jhoblitt/CHANGELOG.md

## CHANGELOG.md

      
    Raw
  

              CHANGELOG.md
            
          
    Changelog

fy23q1 (2022-12-28)

Full Changelog
Merged pull requests:

IT-4200: sdc IPs update #720 (hreinking)
IT-3907: add bts network and pools from IT-4010 #718 (hreinking)
(ipareplica) versionlock 389ds ipa #715 (cbarria)
IT-4115: fix rpi role #714 (hreinking)
(profile::core::common) install NetworkManager-initscripts-updown on EL9 #713 (jhoblitt)
(profile::core::rke) drop class level require of easy_ipa #712 (jhoblitt)
(Puppetfile) bump simp/auditd to 022b80c #711 (jhoblitt)
(rke role) restrict inclusion of clustershell class to EL7/EL8 #710 (jhoblitt)
(profile::core::debugutils) drop tuned-utils-systemtap package #708 (jhoblitt)
disable icinga on EL9 #707 (jhoblitt)
(Puppetfile) bump puppetlabs/postgresql to 8.2.1 #706 (jhoblitt)
(rke role) add EL9 support #705 (jhoblitt)
(common) add EL9 puppet-agent versionlock #704 (jhoblitt)
bump docker to 20.10.21 #703 (jhoblitt)
(profile::core::bash_completion) add EL9 package name #702 (jhoblitt)
(Puppetfile) bump puppet/lldpd to 5.0.0 #701 (jhoblitt)
(Puppetfile) bump ceritsc/tuned to a5966b2 #700 (jhoblitt)
(Puppetfile) bump lsst/java_artisanal to 2.3.0 #699 (jhoblitt)
(gha) switch to 16 core runner #698 (jhoblitt)
(Puppetfile) bump puppet/yum to 6.1.0 #697 (jhoblitt)
(perfsonar1.ls) add SLAC routes #696 (cbarria)
(Puppetfile) bump simp/auditd to 9777116 #695 (jhoblitt)
tweak chronyd config #694 (jhoblitt)
(rpi role) fix auditd & docker package problems #693 (jhoblitt)
Puppetfile: bump ccs_monit version #692 (glennmorris)
(azar03.cp node) mount nfs1.cp.lsst.org:{scratch,project} #691 (jhoblitt)
explicitly set chrony's leapsecmode to system #690 (jhoblitt)
hiera: add role for ccs visualization server #689 (glennmorris)
hiera: add lsstcam-db01 to lsstcam-ccs clustershell config #688 (glennmorris)
add dco (docker compose ops) role account for tssw deployment #687 (jhoblitt)
hiera: adjust lsscam-ccs cluster ccs software settings #686 (glennmorris)
(azar03.cp node) fwv #685 (jhoblitt)
(foreman/cp role) add DHCP pool for startracker|vlan1601 #684 (jhoblitt)
(docker-compose role) use docker-compose package #683 (jhoblitt)
hiera: update the source URL for CCSWebTrending.war #682 (glennmorris)
add basic hiera config for lsstcam-ccs cluster #681 (glennmorris)
prepare pillan cluster for EL8 #680 (jhoblitt)
(pillan cluster) add new EL8 nodes pillan07-09 #679 (jhoblitt)
(rke role) ensure ipa is setup prior to using rke user #676 (jhoblitt)
(profile::core::docker) add EL8 versionlock support #675 (jhoblitt)
(spec) test roles against AlmaLinux 8 #674 (jhoblitt)
bump simp/auditd to cb9f14c to pickup AlmaLinux 8 support #673 (jhoblitt)
(dnscache role/nodes) prepare for EL8 stable interfaces names #672 (jhoblitt)
generic preparations for EL8 #670 (jhoblitt)
Bump rke version to 1.3.12 #669 (cbarria)
manage auditd rules #668 (jhoblitt)
(profile::core::keytab) mv keytab to /var/lib/keytabs/<user> #667 (jhoblitt)
(Gemfile) pin console gem version to 1.15.x #666 (jhoblitt)
forward all host audit logs to graylog #665 (jhoblitt)
IT-3996: dhcp for vlan1907 #664 (hreinking)
enable ipmi on SM H12SSL-NT (lukay, yepun, and gaw) #663 (jhoblitt)
(Puppetfile) bump puppetlabs/vcsrepo to 5.3.0 #662 (jhoblitt)
IT-3987: mount /repo at auxtel-dc01.cp.lsst.org #661 (hreinking)
(rke role) ensure br_netfilter kmod is loaded #660 (jhoblitt)
(dnscache role) change default bind logging to notice #659 (jhoblitt)
[the last part of] initial el8 / almalinux support #584 (jhoblitt)

fy22q4 (2022-09-22)

