league-of-robots 20.08.1

• Updated documentation including:
  • complete rewrite for logins sections and
  • AppleScripts for macOS users to configure their ssh client and mount shares from the the clusters using sshfs.
• Various bug fixes including
  • Fix for log rotation
  • Override OS default swappiness for Slurm cgroups and set it to zero.
  • Added missing roles to main cluster.yml playbook.
• Dedockered mariadb role
• Improved syntax: Added ansible-linter for pull requests and reduced ansible-linter errors from lots to one.
• Updated subgroup_directories role, so it can be used without root permissions.
• Feature: functional admins group:
  • Added variable for functional admins group to group_vars for Gearshift and Talos.
  • Allow functional admins group to sudo to the functional accounts of all groups.
    (Required to deploy subgroup directories with the corresponding role without root privileges.)
  • Allow functional admins group to sudo to the slurm user and manage jobs.
• Feature: Update public key LDAP attributes when keys have changed in repo.
• Added role to disable core dumps.
• Added quota support for Lustre file systems. Uses group quota as default (for now), because project quota are not supported on Data Handling Lustre file systems (yet).
• Added TLS support for grafana proxy.
• Implemented tiny quota for regular (non-admin) users on jumphosts.
• Security hardening for documentation server, which is accessible directly from the internet just like the jumphost.
• Added various users and groups on various sites.