Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merge develop branch into master in preparation for a new release. #304

Merged
merged 384 commits into from
Aug 11, 2020
Merged

Merge develop branch into master in preparation for a new release. #304

merged 384 commits into from
Aug 11, 2020

Conversation

pneerincx
Copy link
Contributor

  • Updated documentation including:
    • complete rewrite for logins sections and
    • AppleScripts for macOS users to configure their ssh client and mount shares from the the clusters using sshfs.
  • Various bug fixes including
    • Fix for log rotation
    • Override OS default swappiness for Slurm cgroups and set it to zero.
    • Added missing roles to main cluster.yml playbook.
  • Dedockered mariadb role
  • Improved syntax: Added ansible-linter for pull requests and reduced ansible-linter errors from lots to one.
  • Updated subgroup_directories role, so it can be used without root permissions.
  • Feature: functional admins group:
    • Added variable for functional admins group to group_vars for Gearshift and Talos.
    • Allow functional admins group to sudo to the functional accounts of all groups.
      (Required to deploy subgroup directories with the corresponding role without root privileges.)
    • Allow functional admins group to sudo to the slurm user and manage jobs.
  • Feature: Update public key LDAP attributes when keys have changed in repo.
  • Added role to disable core dumps.
  • Added quota support for Lustre file systems. Uses group quota as default (for now), because project quota are not supported on Data Handling Lustre file systems (yet).
  • Added TLS support for grafana proxy.
  • Implemented tiny quota for regular (non-admin) users on jumphosts.
  • Security hardening for documentation server, which is accessible directly from the internet just like the jumphost.
  • Added various users and groups on various sites.

Gerbenvandervries and others added 30 commits February 25, 2020 11:36
@Gerbenvandervries
Merge pull request #231 from pneerincx/prm03
c243080 
Updated pfs_mounts and lfs_mounts variables in group_vars
@Gerbenvandervries
new user, and extra depad user
c0081b9
@pneerincx
Merge pull request #234 from Gerbenvandervries/without_mariadb
1929225 
new user, and extra depad user
@pneerincx
Added user to Fender.
f9739d6
@Gerbenvandervries
Merge pull request #235 from pneerincx/develop
c0bb7e6 
Added user to Fender.
@marieke-bijlsma
Added 2 new users
6677258
@pneerincx
Merge pull request #236 from marieke-bijlsma/develop
7479620 
Added 2 new users.
@pneerincx
Updated subgroup_directories role, so it can be used without root per…
07f1943 
…missions.
@Gerbenvandervries
Merge pull request #237 from pneerincx/develop
35890c6 
Updated subgroup_directories role.
@kdelange
added new key to user
1c0a4c8
@pneerincx
Merge pull request #238 from kdelange/develop
8b9e31f 
added new key to user
@pneerincx
Fixed inconsistent indentation.
049da27
@pneerincx
Updated create_subgroup_directories role: grouped tasks in blocks and…
8cba5bd 
… improved play status reporting by using variables in task names.
@Gerbenvandervries
Merge pull request #239 from pneerincx/develop
e5c701f 
Fixed inconsistent indentation and improved create_subgroup_directories role.
@marieke-bijlsma
2 new users, note: still needs to be deployed on Fender cluster.
9d89b79
@pneerincx
Merge pull request #240 from marieke-bijlsma/develop
f96e605 
2 new users, note: still needs to be deployed on Fender cluster.
@pneerincx
Login instructions for dummies (work in progress) ...
5077ed9
@pneerincx
Added new umcg-mmbimg group to Gearshiift.
5caffa3
@marieke-bijlsma
Inactivated user and added new user. Note: still needs to be deployed…
81c914a 
… on Fender
@marieke-bijlsma
Merge pull request #242 from pneerincx/develop
6c2189e 
Added new umcg-mmbimg group to Gearshiift.
@Gerbenvandervries
dedockered mariadb
0711023
@Gerbenvandervries
Enable no_log again
14bc6f3
@Gerbenvandervries
restart after yum install
4716d0c
@erijpkema
Merge pull request #244 from Gerbenvandervries/mariadb
176f9cb 
dedockered Mariadb
@Gerbenvandervries
no_log
9df49ba
@pneerincx
Login instructions for dummies (work in progress) ...
f91b336
@pneerincx
WIP.
b05dcee
@pneerincx
Fixed merge conflict.
5ae2944
@pneerincx
Fix to exclude *-dms groups when creating subgroup folders.
41da1b7
@pneerincx
Merge pull request #245 from Gerbenvandervries/develop
7bd1604 
no_log
pneerincx and others added 22 commits August 4, 2020 16:07
@pneerincx
Fixed merge conflict.
c585406
@pneerincx
Added dummy play at beginning to ping jumphost and establish a persis…
6561ec6 
…tent SSH connection.
@pneerincx
Consistent use of ldap_* variable names, ldap_uri now includes the pr…
f86d02d 
…otocol to make it a real URI and remove hardcoded ldap:// or ldaps:// in various places, removed ldaps_uri variable, create private and primary groups for the home dirs of LDAP users just like for local users and fixed wrong local users/groups created on Hyperchicken that were conflicting with with LDAP entries.
@pneerincx
Fixed permissions for config files created by openldap role.
b158389
@pneerincx
Fixed syntax error.
ff1229d
@pneerincx
Fixed some ansible linter errors.
9d70621
@pneerincx
Lowered allowed number of ansible-linter errors 18 -> 5 and disable c…
751f53c 
…heck rule 701 related to Ansible Galaxy, which we do not use.
@pneerincx
Made build_lustre_client role idempotent.
16afbf2
@pneerincx
Fixed linter errors: added pipefail option to shell tasks.
95e0a78
@pneerincx
Fixed linter error.
e7cc0f9
@pneerincx
Fixed various linter errors in openldap role.
99215c3
@pneerincx
Fixed various linter errors in slurm-management role.
f55c171
@pneerincx
Wrapped long line in spacewalk_client role.
811c840
@pneerincx
Fixed linter error in ssh_host_signer role and added symlink in singl…
0d23336 
…e-role-playbooks subdir, so role can find the keys for the CA key pairs for ssh-host-key-signing.
@pneerincx
Fixed various linter errors in create_subgroup_directories role.
c56809d
@pneerincx
Fixed linter errors, improved idempotency and resolved issue #302.
952ca6e
@pneerincx
Commented tasks only required for debugging.
96f2e3e
@pneerincx
Reduced allowed linter errors further 5 -> 2.
c6ae22d
@pneerincx
Silly format fix.
a9a8eba
@pneerincx
Fixed linter issue in ssh_host_signer role and reduced allowed linter…
1f67196 
… errors 2 -> 1.
@pneerincx
Wrapped long line.
b5f37d3
@marieke-bijlsma
Merge pull request #303 from pneerincx/fix/cleanup
51c3a95 
Fix and cleanup
@marieke-bijlsma marieke-bijlsma merged commit 5b6fd04 into master Aug 11, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@marieke-bijlsma marieke-bijlsma marieke-bijlsma approved these changes

@Gerbenvandervries Gerbenvandervries Awaiting requested review from Gerbenvandervries

@mheijkoop mheijkoop Awaiting requested review from mheijkoop

@rasmanen rasmanen Awaiting requested review from rasmanen

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
6 participants
@pneerincx @marieke-bijlsma @Gerbenvandervries @kdelange @erijpkema @rasmanen