Full Changelog
Merged pull requests:

IT-3978: fix typo #658 (hreinking)
IT-3978: add vlan 2116 for RubinObs WiFi guests #657 (hreinking)
fix icinga director Uncaught Error: Class 'Icinga\Util\Translator' error #656 (jhoblitt)
(foreman role) set foreman_envsync image to v1.4.1 #655 (jhoblitt)
update misc puppet mods for EL8/AlmaLinux support #654 (jhoblitt)
fix re-provisioning of ipa1.ls.lsst.org #653 (jhoblitt)
allow ssh between saluser@tel-lt1.tu and saluser@tel-hw1.tu #652 (jhoblitt)
IT-3886: Manage ipam instances, PHP, MySQL, and HTTP #650 (hreinking)
IT-3924: add requirements  #649 (hreinking)
rely on puppet/yum module to manage the default os yum repos for all members of the EL osfamily #648 (jhoblitt)
(Puppetfile) bump ceritsc/tuned ref to pickup AlmaLinux support #647 (jhoblitt)
fix ipareplica role versionlock release string #646 (jhoblitt)
replace inline kubectl install code with lsst/kubectl mod #645 (jhoblitt)
replace inline code with lsst/smee mod to gain EL8 support #644 (jhoblitt)
docker cleanup/update #643 (jhoblitt)
update to modern yum::versionlock api  #642 (jhoblitt)
(cp site) bump rke to 1.3.12 #641 (jhoblitt)
(metadata.json) drop puppet6 support #640 (jhoblitt)
puppet6 -> puppet7 migration #639 (jhoblitt)
lsst/ puppet forge modules update - modulesync 5.3.0 #638 (jhoblitt)
update ccs related puppet mods for EL8 support #637 (jhoblitt)
hiera: add ccs pathfinder and hexvalves services on comcam-lion03 #636 (glennmorris)
Add FQDN entry to /etc/hosts on CCS clusters #634 (glennmorris)
IT-3888: fix cmms role #633 (hreinking)
(tu site) bump k8s to v1.23.7-rancher1-1 #632 (jhoblitt)
(ruka) bump k8s to v1.23.7-rancher1-1 #631 (jhoblitt)
(Puppetfile) bump lsst/rke to 1.1.0 #630 (jhoblitt)
(Puppetfile) bump lsst/cni to 2.2.0 #629 (jhoblitt)
(Puppetfile) bump lsst/dellperc to 1.1.0 #628 (jhoblitt)
(foreman role) add foreman discovery plugin #627 (jhoblitt)
(Puppetfile) bump puppet/rsyslog to 6.0.0 #626 (jhoblitt)
IT-3726: nodes cleanup #625 (hreinking)
(forwarder role) rm; no longer used #624 (jhoblitt)
(spec) reduce role catchall to one site per OS at random #623 (jhoblitt)
test classes/defines using facterdb data #622 (jhoblitt)
rm archiver usage of redis & rabbitmq #621 (jhoblitt)
(Puppetfile) bump puppet/augeasproviders_grub to 4.0.0 #620 (jhoblitt)
(Puppetfile) bump puppetlabs/tomcat to 6.2.0 #619 (jhoblitt)
(Puppetfile) bump saz/timezone to 6.2.0 #618 (jhoblitt)
(Puppetfile) bump theforeman/foreman to 20.2.0 #617 (jhoblitt)
(Puppetfile) bump puppet/telegraf to 4.2.0 #616 (jhoblitt)
(Puppetfile) bump puppet/python to 6.3.0 #615 (jhoblitt)
(common) fix setting of yum::plugin::versionlock::clean param #614 (jhoblitt)
(dm-bastion role) include profile::core::common #613 (jhoblitt)
(fixtures) sort private hiera keys #612 (jhoblitt)
(dnscache role) rm site specific override of dns::forwarders #611 (jhoblitt)
add spec coverage for all roles #610 (jhoblitt)
(ipamaster role) rm; all ipa servers are using ipareplica role #609 (jhoblitt)
(profile::core::puppet_master) rm duplicate cron resource spec #608 (jhoblitt)
Install newer maven on CCS hosts #607 (glennmorris)
Bump ccs java_artisanal version to 2.2.1 #606 (glennmorris)
decouple profile mod spec from production hiera data #605 (jhoblitt)
fix lldpd order of operations error #604 (jhoblitt)
It 3826/comcam auxtel xml12 #603 (tony-johnson)
include java17 in profile::ccs::common #602 (glennmorris)
hiera: actually change source url for ccs packages to nexus #601 (glennmorris)
IT-3825: add private network #600 (hreinking)
Switch to nexus as the source for CCS packages #599 (glennmorris)
IT-3832: cmms #598 (hreinking)
quick fix to ansible script #597 (hreinking)
IT-3821: puppetize ansible over CentOS #596 (hreinking)
fix ipa client setup order of operations #595 (jhoblitt)
IT-3824: gpio fix and minore fixes #594 (hreinking)
IT-3811: Enable IPA Password Reset #593 (hreinking)
Remove disable lldp #592 (hreinking)
(profile::core::debugutils) add jq package #589 (jhoblitt)
(rke role) enable tab completion for k alias of kubectl #587 (jhoblitt)
(profile::core::puppet_master) fix cron /dev/null redirects #586 (jhoblitt)
update foreman to 3.2.1 #585 (jhoblitt)
(hypervisor/dev role) update network config #583 (jhoblitt)
(profile::core::common) rm ifcfg- file #582 (jhoblitt)
(comcam-ocsbr01.cp) add br1600 interface #532 (jhoblitt)

