common: Replace bad epel mirror

Mirror fedora-epel.mirror.lstn.net is almost a week out of date and
causing yum package transactions to fail due to bad repodata.  Replacing
with a mirror closer to the sepia and octo labs.

Fixes: http://tracker.ceph.com/issues/15539
Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #226 from ceph/wip-pcp-upstream

pcp: Optionally use upstream package repos

pcp: Optionally use upstream package repos

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #225 from dachary/wip-xenial

testnodes: add ubuntu 16.04 xenial support

Reviewed-by: Dan Mick <dmick@redhat.com>

openstack: console handling is done differently

All hostnames starting with target are created for OpenStack and their
console is accessible via horizon or via other means. There is no need
to configure the serial console in this case.

Signed-off-by: Loic Dachary <loic@dachary.org>

testnodes: add ubuntu 16.04 xenial support

Signed-off-by: Loic Dachary <loic@dachary.org>

Merge pull request #219 from dachary/wip-paddles

minor boostrap paddles fixes

Merge pull request #224 from dachary/wip-arch

skip packages / repo unavailable on aarch64

Reviewed-by: Sébastien Han <shan@redhat.com>

skip packages / repo unavailable on aarch64

Signed-off-by: Loic Dachary <loic@dachary.org>

Merge pull request #222 from ceph/wip-nagios-load

testnodes: Set sane warn/crit thresholds for nagios check_load

Reviewed-by: Dan Mick <dmick@redhat.com>

Revert "replace hardcoded x86_64 with {{ansible_architecture}}"

This reverts commit 74404d3e9f11c62fddb00fcc1616c02d7f520af3.

Merge pull request #214 from ceph/wip-pcp

A role for PCP

Reviewed-by: Dan Mick <dmick@redhat.com>

Embellish overview documentation

Signed-off-by: Zack Cerza <zack@redhat.com>

Mention support for CentOS 6 and Debian 8

Signed-off-by: Zack Cerza <zack@redhat.com>

Support Fedora as a collector

Signed-off-by: Zack Cerza <zack@redhat.com>

Move pcp toward the beginning of the playbook

Signed-off-by: Zack Cerza <zack@redhat.com>

Don't depend on the users role

It's not a real dependency; if we want to update users on the node we
can run the users.yml playbook.

Signed-off-by: Zack Cerza <zack@redhat.com>

Set PMCD_CONNECT_TIMEOUT in pmmgr.options

With ~400 hosts, polling takes a very long time with default values.
Dropping the connect timeout to 0.1s speeds things way up.

Signed-off-by: Zack Cerza <zack@redhat.com>

Remove lab_domain from target-host

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #223 from ceph/wip-sam-ansible

Don't use sudo for rpm --rebuild-db and remove more packages for testnode

Initial PCP role for performance monitoring

http://pcp.io/

Signed-off-by: Zack Cerza <zack@redhat.com>

testnodes: Set sane warn/crit thresholds for nagios check_load

Signed-off-by: David Galloway <dgallowa@redhat.com>

testnode/tasks/yum_systems.yml: don't use sudo for rpm --rebuilddb

Introduced: 4706498a68d5afd134867754676a874b2603b44b
Signed-off-by: Samuel Just <sjust@redhat.com>

testnode: remove python-rbd and python-cephfs as well

Signed-off-by: Samuel Just <sjust@redhat.com>

Merge pull request #221 from ceph/wip-apt-clean

Package fixes and workarounds

testnode/tasks/apt: force yes on upgrade

Fixes: http://tracker.ceph.com/issues/15280
Signed-off-by: Samuel Just <sjust@redhat.com>

testnode/vars/apt_systems.yml: add ceph-fs-common[-dbg] to ceph_packages_to_remove

Signed-off-by: Samuel Just <sjust@redhat.com>

roles/testnode/vars/yum_systems.yml: add missing ceph_packages_to_remove

I added iozone and mod_fastcgi to ceph_packages_to_remove rather than
ceph_dependency_packages_to_remove since we build them?

