summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-05-18colo/devcloud: add logic to deploy a compute nodedevcloudAndy Doan
Change-Id: I3166d8f0623088bf05811a6fb95cb8ac449dbfc0
2016-05-18colo: allow graeme and amit to manage tftp on r2-x86-1Andy Doan
Change-Id: Ifdbc8462196e10dc4b0a7f0ead9d22b0314ca14e
2016-05-18colo: support for dev-cloud loginsAndy Doan
Change-Id: I20220bfc810c1e70ca9c4de66dece955e7351ed7
2016-05-17colo: let yazen do pxe boot updatesAndy Doan
Change-Id: If631db5eade64c8119f0c984e54d2965f5e422cd
2016-05-17colo: give ricardo access to r2-x86-1Andy Doan
He needs to do some tftp boot configurations Change-Id: I957dc4bbbd386cf2f2b0a13ac5398df4b6faf6f3
2016-05-17ssh-ldap: add a new way to configure ssh/ldap for systemsAndy Doan
This is a deviation from sssd that gives us a really fast way to manage LDAP groups/users. It uses the nss-updatedb program to pull down *all* user and group information from LDAP (takes a couple of seconds). This information is stored in the NSS "db" format, that can be configured via nsswitch.conf. So all LDAP operations except for checking passwords can be handled completely locally. Password checking (which is needed by sudo) can be enhanced by using the libpam-ccreds which will cache a user's password locally. I also added something like a "tiered hierarchy" concept. Only one system in the colo actually pulls down LDAP information. It keeps the resulting DB in a directory exposed by Apache. All the other servers in the colo simply grab the LDAP DB from this host. This reduces the load on the LDAP server and it also makes the updates for all the systems in the colo really quick. Change-Id: If028d2adc7a88a7d8ae2a0a30c870a0c403883af
2016-05-13colo: remove last of leg bulk reservationsAndy Doan
Change-Id: I07b17f77b0e8bf16881ff1a2039a6edf180693c3
2016-05-13git-servers: gcc mirror is now handled by git-gerrit-mirror.Paul Sokolovsky
Change-Id: I10f9c0f20d29bcab9f8410861cfe82b712234475 Reviewed-on: https://review.linaro.org/11965 Reviewed-by: Paul Sokolovsky <paul.sokolovsky@linaro.org>
2016-05-11git-servers: Install update_gerrit_parents.py config.Paul Sokolovsky
Change-Id: Iefec170b6e4129faee616136e649f850eaaf55e8 Reviewed-on: https://review.linaro.org/11922 Reviewed-by: Andy Doan <andy.doan@linaro.org>
2016-05-11git-servers: binutils-gdb & newlib mirrors are now handled by git-gerrit-mirror.Paul Sokolovsky
Make their handling more consistent and fixes issue where gerrit metadata was removed each time adhoc mirroring happened. Change-Id: Ie6b7617bec411bc87ef4128c0e23b0e75965fdd4 Reviewed-on: https://review.linaro.org/11924 Reviewed-by: Andy Doan <andy.doan@linaro.org>
2016-05-11gerrit 2.12: add project-created hookAndy Doan
With Gerrit 2.12 we can finally support the project-created hook. This allows repos created via gerrit to automatically be included by grokmirror and replicated across all regional servers. Change-Id: I2049523c05e53eeb1ccab6f34c846e561bc9fba1 Reviewed-on: https://review.linaro.org/11810 Reviewed-by: Paul Sokolovsky <paul.sokolovsky@linaro.org> Reviewed-by: Ben Copeland <ben.copeland@linaro.org>
2016-05-09colo: update devcloud-admin scriptAndy Doan
Add a quirk for installing rp-centos7 as well as a status command. Change-Id: I0a764caf9944985cf6b7633f1905bec307ba0f67
2016-05-06fixup! colo: temp change for testAndy Doan
Change-Id: I9760508cdd6f1ec89207357a7629a45ac41cfeba
2016-05-05colo: temp change for testAndy Doan
Change-Id: I29c8676d1e29169c7cebc702801cd6c9814c78bd
2016-05-04colo: convert all non-allocated maas systems to UEFI and PXEAndy Doan