fy22q3 (2022-07-01)

Full Changelog
Merged pull requests:

manage daq-mgt.tu & auxtel-daq-mgt.cp NFS exports #591 (jhoblitt)
hiera: no longer set ccs_monit::temp for comcam-fp01 #590 (glennmorris)
IT-3746: exclude overlay, tmpfs and non escentials #588 (hreinking)
add cbarria_b account #581 (cbarria)
(daq-mgt role) unset dhcp dnsdomain/nameservers/ntpservers options #580 (jhoblitt)
Set netdev as tftp server #579 (hreinking)
migrate summit comcam DAQ DHCP server to comcam-daq-mgt.cp.lsst.org #578 (jhoblitt)
(foreman role) bump puppetserver to 6.19.0 #577 (jhoblitt)
bump pupetdb to 6.19.1 to match existing versionlock #576 (jhoblitt)
(common) bump puppet agent to 6.27.1 #575 (jhoblitt)
IT-3756: add vlan 1102 #574 (hreinking)
rm jumbo frames from interfaces not used for LHN data transfer #573 (jhoblitt)
IT-2373: add velero cli to rke nodes #572 (hreinking)
IT-3732: fix rpi role #571 (hreinking)
rm org node parameter for spec tests (no longer used) #570 (jhoblitt)
IT-2645: add firewalls to icinga #569 (hreinking)
(pillan cluster) add all ports to bond0; mv vlan interfaces to bond0 #568 (jhoblitt)
add Puppetfile specs #567 (jhoblitt)
IT-3720: profile for ubuntu nodes #566 (hreinking)
add stm/debconf 4.1.0 #565 (jhoblitt)
(rke/ls role) bump rke to 1.3.6 #564 (jhoblitt)
fix hiera top level role spec; sort hiera classes & packages keys #563 (jhoblitt)
add strace to comcam-fp01[-tts], daq-mgt, and atsdaq roles #562 (jhoblitt)
IT-3714: Change syslogs and snmp monitoring to TU monitoring instance #561 (hreinking)
It 3673/comcam software 2.3.2 #560 (mxturri)
It 6372/comcam auxtel xml11.1 dmtn143 #559 (mxturri)
IT-3703: allow export /data/allsky #558 (hreinking)
hiera: move auxtel ccs udp_properties to a cluster-wide setting #557 (glennmorris)
(dev site) fix dns1.dev.lsst.org IP address #556 (jhoblitt)
fix dev dhcp #555 (jhoblitt)
swich to Intel NICs at yagan #554 (hreinking)
IT-3663: update hexrot role #553 (hreinking)
update puppet mods; prune unused puppet mods #552 (jhoblitt)
rm nts code; rm hiera org layer #551 (jhoblitt)
missing node configuration for dns[1,2,3] LS #550 (hreinking)
It-3635: survival dns #549 (hreinking)
(ls site) update docker to 20.10.12 #529 (jhoblitt)

