| *** gvincent has quit IRC | 01:04 | |
| *** gvincent has joined #ara | 01:04 | |
| *** bcoca has quit IRC | 01:52 | |
| *** robertdebock has joined #ara | 04:46 | |
| *** robertdebock has quit IRC | 04:53 | |
| *** helloweenx has joined #ara | 09:59 | |
| helloweenx | hey, i'm back with quick one - can i make ARA to not record single variable? | 09:59 |
|---|---|---|
| Xaroth | as in https://ara.readthedocs.io/en/stable/configuration.html#ara-ignore-parameters ? | 11:19 |
| helloweenx | actually tried that, but i'm not sure how to use it.. is it path to file with variables, or is it variable itself? tried both, still see value of variable in ara report | 11:38 |
| dmsimard | helloweenx: what do you mean by variable ? In a file ? In a result ? | 12:18 |
| helloweenx | i just dont want ARA to record password, which is variable supplied from file | 12:19 |
| dmsimard | But where is that variable in ARA ? | 12:20 |
| helloweenx | in tasks, recorded in module "mail" parameter "body" | 12:21 |
| dmsimard | helloweenx: you need to use no_log in your task | 12:25 |
| dmsimard | In your ansible playbook | 12:25 |
| dmsimard | That's not ARA, that's Ansible | 12:25 |
| helloweenx | oh. so there is no way to do this with ARA_IGNORE_PARAMETERS in ansible.cfg [ara]? | 12:26 |
| helloweenx | well i tried no_log and now i have no output whatsoever :-D thats not really what i want | 12:32 |
| dmsimard | helloweenx: if your password shows in ARA, it would show in the regular ansible-playbook console stdout | 12:34 |
| dmsimard | If you don't want to set no_log, you can consider patching the module to not log a specific argument | 12:35 |
| dmsimard | This isn't ARA's job | 12:35 |
| dmsimard | ARA takes whatever Ansible sends to it | 12:35 |
| helloweenx | hmm | 12:41 |
| helloweenx | so how this parameter actualy work? ARA_IGNORE_PARAMETERS | 12:42 |
| helloweenx | it seems like perfect fit for my example with description from documentation | 12:42 |
| helloweenx | If, for example, you use extra_vars to send a password or secret variable to your playbooks, it is likely you don’t want this saved in ARA’s database. | 12:42 |
| dmsimard | helloweenx: parameters are command line arguments | 12:54 |
| dmsimard | ansible-playbook -e foo=bar | 12:54 |
| dmsimard | apollo13: do you have an opinion on https://docs.ansible.com/ansible/2.6/modules/django_manage_module.html ? | 12:56 |
| helloweenx | well thats too bad, you can hide parameters and you cant hide something from playbook | 12:59 |
| helloweenx | anyways thanks for conclusion ;) | 12:59 |
| helloweenx | dmsimard: will be ACL based access to web interface in ARA 1.0? | 13:01 |
| dmsimard | helloweenx: what module are you using ? I maintain that the issue is with Ansible | 13:02 |
| dmsimard | Modules have a built in method to not print things such as passwords | 13:02 |
| dmsimard | 1.0 will ship without authentication, it's not certain yet if it's something that would land in a later release | 13:03 |
| helloweenx | in user module i can see in ARA this: "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER", | 13:05 |
| helloweenx | which is great | 13:05 |
| helloweenx | but in mail module, where i am sending password to just created user i can see unencrypted password | 13:06 |
| dmsimard | Ah so it's part of an email body | 13:12 |
| helloweenx | yea | 13:17 |
| *** irclogbot_0 has joined #ara | 13:18 | |
| *** irclogbot_0 has quit IRC | 13:18 | |
| *** irclogbot_0 has joined #ara | 13:19 | |
| helloweenx | damn, i can even see it in task, which loading variables | 13:20 |
| *** irclogbot_0 has quit IRC | 13:22 | |
| *** irclogbot_0 has joined #ara | 13:24 | |
| *** irclogbot_0 has quit IRC | 13:37 | |
| *** irclogbot_0 has joined #ara | 13:38 | |
| *** bcoca has joined #ara | 13:40 | |
| dmsimard | I would use no_log | 13:52 |
| dmsimard | Unless there's something critical in that output that would make it useful for troubleshooting purposes | 13:52 |
| helloweenx | yea for now i'll go for that, but feature to not log single variable would be cool in future releases (if its even possible, still not sure if its ansible side or ARA side) | 13:58 |
| helloweenx | thank you once more ;) | 13:58 |
| helloweenx | btw not even one "sorry"? really?! :-D | 14:00 |
| dmsimard | helloweenx: parameters and host facts are things that ARA goes a little bit out of it's way to recover and there are options to filter things accordingly | 14:01 |
| dmsimard | the rest is just sent from ansible as-is | 14:02 |
| dmsimard | and are things that would be printed on the ansible playbook console | 14:02 |
| dmsimard | in 1.0 there will be another knob to filter things out but it will be for files | 14:02 |
| dmsimard | because 1.0 recovers everything | 14:03 |