We are converting everything to use UEFI and PXE installs Change-Id: Idfce2817c3b48ee6fd785040a28d160a74034808
2016-05-04colo: create new rack3 dhcp tag for testingAndy Doan
Change-Id: I470cebd111d13f6d538a9987105a5c345a0ea1e3
2016-05-04colo: allow dns aliasesAndy Doan
We have nodes in openstack that need an alias. This makes generic support for the feature. Change-Id: I8a72062dc5155169f0688ed9e3bf771c798e1a60
2016-05-04colo: update reservationsAndy Doan
Change-Id: Iff6f628acd6d309359fb2d5246ab11b6aeff5231
2016-04-30review.linaro.org: Set default "submit type" for new projects to "Rebase".Paul Sokolovsky
Gerrit doesn't allow to inherit submit type from a parent project (as many of the other settings), and allows to just set default value for all newly created projects: https://review.linaro.org/Documentation/config-gerrit.html#repository https://code.google.com/p/gerrit/issues/detail?id=2257 https://gerrit-review.googlesource.com/#/c/51848/ Change-Id: I3ce232c1025c387d65798db290d441df2d85f83d Reviewed-on: https://review.linaro.org/11693 Reviewed-by: Ben Copeland <ben.copeland@linaro.org>
2016-04-22colo: add reservation for davidAndy Doan
Change-Id: I3ddd91f39521de6366d746e2dccc87946b67e5ba
2016-04-20colo: stop managing iptables.confAndy Doan
This file is now managed dynamically with tools like devcloud-admin. Additionally, we want to allow inline comments. Change-Id: I5db28e940e2c01b5e2a459e2eb6a608171eb6f74
2016-04-20colo: create a simple tool for the devcloudAndy Doan
This creates a simple command members of dev-cloud-admins can use to manage the devcloud Change-Id: I002f9b39a7a36a8eca307c2d2ae738c3b735d880
2016-04-19mirroring-gerrit: git-us.linaro.org: Add LLVM mirror.Paul Sokolovsky
This is first setup of mirror using git-gerrit-mirror tool on git.linaro.org, previously only adhoc TCWG mirroring ran there. TODO: Migrate as many as possible adhoc mirroring targets to this generic setup. Change-Id: Ibd93c890ee68b27776193e544244e99b58b31501 Reviewed-on: https://review.linaro.org/11462 Reviewed-by: Andy Doan <andy.doan@linaro.org>
2016-04-18colo: remove reservationAndy Doan
Change-Id: Iec6bb4a735590427a79eedd41634d021337e0959
2016-04-15colo: add new public ip mappingAndy Doan
Change-Id: Ifcb806fdc618e68ea9627a3a049fb19729fb5c13
2016-04-13roles/apache-auth: Allow to override Apache webroot owner.Paul Sokolovsky
There's new var for this, {{apache_root_owner}}. It defaults to {{apache_user}}, but e.g. git-servers override it to {{git_user}} (required for grokmirror). Change-Id: Ia934c85cd612f08113606309678576f5048e291c Reviewed-on: https://review.linaro.org/11351 Reviewed-by: Andy Doan <andy.doan@linaro.org> Reviewed-by: Ben Copeland <ben.copeland@linaro.org>
2016-04-12colo: update r3-a* server MACsAndy Doan
I've installed new Intel PCI express adapters and the MACs are now different. Change-Id: I7c7ff593ea06dde0c74a7b86c04d4eb95cc10f38
2016-04-12colo: remove reservationAndy Doan
Change-Id: I6aa8b44c16984023cda56dc0e942ae79bb00b826
2016-04-12git-servers/roles/git-config: Add http.cookiefile.Paul Sokolovsky
Set default location of cookie file. If it doesn't exist, there doesn't seem to be a problem. Change-Id: I6f1b16b9bd316d8016787b8dac18e6f7ab6a6c77 Reviewed-on: https://review.linaro.org/11344 Reviewed-by: Andy Doan <andy.doan@linaro.org> Reviewed-by: Ben Copeland <ben.copeland@linaro.org>
2016-04-12mirroring-gerrit: Move mirroring configs for private servers to private repo.Paul Sokolovsky
