locations13:22
ara-slackchief_wrench: and also have some automated deployments via gitlab CI13:23
ara-slackchief_wrench: Therefore I assume this requires a database that is reacheable over the internet13:24
ara-slackchief_wrench: mysql or postgres13:25
ara-slackchief_wrench: my question: how does everyone secure their connections to the database?13:25
ara-slackchief_wrench: I somehow do not like the idea of exposing the database directly for everyone to try to hack13:26
ara-slackchief_wrench: ssh tunnels maybe?13:26
ara-slackchief_wrench: Looking forward to some juicy ideas13:27
*** apollo13 has quit IRC13:43
*** apollo13 has joined #ara13:45
*** e-tienne has joined #ara14:25
*** e-tienne is now known as etienne14:27
dmsimard@chief_wrench aggregation and authentication is easier in the upcoming ara 1.014:49
dmsimardIn 014:49
dmsimardIn 0.x, you need to put the database credentials directly in your ansible.cfg or env variables, it works but it's not awesome14:50
dmsimardIn 1.0, you have an API with different ways of approaching security: https://ara.readthedocs.io/en/feature-1.0/api-security.html14:51
dmsimardThere's a demo of the API here: https://api.demo.recordsansible.org/api/v1/14:52
dmsimardI should be able to tag alpha4 for 1.0 by the end of the week but the API itself is already very usable.14:55
*** themroc has quit IRC15:26
*** gvincent has quit IRC15:28
*** gvincent has joined #ara15:29
ara-slackrobert.sossomon: @robert.sossomon has joined the channel16:28
ara-slackrobert.sossomon: I'm running AWX and have multiple venv set up under it.  I've tried adding ansible.cfg to one of them AND to the git project (and sub-directory for another project inside it where the main.yml is called) but I still don't have any data in ARA16:31
dmsimard@robert.sossomon: when I got ara working with awx, it was by installing ara in a different venv (i.e, not the default ansible one because of this issue: https://github.com/ansible/awx/issues/1737 ) and by setting the path to the ara callback plugin directory in the (global?) awx settings16:41
dmsimardthe issue has a screenshot of what it would look like: https://user-images.githubusercontent.com/1291204/49156361-37129080-f2eb-11e8-8a2c-6bf6f564dfd2.png16:42
ara-slackrobert.sossomon: Yeah, I found that bug and did that, ARA still is empty..  I'm going to put it in every env and see if that helps16:51
ara-slackrobert.sossomon: I'm running it with python3.6 which may be further complicating it16:51
dmsimardshouldn't be any issues related to python3.617:05
dmsimardara runs fine on python317:05
dmsimardif there is an issue, it's a bug17:05
dmsimard@robert.sossomon: is there a database at the default location ? ~/.ara/ansible.sqlite -- relative to awx, that's probably /var/lib/awx/.ara but I don't have an instance running right now to confirm17:07
dmsimardthere's two possible outcomes17:07
dmsimard1) the database is there, which means the callback was at one point or another loaded correctly -- but the web interface isn't able to access that database or isn't looking at the right place (i.e, if running under a different user the ~/.ara/ansible.sqlite path is different)17:08
dmsimard2) the database isn't there, which means the callback was never loaded properly17:09
dmsimardPutting AWX aside for a moment, enabling ara for Ansible requires installing ara for the same python interpreter as Ansible (in a virtualenv or not) and then setting the callback_plugins configuration to look at the right location for the callback plugin17:11
dmsimardThat's all there is to it17:12
*** etienne has quit IRC18:17
*** gvincent has quit IRC18:21
*** gvincent has joined #ara18:21
*** etienne has joined #ara18:21
ara-slackrobert.sossomon: # find / -name "ansible.sqlite"18:31
ara-slack/root/.ara/ansible.sqlite18:31
ara-slackLS -ALF /ROOT/.ARA/ANSIBLE.SQLITE18:31
ara-slack -rw-r--r-- 1 root root 33792 Apr  2 11:42 /root/.ara/ansible.sqlite18:31
ara-slackrobert.sossomon: Found the sqlite, but it hasn't updated at all from any of the ansible runs18:31
*** openstackgerrit has joined #ara18:38
openstackgerritDavid Moreau Simard proposed openstack/ara feature/1.0: Update the recording workflow diagram to be more accurate  https://review.openstack.org/64942418:38
dmsimard@robert.sossomon: documenting the proper set up for usage with AWX has been on the to-do list, I'd love to help but I need to go. Happy to help later if you haven't figured it out by then.20:26
*** harlowja has joined #ara22:10
*** etienne has quit IRC22:46

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!