Add sentry.ceph.com to checkcerts.py

Signed-off-by: Dan Mick <dmick@redhat.com>

Merge pull request #722 from ceph/paddles-fixes

paddles: Updates required for migration to new host

Merge pull request #723 from ceph/paddles-postgres-exporter

paddles: Deploy postgres-exporter

paddles: Deploy postgres-exporter

When in containerized mode.

Signed-off-by: Zack Cerza <zack@redhat.com>

paddles: Tell postgres to trust the Docker network

Signed-off-by: Zack Cerza <zack@redhat.com>

paddles: Tell postgres to listen on all interfaces

Signed-off-by: Zack Cerza <zack@redhat.com>

paddles: Correct paddles_docker_packages

python-docker doesn't exist on 20.04; python3-docker does, and also on
18.04, and requires python3-requests.

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #721 from dmick/wip-checkcerts

Add checkcerts, to use with cron to warn about expiring certs

Add checkcerts, to use with cron to warn about expiring certs

This originally lived on gitbuilder-archive, and I've moved it,
revamped it, added some args, added some hosts, modified some emails,
ported to Py3, stopped using external programs.  It's quick to run
in default mode where it just reports to the terminal; it'll also
be quiet and only send email about old certs.

The timezone processing is nonexistent on the reported expiry
date; Python timezone handling is a mess.  That could be improved but
not without a deep dive.

Signed-off-by: Dan Mick <dmick@redhat.com>

Merge pull request #715 from ceph/wip-gateway-network-scripts

Installing the network-scripts package as an alternative when disabli…

Installing the network-scripts package as an alternative when disabling NM

And removing the nagios packages since we are not using nagios anymore

Signed-off-by: Adam Kraitman <akraitma@redhat.com>

Merge pull request #720 from ceph/wip-centos-8stream

Changing centos9.stream image url to latest version for cobbler deployment

Changing centos9.stream image url to latest version for cobbler deployment

Fixes: https://tracker.ceph.com/issues/58492
Signed-off-by: Adam Kraitman <akraitma@redhat.com>

Merge pull request #719 from rakshithakamath94/signalfx-conf

Signalfx agent node configuration

Signalfx agent node configuration

Merge pull request #718 from ceph/wip-fix-uuid

Forgot to add use_satellite = true in two places

Forgot to add use_satellite = true in two places

In continue to PR https://github.com/ceph/ceph-cm-ansible/pull/717

Signed-off-by: Adam Kraitman <akraitma@redhat.com>

Merge pull request #717 from ceph/wip-satellite-uuid

Regenerate random machine UUID before the subscribing to the satellite

Regenerate random machine UUID before the subscription to satellite

Fixes: The DMI UUID of this host (XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX) matches other registered hosts
Signed-off-by: Adam Kraitman <akraitma@redhat.com>

Merge pull request #716 from ceph/wip-no-log-remove

Removed no_log to see the spacific errors

Removed no_log to see the spacific errors

https://pulpito.ceph.com/yuriw-2023-01-11_12:36:44-rbd-pacific_16.2.11_RC6-distro-default-smithi/7133168/

Signed-off-by: Adam Kraitman <akraitma@redhat.com>

Merge pull request #714 from dmick/main

auth-openvpn: port to python3 for new gw server, futures

auth-openvpn: port to python3 for new gw server, futures

I chose to keep everything in binary throughout.  One could also
choose string, but this seemed safer for international characters.

Signed-off-by: Dan Mick <dmick@redhat.com>

Merge pull request #713 from ceph/wip-cpan-fix

Installing cpanminus on apt systems

Installing cpanminus on apt systems

Fixes: http://pulpito.front.sepia.ceph.com/yuriw-2023-01-01_20:02:51-krbd-pacific_16.2.11_RC4-testing-default-smithi/7130439/
Signed-off-by: Adam Kraitman <akraitma@redhat.com>

Merge pull request #712 from ceph/wip-cpanm

Using the cpanm ansible module

Using the cpanm ansible module

Signed-off-by: Adam Kraitman <akraitma@redhat.com>

Merge pull request #711 from wolaidajiangyou/main

testnode: fix umount condition match error

testnode: fix umount condition match error

Signed-off-by: Sun Junnan <sunjunnan_yewu@cmss.chinamobile.com>
Signed-off-by: Yang Honggang <yanghonggang_yewu@cmss.chinamobile.com>