Change-Id: I91f64e3b8aaa4d13d17483821262933e89b283fc Reviewed-on: https://review.linaro.org/11343 Reviewed-by: Andy Doan <andy.doan@linaro.org> Reviewed-by: Ben Copeland <ben.copeland@linaro.org>
2016-04-12publishing-deps: s3_sanity add crontab entryBen Copeland
Add a crontab entry to run the s3_sanity script. Change-Id: Ifcb80fa11c4f3f52ed84153ca40057abf6fa577e Reviewed-on: https://review.linaro.org/11123 Reviewed-by: Paul Sokolovsky <paul.sokolovsky@linaro.org>
2016-04-12Add leading 0 to file permissionsBen Copeland
Ansible 2.0 breaks on 3 digit octal permissions. Adding leading 0 to octal permissions will pass lint checks. Change-Id: Ica56b2fd00be4f123f39f68401fea547f901931a Signed-off-by: Ben Copeland <ben.copeland@linaro.org> Reviewed-on: https://review.linaro.org/11314 Reviewed-by: Paul Sokolovsky <paul.sokolovsky@linaro.org>
2016-04-11releases-us: Remove from Apache 2.2Ben Copeland
Due to releases-us.l.o now being on 14.04, we no longer need to support Apache 2.2. Change-Id: If6de57e8cbc415ca2d093c4d774e84266eb84cbf Signed-off-by: Ben Copeland <ben.copeland@linaro.org> Reviewed-on: https://review.linaro.org/11228 Reviewed-by: Paul Sokolovsky <paul.sokolovsky@linaro.org> Reviewed-by: Andy Doan <andy.doan+gerrit@linaro.org>
2016-04-06git-servers: Don't use bare variables in with_items: clauses.Paul Sokolovsky
Gives warning with Ansible 2.0. Change-Id: I081314dc657d5f2512beffa1233a2c1c999e13de Reviewed-on: https://review.linaro.org/11210 Reviewed-by: Ben Copeland <ben.copeland@linaro.org>
2016-04-05colo: update reservationsAndy Doan
Change-Id: I8fb02db170fb0b1b7004993ae23595ea7eda86a2
2016-04-05colo: update softiron pdu informationAndy Doan
Change-Id: Ibf528ac278c2380e7f8dcefdd9466a86b65ee814
2016-04-05toolchain-mirror.cron: Don't swallow errors for update_dejagnu_mirror.Paul Sokolovsky
We already have code in toolchain-tools script to filter out normal output and let thru only errors, so stop sending them to /dev/null. Change-Id: Ia0a70c5bb088b6657ebad39018d7e00f10ae7e24 TODO: Review other jobs here for similar issues. Reviewed-on: https://review.linaro.org/11198 Reviewed-by: Andy Doan <andy.doan+gerrit@linaro.org> Reviewed-by: Ben Copeland <ben.copeland@linaro.org>
2016-04-05jenkins: Don't use bare variables in with_items: clauses.Paul Sokolovsky
Gives warning with Ansible 2.0. Change-Id: I5d90cbdf8f0d6fd7ebb007a48795e3cfc95d4ff6 Reviewed-on: https://review.linaro.org/11197 Reviewed-by: Ben Copeland <ben.copeland@linaro.org>
2016-04-02jenkins: plugins updateFathi Boudra
Plugins updated: * Credentials Plugin 1.26 * Durable Task Plugin 1.9 * Folders Plugin 5.6 * Gerrit Trigger 2.19.0 * Git client plugin 1.19.6 * Git plugin 2.4.4 * GitHub API Plugin 1.72.1 * GitHub plugin 1.18.1 * IRC Plugin 2.27 * Jackson 2 API Plugin 2.7.3 * JavaScript GUI Lib: ACE Editor bundle plugin 1.1 * JavaScript GUI Lib: jQuery bundles (jQuery and jQuery UI) plugin 1.2.1 * Job Configuration History Plugin 2.13 * Multijob plugin 1.21 * Naginator 1.17 * Node and Label parameter plugin 1.7.2 * Pipeline 1.15 * Pipeline: API 1.15 * Pipeline: Basic Steps 1.15 * Pipeline: Durable Task Step 1.15 * Pipeline: Execution Support 1.15 * Pipeline: Global Shared Library for CPS pipeline 1.15 * Pipeline: Groovy CPS Execution 1.15 * Pipeline: Job 1.15 * Pipeline: SCM Step 1.15 * Pipeline: Step API 1.15 * Publish Over SSH 1.14 * SCM API Plugin 1.1 * SSH Agent Plugin 1.10 * Static Analysis Utilities 1.76 * Warnings Plug-in 4.52 * Xvfb plugin 1.1.3 Plugins added: * Docker Pipeline plugin (and its dependencies: docker-commons, authentication-tokens) * Metadata plugin Change-Id: I76a110f931dc52ee56b8a3f8474fbd680a43c3c1 Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org> Reviewed-on: https://review.linaro.org/11163 Reviewed-by: Paul Sokolovsky <paul.sokolovsky@linaro.org>