| dmsimard | see the no_log on the single argument here: https://github.com/ansible/ansible/blob/devel/lib/ansible/modules/database/mysql/mysql_user.py#L531 | 14:07 |
| *** irclogbot_0 has quit IRC | 14:07 | |
| *** tbielawa has joined #ara | 14:12 | |
| *** irclogbot_0 has joined #ara | 14:17 | |
| *** irclogbot_0 has quit IRC | 14:22 | |
| helloweenx | dmsimard: cool, thanks for tip | 14:26 |
| -openstackstatus- NOTICE: Zuul and Nodepool services are being restarted to migrate them to a new Zookeeper cluster. THis brings us an HA database running on newer servers. | 14:38 | |
| *** robertdebock has joined #ara | 14:43 | |
| *** irclogbot_0 has joined #ara | 14:50 | |
| *** irclogbot_0 has quit IRC | 14:51 | |
| *** irclogbot_0 has joined #ara | 15:01 | |
| *** irclogbot_0 has quit IRC | 15:01 | |
| *** irclogbot_0 has joined #ara | 15:06 | |
| *** robertdebock has quit IRC | 15:06 | |
| *** themurph has joined #ara | 15:18 | |
| *** irclogbot_0 has quit IRC | 15:21 | |
| -openstackstatus- NOTICE: The Zuul and Nodepool database transition is complete. Changes updated during the Zuul outage may need to be rechecked. | 15:29 | |
| *** robertdebock has joined #ara | 15:36 | |
| *** robertdebock has quit IRC | 15:43 | |
| *** sshnaidm|ruck is now known as sshnaidm|bbl | 15:54 | |
| *** irclogbot_0 has joined #ara | 15:55 | |
| *** irclogbot_0 has quit IRC | 15:55 | |
| apollo13 | Xaroth: hey, I know that django does not require a settings.py; but telling an enduser to do settings.configure if they want to override stuff is not really a good idea -- curious, what prompted your comment? | 16:03 |
| apollo13 | dmsimard: it kinda works, has a few issues with idempotence though | 16:03 |
| apollo13 | dmsimard: and well I fixed the ara issues with it for ansible 2.8 :þ (probably gets backported to 2.7.1) | 16:04 |
| apollo13 | Xaroth: and yes, I have seen the turtles all the way talk live ;) | 16:04 |
| apollo13 | + down | 16:04 |
| Xaroth | apollo13: it seems unwise to let endusers mess with django settings, as that means you'll get all kinds of weird bug reports that aren't bugs.. why not include them in the ARA config setings, and pass them on to django? | 16:15 |
| apollo13 | Xaroth: that is what I am doing | 16:16 |
| apollo13 | ie see https://review.openstack.org/#/c/612446/ | 16:16 |
| Xaroth | my apologies then | 16:17 |
| apollo13 | Xaroth: no worries, I am open to suggestions :) | 16:17 |
| *** irclogbot_0 has joined #ara | 16:22 | |
| *** irclogbot_0 has quit IRC | 16:22 | |
| *** mnaser has quit IRC | 16:26 | |
| *** mnaser has joined #ara | 16:26 | |
| dmsimard | apollo13: oh, didn't realize you were a contributor to the module haha | 16:29 |
| apollo13 | dmsimard: I am not; I just fixed the issues I came along when using ara (it failed because the module didn't return a bool as changed) | 16:30 |
| *** tbielawa is now known as tbielawa|mtgs | 16:30 | |
| dmsimard | apollo13: ah, reason I ask is because I've tried ansible-runner a bit out of curiosity and it's not bad | 16:35 |
| *** irclogbot_0 has joined #ara | 16:35 | |
| *** irclogbot_0 has quit IRC | 16:35 | |
| dmsimard | was wondering what kind of opportunities there was for ara with it, if any | 16:35 |
| apollo13 | is ansible-runner the thing awx uses? | 16:36 |
| *** robertdebock has joined #ara | 16:58 | |
| *** irclogbot_0 has joined #ara | 16:59 | |
| *** irclogbot_0 has quit IRC | 16:59 | |
| *** sshnaidm|bbl is now known as sshnaidm|off | 17:15 | |
| *** harlowja has joined #ara | 17:27 | |
| dmsimard | Not yet, but they want to use it | 17:30 |
| *** tbielawa|mtgs is now known as tbielawa|lunch | 17:52 | |
| *** robertdebock has quit IRC | 18:08 | |
| *** robertdebock has joined #ara | 18:20 | |
| *** robertdebock has quit IRC | 18:24 | |
| *** robertdebock has joined #ara | 18:25 | |
| *** openstackgerrit has joined #ara | 19:04 | |
| openstackgerrit | J Morse proposed openstack/ara master: fix minor doc typo https://review.openstack.org/613399 | 19:04 |
| *** irclogbot_0 has joined #ara | 19:06 | |
| *** irclogbot_0 has quit IRC | 19:06 | |
| *** irclogbot_0 has joined #ara | 19:23 | |
| *** irclogbot_0 has quit IRC | 19:51 | |
| *** irclogbot_0 has joined #ara | 19:59 | |
| *** tbielawa|lunch is now known as tbielawa | 20:07 | |
| *** robertdebock has quit IRC | 20:17 | |
| *** robertdebock has joined #ara | 20:18 | |
| *** irclogbot_0 has quit IRC | 20:22 | |
| *** robertdebock has quit IRC | 20:22 | |
| *** robertdebock has joined #ara | 20:43 | |
| *** robertdebock has quit IRC | 20:55 | |
| *** tbielawa is now known as tbielawa|g0n3 | 21:04 | |
| *** irclogbot_0 has joined #ara | 21:13 | |
| *** themurph has quit IRC | 21:56 | |
| *** robertdebock has joined #ara | 22:03 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!