Feature/firewall

[pneerincx]

New iptables role:

• This is work in progress....

Dependency for new iptables role: When a machine has multiple network interfaces, we need to be able to create rules for specific network interfaces as opposed to filtering all of them with the same rules. Therefore:

• Added support for multiples network addresses/interfaces per host/machine/network
  • Refactored structure used in ip_addresses.yml files.
  • When ip_addresses.yml files are generated they are automatically sorted on the keys used in the dicts.
  • Create new include_vars_from_other_groups role, which fetches the info from ip_addresses.yml files and stores it into 2 dict that can be used by other roles.
  • Updated all roles that use the info from the ip_addresses.yml files, removed code to parse ip_addresses.yml files and declared a dependency on the new include_vars_from_other_groups` role:
    • sshd
    • static_hostname_lookup
    • ssh_host_signer
  • Updated all plays that use the info from the ip_addresses.yml files:
    • create-docs-server.yml
    • create-jenkins-server.yml
    • deploy-os_servers.yml
  • Updated group_vars for all stacks to work with the new structure in the ip_addresses.yml files.
• Other minor updates to group_vars:
  • Removed unused variables mailhub and rewrite_domain.
  • Removed entries for old docs server, which no longer exists.
  • Renamed slurm_cluster_domain to stack_domain.
  • Removed public_ip_addresses variables, which is no longer needed.
  • Renamed network_private_management_id, network_private_management_id_13 and network_private_management_id for Nibbler to include stack_prefix in their names. E.g. "{{ stack_prefix }}_internal_management"
    Also renamed these networks on the Merlin cloud.
  • Added umcg_net4 to totp for Winged Helix.
  • Deleted group_vars/marvin_cluster/ip_addresses.yml as cluster is offline: these machines currently do not exist.

Bugfixes for issues that popped up during testing:

• Added new single_role_playbooks/irods_davrods.yml
• Re-added static_inventories/calculon_cluster.yml, which was lost in translation from *.ini to *.yml inventories.
• Remove trailing $ (dollar sign) in network share names. This is used by SMB/CIFS shares to make them "hidden", but only complicates use of paths on Linux.