cobbler: Only set bootdev in kickstart if installing Xenial.

"bootdev string default" is only supported in Xenial.

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #232 from ceph/wip-xenial

Add support for Ubuntu 16.04 Xenial

cobbler: Make Ubuntu kickstart compatible with Xenial

linux-firmware-nonfree package is not available in Xenial

Installer was also stopping after package install asking for
GRUB install destination.  Adding the 'bootdev string default'
line bypasses the message and is already the lab default so
shouldn't affect other distro versions.

Signed-off-by: David Galloway <dgallowa@redhat.com>

testnode: Add Xenial-specific packages

Used roles/testnode/vars/ubuntu_14.yml as template.  Differences are:
 - libboost-thread1.54.0 updated to libboost-thread1.58.0
 - libcrypto++9 updated to libcrypto++9v5
 - libssl0.9.8 updated to libssl1.0.0
 - mpich2, libmpich2-dev, and dmapi not available in Xenial

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #229 from ceph/wip-nameserver

A role for an internal master nameserver

Reviewed-by: Dan Mick <dmick@redhat.com>

testnode: Add sshd config for Ubuntu 16.04

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Add Ubuntu 16.04 (Xenial Xerus)

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #231 from ceph/wip-nrpe-selinux

testnode: Update SELinux policy when configuring NRPE

testnode: Update SELinux policy when configuring NRPE

The 'nagios_run_sudo' boolean was added after RHEL7.1 GA.

https://rhn.redhat.com/errata/RHBA-2015-1140.html

Attempting to set the boolean when it's not present causes ansible
to fail.  NRPE will cause SELinux failures in test jobs unless set
so the only other option would be to disable NRPE on
RHEL/CentOS <= 7.1

This change ensures the testnode has the latest version of SELinux
policy installed, and thus, ensuring the boolean exists.

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #230 from ceph/wip-pcp-perms

pcp: Correct /var/log/pcp permissions for collectors

Correct /var/log/pcp permissions for collectors

Some hosts were getting a /var/log/pcp/pmmgr that was owned by root:root
for some reason.

Fixes: http://tracker.ceph.com/issues/15575
Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #227 from ceph/wip-pcpweb-deb

Add pcp-webapi on ubuntu upstream setups; set pmcd connect timeout for pmmgr

nameserver: Add check for ansible_version.major >= 2

Signed-off-by: David Galloway <dgallowa@redhat.com>

nameserver: Add README

Signed-off-by: David Galloway <dgallowa@redhat.com>

nameserver: Add ability to set named daemon options

The variable in defaults/main.yml will leave /etc/sysconfig/named
empty which is the package default.  We want IPv4 only however.
This is set in the secrets repo.

Signed-off-by: David Galloway <dgallowa@redhat.com>

nameserver: Configure firewalld to allow DNS traffic

Signed-off-by: David Galloway <dgallowa@redhat.com>

nameserver: Add configuration task for named service

Signed-off-by: David Galloway <dgallowa@redhat.com>

nameserver: Add named service handlers

Signed-off-by: David Galloway <dgallowa@redhat.com>

nameserver: Add records task

Signed-off-by: David Galloway <dgallowa@redhat.com>

nameserver: Add packages task

Signed-off-by: David Galloway <dgallowa@redhat.com>

nameserver: Initial role structure creation

Signed-off-by: David Galloway <dgallowa@redhat.com>

pcp_manager_package varies depending on the source

Signed-off-by: Zack Cerza <zack@redhat.com>

Fix typo

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #228 from ceph/wip-no-lstn

common: Replace bad epel mirror

common: Replace bad epel mirror

Mirror fedora-epel.mirror.lstn.net is almost a week out of date and
causing yum package transactions to fail due to bad repodata.  Replacing
with a mirror closer to the sepia and octo labs.

Fixes: http://tracker.ceph.com/issues/15539
Signed-off-by: David Galloway <dgallowa@redhat.com>

Set PMCD_CONNECT_TIMEOUT

Signed-off-by: Zack Cerza <zack@redhat.com>

Enable pcp-webapi on Ubuntu with upstream packages

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #226 from ceph/wip-pcp-upstream

pcp: Optionally use upstream package repos

pcp: Optionally use upstream package repos

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #225 from dachary/wip-xenial

testnodes: add ubuntu 16.04 xenial support

Reviewed-by: Dan Mick <dmick@redhat.com>

openstack: console handling is done differently

All hostnames starting with target are created for OpenStack and their
console is accessible via horizon or via other means. There is no need
to configure the serial console in this case.