Signed-off-by: Samuel Just <sjust@redhat.com>

testnode/tasks/yum_systems.yml: always rebuild rpmdb

Signed-off-by: Samuel Just <sjust@redhat.com>

testnode/tasks/apt_systems.yml: always clean apt cache

Intended as a work around for #15090 (apt-get update
hash sum mismatch).

Signed-off-by: Samuel Just <sjust@redhat.com>

Merge pull request #220 from dachary/wip-arch

replace hardcoded x86_64 with {{ansible_architecture}}

replace hardcoded x86_64 with {{ansible_architecture}}

Signed-off-by: Thierry Delamare <t.delamare@laposte.net>
Signed-off-by: Loic Dachary <loic@dachary.org>

paddles: cope with undefined paddles_address

Signed-off-by: Thierry Delamare <t.delamare@laposte.net>
Signed-off-by: Loic Dachary <loic@dachary.org>

paddles: do not fail to disable if apache2 if not there

If apache2 is not installed no need to disable it.

Signed-off-by: Thierry Delamare <t.delamare@laposte.net>
Signed-off-by: Loic Dachary <loic@dachary.org>

Merge pull request #218 from ceph/wip-auth-openvpn

gateway: modify auth-openvpn script to ignore comments and blank lines

Reviewed-by: Dan Mick <dmick@redhat.com>

gateway: modify auth-openvpn script to ignore comments and blank lines

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #217 from ceph/wip-gw-tweaks

gateway: Add logrotate to to-do

gateway: Add logrotate to to-do

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #216 from ceph/wip-gw-tweaks

gateway: Adding additional functionality and some missing files

Reviewed-by: Dan Mick <dmick@redhat.com>

gateway: Add defaults for vars in secrets repo

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Renaming 'copy secrets' task

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Write universal 'auth-openvpn' user auth script

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Manage service state based on openvpn_server_name

Also updated list of secrets we maintain

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Create openvpn_data_dir if it doesn't exist

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Add common role

Configures epel repo and grants ssh access to admin_users

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #215 from ceph/wip-gw

New role to manage OpenVPN gateway

Reviewed-by: Dan Mick <dmick@redhat.com>

gateway: Final documentation update for initial PR

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: add openvpn_users list from secrets repo

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Add task to write CA, key, and cert

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Add check to ensure service is running

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Users task

Takes 'ovpn' variable from secrets repo users and write to openvpn server

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Set packages needed for gateway role

Signed-off-by: David Galloway <dgallowa@redhat.com>

Create initial files for new 'gateway' role

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #213 from ceph/wip-nrpe-user

testnodes: Configure per-OS nrpe user and group name

testnodes: Configure per-OS nrpe user and group name

NRPE on CentOS/RHEL ignore the nrpe_user variable in nrpe.cfg due to the
systemd init file.  See https://github.com/NagiosEnterprises/nrpe/issues/28

The 'nagios' user is created by default on *.deb
The 'nrpe' user is created by default on *.rpm

Further reading: https://www.mooash.me/2014/10/24/nagios-nrpe-ansible-role/

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #212 from ceph/wip-nrpe-selinux

testnodes: configure selinux for nagios monitoring

testnodes: configure selinux for nagios monitoring

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #210 from ceph/wip-cobbler-tz

cobbler: set testnodes timezone during kickstart

Reviewed-by: Dan Mick <dmick@redhat.com>

Merge pull request #211 from ceph/wip-nrpe-service

testnode: add check to make sure NRPE service is running

Reviewed-by: Dan Mick<dmick@redhat.com>

Updating documentation to reflect NRPE support on CentOS and RHEL now

Signed-off-by: David Galloway <dgallowa@redhat.com>

testnode: add check to make sure NRPE service is running

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #209 from ceph/wip-nrpe-ssl

testnodes: Disable ssl requirement for nrpe on rpm-based distros

Reviewed-by: Dan Mick<dmick@redhat.com>

testnodes: Disable ssl requirement for nrpe on rpm-based distros

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: set testnodes timezone during kickstart

