Re: installing paddles via ansible

[Loic Dachary <loic@dachary.org>]

Hi Thierry,

Thanks for the hand holding today and congrats on your first paddles installation :-) To summarize what we did:

* git clone --recursive -b stable-1.9 https://github.com/ansible/ansible.git
* cd ansible ; source hacking/env-setup
* cd ceph-cm-ansible
* cat > /etc/ansible/secrets/paddles.yml <<EOF
---
db_pass: toto
EOF
* cat > host <<EOF
[paddles]
149.202.170.114
[paddles:vars]
ansible_ssh_user=ubuntu
ansible_ssh_keys=/home/loic/.ssh/id_rsa
EOF
ansible-playbook -v -i host paddles.yml

firefox http://149.202.170.114:8080/
{"_help_": {"docs": "https://github.com/ceph/paddles", "extensions": {"Chrome": "https://chrome.google.com/webstore/detail/jsonview/chklaanhfefbnpoihckbnefhakgolnmc", "Firefox": "https://addons.mozilla.org/en-US/firefox/addon/jsonview/"}}, "last_job": " ago", "last_run": " ago"}

The fixes we made have been added to a pull request at https://github.com/ceph/ceph-cm-ansible/pull/219

I'll also remember that:

* Whenever an error message such as:

TASK: [paddles | Set paddles_address] ***************************************** 
fatal: [149.202.170.114] => error while evaluating conditional: not paddles_address.startswith('http')

is displayed, finding the file responsible for it is best served by grepping the string after the | "Set paddles_address" in this case. There is no way to ask ansible to display the line and the file where the error happens, in the same way a compiler would.

* I discovered the expected structure of the secret file content by checking out the secret ansible secret repository, running find | grep paddles and uncrypting the secret file using the password found on a secret machine to which I luckily had access. But I did not show you the secret password so it's still a secret.