Signed-off-by: Loic Dachary <loic@dachary.org>

testnodes: add ubuntu 16.04 xenial support

Signed-off-by: Loic Dachary <loic@dachary.org>

Merge pull request #219 from dachary/wip-paddles

minor boostrap paddles fixes

Merge pull request #224 from dachary/wip-arch

skip packages / repo unavailable on aarch64

Reviewed-by: Sébastien Han <shan@redhat.com>

skip packages / repo unavailable on aarch64

Signed-off-by: Loic Dachary <loic@dachary.org>

Merge pull request #222 from ceph/wip-nagios-load

testnodes: Set sane warn/crit thresholds for nagios check_load

Reviewed-by: Dan Mick <dmick@redhat.com>

Revert "replace hardcoded x86_64 with {{ansible_architecture}}"

This reverts commit 74404d3e9f11c62fddb00fcc1616c02d7f520af3.

Merge pull request #214 from ceph/wip-pcp

A role for PCP

Reviewed-by: Dan Mick <dmick@redhat.com>

Embellish overview documentation

Signed-off-by: Zack Cerza <zack@redhat.com>

Mention support for CentOS 6 and Debian 8

Signed-off-by: Zack Cerza <zack@redhat.com>

Support Fedora as a collector

Signed-off-by: Zack Cerza <zack@redhat.com>

Move pcp toward the beginning of the playbook

Signed-off-by: Zack Cerza <zack@redhat.com>

Don't depend on the users role

It's not a real dependency; if we want to update users on the node we
can run the users.yml playbook.

Signed-off-by: Zack Cerza <zack@redhat.com>

Set PMCD_CONNECT_TIMEOUT in pmmgr.options

With ~400 hosts, polling takes a very long time with default values.
Dropping the connect timeout to 0.1s speeds things way up.

Signed-off-by: Zack Cerza <zack@redhat.com>

Remove lab_domain from target-host

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #223 from ceph/wip-sam-ansible

Don't use sudo for rpm --rebuild-db and remove more packages for testnode

Initial PCP role for performance monitoring

http://pcp.io/

Signed-off-by: Zack Cerza <zack@redhat.com>

testnodes: Set sane warn/crit thresholds for nagios check_load

Signed-off-by: David Galloway <dgallowa@redhat.com>

testnode/tasks/yum_systems.yml: don't use sudo for rpm --rebuilddb

Introduced: 4706498a68d5afd134867754676a874b2603b44b
Signed-off-by: Samuel Just <sjust@redhat.com>

testnode: remove python-rbd and python-cephfs as well

Signed-off-by: Samuel Just <sjust@redhat.com>

Merge pull request #221 from ceph/wip-apt-clean

Package fixes and workarounds

testnode/tasks/apt: force yes on upgrade

Fixes: http://tracker.ceph.com/issues/15280
Signed-off-by: Samuel Just <sjust@redhat.com>

testnode/vars/apt_systems.yml: add ceph-fs-common[-dbg] to ceph_packages_to_remove

Signed-off-by: Samuel Just <sjust@redhat.com>

roles/testnode/vars/yum_systems.yml: add missing ceph_packages_to_remove

I added iozone and mod_fastcgi to ceph_packages_to_remove rather than
ceph_dependency_packages_to_remove since we build them?

Signed-off-by: Samuel Just <sjust@redhat.com>

testnode/tasks/yum_systems.yml: always rebuild rpmdb

Signed-off-by: Samuel Just <sjust@redhat.com>

testnode/tasks/apt_systems.yml: always clean apt cache

Intended as a work around for #15090 (apt-get update
hash sum mismatch).

Signed-off-by: Samuel Just <sjust@redhat.com>

Merge pull request #220 from dachary/wip-arch

replace hardcoded x86_64 with {{ansible_architecture}}

replace hardcoded x86_64 with {{ansible_architecture}}

Signed-off-by: Thierry Delamare <t.delamare@laposte.net>
Signed-off-by: Loic Dachary <loic@dachary.org>

paddles: cope with undefined paddles_address

Signed-off-by: Thierry Delamare <t.delamare@laposte.net>
Signed-off-by: Loic Dachary <loic@dachary.org>

paddles: do not fail to disable if apache2 if not there

If apache2 is not installed no need to disable it.