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #208 from ceph/wip-rhel6-8

Prep for RHEL6.8

Prep for RHEL6.8

http://tracker.ceph.com/issues/14982

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #207 from ceph/wip-rhel6-8

Prep for RHEL6.8

Prep for RHEL6.8

http://tracker.ceph.com/issues/14982

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #206 from ceph/wip-cobbler-noansible

cobbler: enable stock OS provisioning

cobbler: enable stock OS provisioning

http://tracker.ceph.com/issues/14725

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #205 from ceph/wip-plugin

Adapt failure_log plugin to work with ansible 2.0

Reviewed-by: Dan Mick <dmick@redhat.com>

Adapt failure_log plugin to work with ansible 2.0

This commit maintains backward compatibility

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #204 from ceph/revert-203-wip-14914-defaults

Revert "ansible.cfg: do not set vault_password_file"

Revert "ansible.cfg: do not set vault_password_file"

Merge pull request #203 from dachary/wip-14914-defaults

ansible.cfg: do not set vault_password_file

ansible.cfg: do not set vault_password_file

So that ansible-playbook can run from the root of the repository and not
pick up this value which is unlikely to be correct.

http://tracker.ceph.com/issues/14914 Fixes: #14914

Signed-off-by: Loic Dachary <loic@dachary.org>

Merge pull request #202 from yuriw/wip-14848-master

Added "- ncurses-devel" for xfstests to run and pass

Reviewed-by: Dan Mick <dmick@redhat.com>

Added "- ncurses-devel" for xfstests to run and pass

Fixes: #14848
Signed-off-by: Yuri Weinstein <yweinste@redhat.com>

Merge pull request #201 from dmick/master

common/tasks/kerberos.yml: Test ansible_os_family for packaging type

common/tasks/kerberos.yml: Test ansible_os_family for packaging type

...rather than ansible_distribution

Fixes: #14751
Signed-off-by: Dan Mick <dan.mick@redhat.com>

Merge pull request #200 from ceph/wip-f22-int

Reviewed-by: Dan Mick <dmick@redhat.com>

Fixes http://tracker.ceph.com/issues/14790

Cobbler would fail to create kickstart because non-Fedora distros would return 7.X, for example, as the integer resulting in CentOS and RHEL kickstarts to fail

Fixes: #14790
Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #198 from ceph/wip-ansible-2-prep

Preparation for ansible 2.x

Reviewed-by: <dan.mick@redhat.com>

Merge pull request #199 from ceph/wip-f22-gpg

Install yum on Fedora 22 and higher

yum package is not available from dvd image repo

Signed-off-by: David Galloway <dgallowa@redhat.com>

Install yum on Fedora 22 and higher

Existing tasks like gpg_keys.yml rely on the yum module

This is temporary until we can move to ansible v2.0's package module

Signed-off-by: David Galloway <dgallowa@redhat.com>

Rename ansible_user to cm_user

ansible_user is now used by ansible itself.

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #197 from ceph/wip-14729

Enable Fedora 22 installation in labs

cobbler: Modify postinstall trigger script to work with Fedora 22

Signed-off-by: David Galloway <dgallowa@redhat.com>

Install pip on Fedora 22

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Modify Fedora 22 packages installed during kickstart

The @base group no longer exists in Fedora 22 and causes anaconda to
halt during install.  Using @^infrastructure-server-environment in its place

The gpg_keys ansible task requires yum to be installed prior to first boot

Signed-off-by: David Galloway <dgallowa@redhat.com>

Install nrpe daemon for Fedora 22

Signed-off-by: David Galloway <dgallowa@redhat.com>

Rename Fedora 20 sshd config to Fedora 22 since F20 no longer supported

Signed-off-by: David Galloway <dgallowa@redhat.com>

Update package location and requirements for F22

Signed-off-by: David Galloway <dgallowa@redhat.com>

Use ansible's new '*become*' options

The old '*sudo*' options are deprecated.

Signed-off-by: Zack Cerza <zack@redhat.com>

Renaming and repurposing file since we no longer support F20

Signed-off-by: David Galloway <dgallowa@redhat.com>

Adding Fedora22 to labs http://tracker.ceph.com/issues/14729

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #196 from dmick/master

Include /keys in path to key files, and document what's expected

Include /keys in path to key files, and document what's expected

Signed-off-by: Dan Mick <dan.mick@redhat.com>

Merge pull request #195 from dmick/master

Stop looking for keys on git.ceph.com