Cheers

On 02/03/2016 13:09, Loic Dachary wrote:
> Hi Zack,
> 
> I'm running ansible to deploy paddles as follows. I am missing secrets. But I have no secrets :-) This is just a standalone instance for tests, what would be the minimal way to define the secrets paddle needs ?
> 
> Thanks in advance for your help !
> 
> $ cat host
> [paddles]
> 167.114.243.17
> [paddles:vars]
> ansible_ssh_user=ubuntu
> ansible_ssh_keys=/home/loic/.ssh/id_rsa
> 
> (virtualenv)loic@fold:~/software/ceph/ceph-cm-ansible$ ansible-playbook -i host paddles.yml 
> 
> PLAY ***************************************************************************
> 
> TASK [setup] *******************************************************************
> ok: [167.114.243.17]
> 
> TASK [users : Merge extra_admin_users into managed_admin_users] ****************
> skipping: [167.114.243.17]
> 
> TASK [users : Remove managed_admin_users from managed_users] *******************
> skipping: [167.114.243.17]
> 
> TASK [users : Filter the managed_users list] ***********************************
> skipping: [167.114.243.17]
> 
> TASK [users : Filter the managed_admin_users list] *****************************
> skipping: [167.114.243.17]
> 
> TASK [users : Create all admin users with sudo access.] ************************
> [DEPRECATION WARNING]: Using bare variables is deprecated. Update your 
> playbooks so that the environment value uses the full variable syntax 
> ('{{managed_admin_users}}'). This feature will be removed in a future release. 
> Deprecation warnings can be disabled by setting deprecation_warnings=False in 
> ansible.cfg.
> 
> TASK [users : Create all users without sudo access.] ***************************
> [DEPRECATION WARNING]: Using bare variables is deprecated. Update your 
> playbooks so that the environment value uses the full variable syntax 
> ('{{managed_users}}'). This feature will be removed in a future release. 
> Deprecation warnings can be disabled by setting deprecation_warnings=False in 
> ansible.cfg.
> 
> TASK [users : Update authorized_keys for each user.] ***************************
> [DEPRECATION WARNING]: Using bare variables is deprecated. Update your 
> playbooks so that the environment value uses the full variable syntax 
> ('{{managed_users|list + managed_admin_users|list}}'). This feature will be 
> removed in a future release. Deprecation warnings can be disabled by setting 
> deprecation_warnings=False in ansible.cfg.
> 
> TASK [users : Filter the revoked_users list] ***********************************
> skipping: [167.114.243.17]
> 
> TASK [users : Remove revoked users] ********************************************
> [DEPRECATION WARNING]: Using bare variables is deprecated. Update your 
> playbooks so that the environment value uses the full variable syntax 
> ('{{revoked_users}}'). This feature will be removed in a future release. 
> Deprecation warnings can be disabled by setting deprecation_warnings=False in 
> ansible.cfg.
> 
> TASK [common : Log the OS name, version and release] ***************************
> ok: [167.114.243.17] => {
>     "msg": "Host 167.114.243.17 is running Ubuntu 14.04 (trusty)"
> }
> 
> TASK [common : Including major version specific variables.] ********************
> ok: [167.114.243.17] => (item=/home/loic/software/ceph/ceph-cm-ansible/roles/common/vars/empty.yml)
> 
> TASK [common : include] ********************************************************
> skipping: [167.114.243.17]
> 
> TASK [common : include] ********************************************************
> included: /home/loic/software/ceph/ceph-cm-ansible/roles/common/tasks/apt_systems.yml for 167.114.243.17
> 
> TASK [common : Get the current timezone] ***************************************
> ok: [167.114.243.17]
> 
> TASK [common : Set the timezone in /etc/timezone] ******************************
> skipping: [167.114.243.17]
> 
> TASK [common : Inform the OS of the new timezone] ******************************
> skipping: [167.114.243.17]
> 
> TASK [common : include] ********************************************************
> included: /home/loic/software/ceph/ceph-cm-ansible/roles/common/tasks/kerberos.yml for 167.114.243.17
> 
> TASK [common : Install Kerberos Packages (RedHat)] *****************************
> skipping: [167.114.243.17]
> 
> TASK [common : Update apt cache.] **********************************************
> ok: [167.114.243.17]
> 
> TASK [common : Install Kerberos Packages (Debian)] *****************************
> changed: [167.114.243.17]
> 
> TASK [common : Add krb5 config file] *******************************************
> changed: [167.114.243.17]
> 
> TASK [users : Merge extra_admin_users into managed_admin_users] ****************
> skipping: [167.114.243.17]
> 
> TASK [users : Remove managed_admin_users from managed_users] *******************
> skipping: [167.114.243.17]
> 
> TASK [users : Filter the managed_users list] ***********************************
> skipping: [167.114.243.17]
> 
> TASK [users : Filter the managed_admin_users list] *****************************
> skipping: [167.114.243.17]
> 
> TASK [users : Create all admin users with sudo access.] ************************
> [DEPRECATION WARNING]: Using bare variables is deprecated. Update your 
> playbooks so that the environment value uses the full variable syntax 
> ('{{managed_admin_users}}'). This feature will be removed in a future release. 
> Deprecation warnings can be disabled by setting deprecation_warnings=False in 
> ansible.cfg.
> 
> TASK [users : Create all users without sudo access.] ***************************
> [DEPRECATION WARNING]: Using bare variables is deprecated. Update your 
> playbooks so that the environment value uses the full variable syntax 
> ('{{managed_users}}'). This feature will be removed in a future release. 
> Deprecation warnings can be disabled by setting deprecation_warnings=False in 
> ansible.cfg.
> 
> TASK [users : Update authorized_keys for each user.] ***************************
> [DEPRECATION WARNING]: Using bare variables is deprecated. Update your 
> playbooks so that the environment value uses the full variable syntax 
> ('{{managed_users|list + managed_admin_users|list}}'). This feature will be 
> removed in a future release. Deprecation warnings can be disabled by setting 
> deprecation_warnings=False in ansible.cfg.
> 
> TASK [users : Filter the revoked_users list] ***********************************
> skipping: [167.114.243.17]
> 
> TASK [users : Remove revoked users] ********************************************
> [DEPRECATION WARNING]: Using bare variables is deprecated. Update your 
> playbooks so that the environment value uses the full variable syntax 
> ('{{revoked_users}}'). This feature will be removed in a future release. 
> Deprecation warnings can be disabled by setting deprecation_warnings=False in 
> ansible.cfg.
> 
> TASK [paddles : Include secrets] ***********************************************
> fatal: [167.114.243.17]: FAILED! => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result"}
>  [WARNING]: Failure when attempting to use callback plugin
> (</home/loic/software/ceph/ceph-cm-
> ansible/callback_plugins/failure_log.CallbackModule object at 0x7ff9c738af10>):
> runner_on_failed() takes at least 3 arguments (3 given)
> 
> 
> NO MORE HOSTS LEFT *************************************************************
> 	to retry, use: --limit @paddles.retry
> 
> PLAY RECAP *********************************************************************
> 167.114.243.17             : ok=9    changed=2    unreachable=0    failed=1   
> 
> 

-- 
Loïc Dachary, Artisan Logiciel Libre
--
To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html