2016-04-01django: update to 1.8.12 bugfixAndy Doan
Simple bugfix Change-Id: Ica700595ff3123a978c6c2f2b3f5bfc39b4c3a40 Reviewed-on: https://review.linaro.org/11168 Reviewed-by: Andy Doan <andy.doan+gerrit@linaro.org>
2016-04-01patchwork: move to commonAndy Doan
Its mostly just moving/renaming files and then updating a few corresponding references to variable names. Change-Id: Ic5e2538a377a430ea5cc0a570ee8f6436be8bf1e Reviewed-on: https://review.linaro.org/11107 Reviewed-by: Andy Doan <andy.doan+gerrit@linaro.org>
2016-04-01colo: first softiron reservationAndy Doan
Change-Id: I900a855df5be366b0a17d5860ac6a0ff44fa1080
2016-03-31colo: add new softiron serversAndy Doan
2016-03-31jenkins: Upgrade Jenkins to 1.642.3 LTS.Paul Sokolovsky
Change-Id: I9397d9db9395d7cf4b2d6fcb99bd0b144f81655a Reviewed-on: https://review.linaro.org/11144 Reviewed-by: Ben Copeland <ben.copeland@linaro.org> Reviewed-by: Ricardo Salveti <ricardo.salveti@linaro.org>
2016-03-30colo: add new block of 64 ipsAndy Doan
Change-Id: I8e8455c4c77f5916abafa4e09d0edc91303c658f
2016-03-30qa-reports: remove from playbookAndy Doan
The QA team wants to manage this on their own and have the code forked into their own repository. This removes it from ours to eliminate confusion. Change-Id: If76e3174c56efc1446d34d84001bc5c41c81c275 Reviewed-on: https://review.linaro.org/11102 Reviewed-by: Ben Copeland <ben.copeland@linaro.org> Reviewed-by: Paul Sokolovsky <paul.sokolovsky@linaro.org>
2016-03-30patchwork: remove use of patchwork role run after djangoAndy Doan
The only thing we really did after the django role was run that couldn't be done in the "pre" role was running the "ensure_projects" script. In practice that task isn't really useful or needed. This removes that task, and adds the others to the "pre" role tasks. Change-Id: I2ec0a4f47d3201cf1779afdac4cf393d31357aee Reviewed-on: https://review.linaro.org/11106 Reviewed-by: Ben Copeland <ben.copeland@linaro.org> Reviewed-by: Paul Sokolovsky <paul.sokolovsky@linaro.org> Reviewed-by: Andy Doan <andy.doan+gerrit@linaro.org>
2016-03-30django: remove "django_apt" supportAndy Doan
Now that qa-reports has been removed, we can remove variables related to that option and rename django_pypi.yml -> main.yml Change-Id: Ic6f64af0a5f6afed40089546a0f5def57ce27c0c Reviewed-on: https://review.linaro.org/11104 Reviewed-by: Ben Copeland <ben.copeland@linaro.org> Reviewed-by: Paul Sokolovsky <paul.sokolovsky@linaro.org>
2016-03-30patchwork: remove ssl-certs roleAndy Doan
This should have been removed with commit: <https://git.linaro.org/infrastructure/ansible-playbooks.git/commit/9d982964117d7decf39ad2833d464ff1200a9cfc> Change-Id: I8e3d0601a92e688e79ac24d7730e0060e64ac2ec Reviewed-on: https://review.linaro.org/11105 Reviewed-by: Ben Copeland <ben.copeland@linaro.org> Reviewed-by: Paul Sokolovsky <paul.sokolovsky@linaro.org>
2016-03-30hostname.yml: Helper playbook to set real hostname on (almost) all servers.Paul Sokolovsky
This is a separate utility playbook intended for occasional (possibly, one-time) tweaking of hostnames on old servers which lack it being set consistently. Any newer servers will be set up properly by ITS. Change-Id: Id58bbb33d6ff425e65af6bcde8b07e50de160e72 Reviewed-on: https://review.linaro.org/11094 Reviewed-by: Paul Sokolovsky <paul.sokolovsky@linaro.org>