Just watched your 2023 Homelab Tour where you shared your 100k Creator Award. And here you are on the brink of 200k! Next Award will be well deserved. Keep up the great work/fun. You are much appreciated 😊
Something I'd be keen to see is a video about storing credentials securely, whether it be a key or an actual password - and retrieving it within Kestra.
Kestra looks cool, and it could combine a few tools I use professionally and at home. But, having no secrets manager and needing to taking everything down every time I need to add something is not an option. Paying for features is not a problem, but the only other tier next to 'free' is "talk to us". This is a really high barrier, while this is provided and managed in a free AWX setup. Also concurrency requires separate tasks in Kestra and writing extra domain specific YAML, which makes migrating more expensive.. Overall I'm not sold yet. The product looks cool, flashy (slick UI i must say), but these are show stoppers. Would have loved to play with shiny things though ;)
you should probably not circumvent permission problems by running the docker container as root... adding the following task after the local file creation does the trick just as well: - id: set_perm type: io.kestra.plugin.scripts.shell.Commands commands: - chmod 600 id_rsa
Hello Christian, Loved your work…!!! i really appreciate it, It would be a great help, if you can show us how can i control the flow execution based on the exit code of previous tasks in kestra
Does Kestra have a vault features to store secrets ? Inject SSH key in the container itself looks ok, but what about some other secret that you want to you use in the ansible playbook ? Do you really need to use the container environment variables each time you need to had a secret ?
Not sure why your not just using jenkins..... free open source docker image and have full devops CI/CD pipelines and also utlise github/git actions and your branches and have proper devops pipelines.... honestly jenkins is the best answer
Cool, I Didn't know Kestra going to look into it. Would be nice if Kestra also could run helm charts and docker-compose files. Going to look into that. My first thought was, but I have a homelab git repo, but that was anwered quickly. But.... Do you have a separate set of disaster recovery playbooks in a remote backup etc that you can use to setup the machines to run all this just from the shell? All this automation looks cool but bootstrapping it again by hand would not be fun.
very nice! The error about the key files being too open worries me though. The correct permissions of id_rsa is 0600, so you could try to chmod it right before the ansible-playbook command. I'd be interested if that works.
Looks powerful, but a bit OTT for my little homelab. I'm also already heavily invested in NodeRed for automating lots of things (like my Proxmox node backups to PBS). Interesting though. I can only learn so many things and this might be one too far. Also.. YAML makes me shudder.
What, in your opinion, is the inflection point between time spent doing a task vs time spent automating a task? This video is cool, just wondering what your thoughts are, given in an enterprise environment, you'd typically spend a lot of time automating something that'll be reused many times. In a homelab setting, that's not necessarily the case, but you do get the opportunity to learn without the ramifications of breaking a "real" production environment.
That's a great question, I've recently covered that in my livestream, how useful is automation really in a HomeLab. Because you can argue it's wasting time :) again maybe that recording might be interesting for you
Hey Christian, your video is very helpful, but can you tell me how I can pass the password from the inventory only, I don't want to use key based authentication.
I'm still running Ansible Semaphore for testing, but most things I'm doing in Kestra now. Still some Ansible Semaphore content is planned for the future :)
The more of these videos you make the less respect I have for you. You’ve turned yourself again into an advertiser for your sponsors and in a few weeks it’ll be something else you have been using in your lab. I’m over it - cheerio
Personally, I found it very helpful as I've been eyeing this product since recent discovery -- sure we may move away from it in the future but that is the point of a homelab in the first place -- trial all the things!!
Ansible and Terraform are both Infrastructure as Code tools. Ansible is more focused on configuration management and Terraform is more focused on deployment. Terraform + Ansible = Terrible :)
The only place I really use ansible lately is using Packer with the ansible provisioner to build AWS EC2 AMIs and then using the data resource to retrieve those amis when deoloying ec2. Works not too bad
I want to disagree with the first part of the video that you need to run the commands in your project. With Semaphore that you talked about a while ago is made for this scenario.
![[TH] 2024 PMGC League | Survival Stage วันที่ 1 | PUBG MOBILE Global Championship](http://i.ytimg.com/vi/FVFT-PFwU80/mqdefault.jpg)
this channel is criminally underrated
Thank you :D
I completely agree.
I’ve basically learned how to be a sysadmin from watching this channel 😅
Just watched your 2023 Homelab Tour where you shared your 100k Creator Award. And here you are on the brink of 200k! Next Award will be well deserved. Keep up the great work/fun. You are much appreciated 😊
Thank you buddy ❤️ let's celebrate this on the next livestream :D
Something I'd be keen to see is a video about storing credentials securely, whether it be a key or an actual password - and retrieving it within Kestra.
Kestra looks cool, and it could combine a few tools I use professionally and at home. But, having no secrets manager and needing to taking everything down every time I need to add something is not an option. Paying for features is not a problem, but the only other tier next to 'free' is "talk to us". This is a really high barrier, while this is provided and managed in a free AWX setup.
Also concurrency requires separate tasks in Kestra and writing extra domain specific YAML, which makes migrating more expensive..
Overall I'm not sold yet. The product looks cool, flashy (slick UI i must say), but these are show stoppers. Would have loved to play with shiny things though ;)
Do u have any alternative in mind ? kindly suggest as i am also trying to evaluate the same.