Merge pull request #710 from ceph/named-acme-os

nameserver: Updates to enable ACME on OpenShift

nameserver: New zones don't need to be frozen

Signed-off-by: Zack Cerza <zack@redhat.com>

named.conf.j2: Make key algorithm configurable

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #708 from ceph/no-rh-register

cobbler: Do not use redhat_register snippet

Merge pull request #707 from ceph/rhel9-oops

cobbler: CentOS 9 packages on CentOS 9 only

cobbler: Do not use redhat_register snippet

We already run `subscription-manager` manually in kickstart so we don't need this snippet.

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: CentOS 9 packages on CentOS 9 only

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #706 from ceph/cobbler-pw

cobbler-access: Update script to support Cobbler v3

cobbler-access: Update script to support Cobbler v3

See https://cobbler.readthedocs.io/en/v3.2.2/user-guide/web-interface.html#managing-users-digest

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #705 from ceph/c9-selinux

common: NRPE works on CentOS 9 now

common: NRPE works on CentOS 9 now

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #704 from ceph/jenkins-builder-disk

tools: Add jenkins-builder-disk

Merge pull request #703 from ceph/c9-hacks

More CentOS 9 hacks

tools: Add jenkins-builder-disk

Used to wipe the larger/faster non-root drive on Jenkins builders and mount the disk at /home/jenkins-build or /var/lib/libvirt/images (whichever is appropriate).

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Hacks for CentOS 9 on braggi disks

During anaconda/kickstart, the smaller root drive shows up as sdb but then helpfully becomes sda after the OS is installed.

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Update packages for CentOS 9

Do not install subscription-manager because it's not RHEL...
Do install python3-pip so the container-host role can run during the post install trigger.

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler_profile: kernel_options for CentOS 9 Stream

inst.stage2 is required and just `ks` doesn't work anymore and needs `inst.ks`.

This will probably need to be reverted when Sepia gets Cobbler 3 since it will automatically use `inst.*` parameters for CentOS/RHEL9.

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler_profile: Use a newer CentOS9 ISO

Has a lot of fixes in it like actually leaves appstream and baseos repos on the server after install

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Do not do CentOS to Stream conversion hack on CentOS9

It's not necessary and breaks profile import.

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Don't run repos tag on CentOS9 during trigger

No longer needed as latest CentOS9 ISO fixed this problem.

Signed-off-by: David Galloway <dgallowa@redhat.com>

Revert "cobbler: Put CentOS9 Stream repos in place during kickstart"

This reverts commit 9d277d66e9e96bd2fe5d5490018536ebe0db8140.

This hack isn't needed with a newer CentOS 9 Stream ISO.

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #702 from ceph/not-on-centos9

cobbler: Don't install NetworkManager-initscripts-updown on CentOS9

Merge pull request #701 from ceph/fix-c9-missing-repos

cobbler: Put CentOS9 Stream repos in place during kickstart

cobbler: Don't install NetworkManager-initscripts-updown on CentOS9

It's not available.

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Put CentOS9 Stream repos in place during kickstart

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #700 from ceph/el9

testnode: RHEL9 ceph_dependency_packages_to_remove

testnode: Modify ceph_deps_pkgs_to_remove

Removing python-requests removed subscription-manager which understandably causes a massive problem.

This task/list of packages may not even be necessary anyway since it's a relic from the days we didn't reimage testnodes before every job.