Signed-off-by: Thierry Delamare <t.delamare@laposte.net>
Signed-off-by: Loic Dachary <loic@dachary.org>

Merge pull request #218 from ceph/wip-auth-openvpn

gateway: modify auth-openvpn script to ignore comments and blank lines

Reviewed-by: Dan Mick <dmick@redhat.com>

gateway: modify auth-openvpn script to ignore comments and blank lines

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #217 from ceph/wip-gw-tweaks

gateway: Add logrotate to to-do

gateway: Add logrotate to to-do

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #216 from ceph/wip-gw-tweaks

gateway: Adding additional functionality and some missing files

Reviewed-by: Dan Mick <dmick@redhat.com>

gateway: Add defaults for vars in secrets repo

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Renaming 'copy secrets' task

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Write universal 'auth-openvpn' user auth script

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Manage service state based on openvpn_server_name

Also updated list of secrets we maintain

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Create openvpn_data_dir if it doesn't exist

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Add common role

Configures epel repo and grants ssh access to admin_users

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #215 from ceph/wip-gw

New role to manage OpenVPN gateway

Reviewed-by: Dan Mick <dmick@redhat.com>

gateway: Final documentation update for initial PR

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: add openvpn_users list from secrets repo

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Add task to write CA, key, and cert

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Add check to ensure service is running

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Users task

Takes 'ovpn' variable from secrets repo users and write to openvpn server

Signed-off-by: David Galloway <dgallowa@redhat.com>

gateway: Set packages needed for gateway role

Signed-off-by: David Galloway <dgallowa@redhat.com>

Create initial files for new 'gateway' role

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #213 from ceph/wip-nrpe-user

testnodes: Configure per-OS nrpe user and group name

testnodes: Configure per-OS nrpe user and group name

NRPE on CentOS/RHEL ignore the nrpe_user variable in nrpe.cfg due to the
systemd init file.  See https://github.com/NagiosEnterprises/nrpe/issues/28

The 'nagios' user is created by default on *.deb
The 'nrpe' user is created by default on *.rpm

Further reading: https://www.mooash.me/2014/10/24/nagios-nrpe-ansible-role/

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #212 from ceph/wip-nrpe-selinux

testnodes: configure selinux for nagios monitoring

testnodes: configure selinux for nagios monitoring

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #210 from ceph/wip-cobbler-tz

cobbler: set testnodes timezone during kickstart

Reviewed-by: Dan Mick <dmick@redhat.com>

Merge pull request #211 from ceph/wip-nrpe-service

testnode: add check to make sure NRPE service is running

Reviewed-by: Dan Mick<dmick@redhat.com>

Updating documentation to reflect NRPE support on CentOS and RHEL now

Signed-off-by: David Galloway <dgallowa@redhat.com>

testnode: add check to make sure NRPE service is running

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #209 from ceph/wip-nrpe-ssl

testnodes: Disable ssl requirement for nrpe on rpm-based distros

Reviewed-by: Dan Mick<dmick@redhat.com>

testnodes: Disable ssl requirement for nrpe on rpm-based distros

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: set testnodes timezone during kickstart

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #208 from ceph/wip-rhel6-8

Prep for RHEL6.8

Prep for RHEL6.8

http://tracker.ceph.com/issues/14982

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #207 from ceph/wip-rhel6-8

Prep for RHEL6.8

Prep for RHEL6.8

http://tracker.ceph.com/issues/14982

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #206 from ceph/wip-cobbler-noansible

cobbler: enable stock OS provisioning

cobbler: enable stock OS provisioning

http://tracker.ceph.com/issues/14725

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #205 from ceph/wip-plugin

Adapt failure_log plugin to work with ansible 2.0

Reviewed-by: Dan Mick <dmick@redhat.com>

Adapt failure_log plugin to work with ansible 2.0

This commit maintains backward compatibility

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #204 from ceph/revert-203-wip-14914-defaults

Revert "ansible.cfg: do not set vault_password_file"

Revert "ansible.cfg: do not set vault_password_file"