There is Event-drive Ansible now, that might be worth checking out.
you should probably not circumvent permission problems by running the docker container as root... adding the following task after the local file creation does the trick just as well:
- id: set_perm
type: io.kestra.plugin.scripts.shell.Commands
commands:
- chmod 600 id_rsa
Hello Christian,
Loved your work…!!!
i really appreciate it,
It would be a great help, if you can show us how can i control the flow execution based on the exit code of previous tasks in kestra
If you automate it anyway, also manage the known hosts file with the server keys and not turn security in ssh off
Does Kestra have a vault features to store secrets ? Inject SSH key in the container itself looks ok, but what about some other secret that you want to you use in the ansible playbook ? Do you really need to use the container environment variables each time you need to had a secret ?
Enterprise only
Great video. Thanks you for your time. Will you look into Gitea for triggering Kestra?
Maybe, I currently review GitLab self-hosted and Gitea, will take some time until the videos are coming out though
it's basically jenkins with a nice interface and a paid option?
kinda yea
Not sure why your not just using jenkins..... free open source docker image and have full devops CI/CD pipelines and also utlise github/git actions and your branches and have proper devops pipelines.... honestly jenkins is the best answer
Top right....
What I want is a nice way to execute playbooks against custom servers in a nice UI
I am now trying to decide between using this or Ansible Semaphore
I prefer ansible and cronicle task scheduler for automating tasks in my homelab.
Cool, I Didn't know Kestra going to look into it. Would be nice if Kestra also could run helm charts and docker-compose files.
Going to look into that. My first thought was, but I have a homelab git repo, but that was anwered quickly.
But.... Do you have a separate set of disaster recovery playbooks in a remote backup etc that you can use to setup the machines to run all this just from the shell? All this automation looks cool but bootstrapping it again by hand would not be fun.
Yes you can run helm and docker compose by utilizing the bash - shell. This is the way to use Kestra if there is no plugin for it.
very nice! The error about the key files being too open worries me though. The correct permissions of id_rsa is 0600, so you could try to chmod it right before the ansible-playbook command. I'd be interested if that works.
I tried that, but didn't work for me. Maybe I just made a mistake 🙈
Just what i needed, thank you!
You are so welcome!
I'm tired to see more tools that are not solving anything, this is just another nice UI, you guys need to start learning nix, a real killer solution.
nice video, but how do I use ansible-galaxy in kestra? only with the galaxy I can manage my proxmox.
How do you use your /app/scripts? What kestra type can be used?
Looks powerful, but a bit OTT for my little homelab. I'm also already heavily invested in NodeRed for automating lots of things (like my Proxmox node backups to PBS). Interesting though. I can only learn so many things and this might be one too far. Also.. YAML makes me shudder.
What, in your opinion, is the inflection point between time spent doing a task vs time spent automating a task? This video is cool, just wondering what your thoughts are, given in an enterprise environment, you'd typically spend a lot of time automating something that'll be reused many times. In a homelab setting, that's not necessarily the case, but you do get the opportunity to learn without the ramifications of breaking a "real" production environment.
That's a great question, I've recently covered that in my livestream, how useful is automation really in a HomeLab. Because you can argue it's wasting time :) again maybe that recording might be interesting for you
Hey Christian, your video is very helpful, but can you tell me how I can pass the password from the inventory only, I don't want to use key based authentication.
Is there a way to automate docker compose up using kestra?
cool stuff. and again, gitlab supports storing tfstate.
That's one of the topics of my last gitlab terraform video! :)
Hi can we connect windows servers to run some shell scripts from Kestra? Through ssh or ftp something like that
Yeah.... I'm gonna have to watch this one about 6 more times.
Hope you have fun :D
So Kestra replaced your Ansible Semaphore Installation in a past Video?
I'm still running Ansible Semaphore for testing, but most things I'm doing in Kestra now. Still some Ansible Semaphore content is planned for the future :)
im screaming!
Have you figured out how to run the docker compose file without root as per the comment inside of the file Kestra makes available on their github?
Not yet, but honestly I haven't looked much into it
semaphore ui vs Kestra?
Is it possible to configure multiple users on kestra open source
Only in the enterprise version
Deserve subs
Ps. don't use rsa key pairs anymore.
AWX and terraform cloud with a self hosted runner make much more sense to me then trying to „rape“ kestra to do it in a less nice way 🤷♂️
sure if you want to pay for Tower to get the terraform capability in AWX
The more of these videos you make the less respect I have for you. You’ve turned yourself again into an advertiser for your sponsors and in a few weeks it’ll be something else you have been using in your lab. I’m over it - cheerio
Personally, I found it very helpful as I've been eyeing this product since recent discovery -- sure we may move away from it in the future but that is the point of a homelab in the first place -- trial all the things!!
bye, bye!
There is a solution for your problem, skip the content you don't like.
I don't see this as a problem as long as he clearly states that this video is sponsored by the product.
Advertising is why you get sponsored... Kinda the whole point. Good software and content costs time, and time is money. Sorry not everything is free.
Ansible and Terraform are both Infrastructure as Code tools. Ansible is more focused on configuration management and Terraform is more focused on deployment. Terraform + Ansible = Terrible :)
The only place I really use ansible lately is using Packer with the ansible provisioner to build AWS EC2 AMIs and then using the data resource to retrieve those amis when deoloying ec2. Works not too bad
huh so it is like airflow but more for infra
I heard you like to automate so I automated your automation 🤖
Haha :D
I want to disagree with the first part of the video that you need to run the commands in your project.
With Semaphore that you talked about a while ago is made for this scenario.
Semaphore could be an alternative to Kestra, but without anything like it, you have the same problem.