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #699 from ceph/cobbler-module

Fixes to support Cobbler 3

cobbler: Install ansible from epel on RHEL9

This used to be in pip_packages but the distro-provided one is new enough

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Fix conditional

Not always defined

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Define a ks_dir

Cobbler2: /var/lib/cobbler/kickstarts
Cobbler3: /var/lib/cobbler/templates

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Define autoinstall flag based on version

Cobbler2: --kickstart
Cobbler3: --autoinstall

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Define kernel options flag based on version

Cobbler2: --kopts
Cobbler3: --kernel-options

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Convert var to int

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Define settings file path based on version

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Support RHEL8 when importing tasks and vars

Signed-off-by: David Galloway <dgallowa@redhat.com>

cobbler: Enable Cobbler 3 Stream on RHEL8

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #698 from ceph/wip-ifupdown

ifup and ifdown has been deprecated replaced by ip link set $device u…

Adding the NetworkManager-initscripts-updown package to rhel9

Signed-off-by: Adam Kraitman <akraitma@redhat.com>

Merge pull request #697 from ceph/el9

RHEL9 support

testnode: RHEL9 vars/templates

Signed-off-by: David Galloway <dgallowa@redhat.com>

common: No more lsb!

Signed-off-by: David Galloway <dgallowa@redhat.com>

common: vars for rhel9

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #696 from ceph/jammy-pdev

testnode: Move python-dev to distro-specific vars files

testnode: Move python-dev to distro-specific vars files

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #695 from ceph/sdc

cobbler: Install on sdc for cali systems

cobbler: Install on sdc for cali systems

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #694 from ceph/seriously

cobbler_systems: Set default_profile to a newer distro

cobbler_systems: Set default_profile to a newer distro

I just chose RHEL8.6 because it's available in both Sepia and Octo labs.  Ubuntu and CentOS aren't.

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #693 from ceph/jammy2

testnode: Ubuntu Jammy vars

testnode: Ubuntu Jammy vars

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #692 from ceph/incerta

tools: Playbook to configure incerta back NIC

tools: Playbook to configure incerta back NIC

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #673 from ceph/secondary-nic

Move secondary NIC tasks to common role

Merge pull request #691 from ceph/containerized-testnodes

testnode: Skip stopping apache2 in containers

testnode: Skip stopping apache2 in containers

Signed-off-by: Zack Cerza <zack@redhat.com>

Merge pull request #690 from ceph/irvingi

container-host: s/slaves/builders

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #689 from ceph/fix-satellite

Reinstall Satellite CA Cert

common: Remove, clean up, and reinstall Satellite CA cert

This reverts commit ed59d0bb3f6470ecf62fc6af19663d0f674dd84e.

This was originally added because if one upgrades the Satellite server, the katello-ca-consumer-latest RPM actually gets an incremented version number and conflicts with an already installed katello-ca RPM.  `rpm --reinstall` was not sufficient to "upgrade" the package.

We won't ever be upgrading the Satellite server again and the proper way to "reinstall" the Satellite's CA Cert is to remove it, subscription-manager clean, then reinstall as per https://access.redhat.com/solutions/3336921.

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #688 from ceph/fix-docs

README: Make doc more specific/clear

README: Make doc more specific/clear

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #687 from ceph/zap-rhel

testnode: No pkg tasks before repos are set up

Newer versions of RHEL8 don't like having yum called if they don't have repos setup.

When a RHEL8 machine gets provisioned via Cobbler, we zap the disks before we register the server to Satellite (or CDN).

We don't really need to check if gdisk and device-mapper are installed during a Cobbler install because we know they're installed in https://github.com/ceph/ceph-cm-ansible/blob/main/roles/cobbler/templates/snippets/cephlab_packages_rhel

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #685 from ceph/curl

common: Install Satellite RPM via rpm command

Merge pull request #686 from ceph/scripts

tools: Add a couple workstation scripts

tools: Add a couple workstation scripts

Signed-off-by: David Galloway <dgallowa@redhat.com>

common: Install Satellite RPM via rpm command

Seriously... https://access.redhat.com/solutions/6438061

Signed-off-by: David Galloway <dgallowa@redhat.com>

Merge pull request #683 from ceph/zap_disks_paren

testnode: Add missing parenthesis to conditional

Merge pull request #684 from ceph/fqdn

common: RHSM register w/ full hostname

common: RHSM register w/ full hostname

For some reason, sometimes hosts try to register with their short hostname.  Sometimes with the FQDN.

As of Satellite 6.5, the service won't let you register two different hostnames with the same UUID (https://access.redhat.com/solutions/4207781).

This change makes sure all hosts register with the FQDN so there's no more conflicts.

Signed-off-by: David Galloway <dgallowa@redhat.com>