fy22q2 (2022-03-29)

Full Changelog
Merged pull requests:

IT-3644: add cctv network to dhcp #548 (hreinking)
IT-3643: change project mount mode to 1777 #547 (hreinking)
IT-3637: CP ccs transfers #546 (hreinking)
IT-3588 and IT-3634: ccs transfer #545 (hreinking)
IT-3568: Summit host's renaming #544 (hreinking)
IT-3606: update interface for UNO device #543 (hreinking)
IT-3567: add tu site to icinga #542 (hreinking)
IT-3577: separate monitoring/syslog into sites #541 (hreinking)
IT-3567: add tu site to monitoring and syslog #540 (hreinking)
It 3493/comcam auxtel xml10.2 #539 (tony-johnson)
IT-3542: collect syslog to CP graylog #538 (hreinking)
(rke/cp role) bump rke to 1.3.6 #537 (jhoblitt)
Bump ccs_software module to 1.0.1 #536 (glennmorris)
IT-3483: add yepun cluster #535 (hreinking)
(profile::icinga::master) nginx should use full tls cert chain #534 (jhoblitt)
update ipa3 IP #533 (hreinking)
(profile::core::docker) start docker.service after sssd.service #531 (jhoblitt)
fix assorted antu nodes being unable to pull docker images from gcr.io/storage.googleapis.com #530 (jhoblitt)
(cp site) update docker to 20.10.12 #528 (jhoblitt)
attempt to improve NVMe hotplug on Supermicro 1114S-WN10RT #527 (jhoblitt)
IT-3482: turn ruka cluster into dev #526 (hreinking)
IT-3484: luan cluster profile #525 (hreinking)
update to ~ voxpupuli 5.1.0 plumbing #524 (jhoblitt)
update lsst/ puppet mods #523 (jhoblitt)
update tu k8s to1.21 #522 (jhoblitt)
(hexrot role) disable ctio nexus yum repos; hostname does not exist #521 (jhoblitt)
(profile::core::dtn) rm tql_tunning service; replace with NM dispatch #520 (jhoblitt)
manage dtn01.ls.lsst.org interfaces + sysctls #519 (jhoblitt)
fix foreman ssh public key #518 (hreinking)
Update comcam-ccs.yaml #517 (mxturri)
Update comcam-ccs.yaml #516 (mxturri)
Update comcam-ccs.yaml #515 (mxturri)
IT-3443: Signed Ipam cert #514 (hreinking)
bump tu docker to 20.10.12 #513 (jhoblitt)
migrate to lsst/helm_binary for managing /usr/bin/helm #512 (jhoblitt)
bump lsst/rke to 0.2.0 #511 (jhoblitt)
(cp site) update all k8s cluster to v1.20.13-rancher1-1 #510 (jhoblitt)
(foreman/tu role) add laserlab|vlan3090 DHCP pool #509 (jhoblitt)
(foreman role) fix puppetserver versionlock #508 (jhoblitt)
update to puppet 6.25.1 #507 (jhoblitt)
It 3458/comcam software #506 (mxturri)
It 3407/comcam auxtel xml 10.1 #505 (mxturri)
Update comcam-ccs.yaml #504 (mxturri)
(tu) mount nfs-scratch.tu.lsst.org:/scratch on amor nodes to allow user admin #503 (jhoblitt)
(tu site) change /data/repo pillan export to rw #502 (jhoblitt)
(auxtel-mcm.tu node) fix dds subnet gw #501 (jhoblitt)
(antu cluster)  bump k8s to v1.20.13-rancher1-1 #500 (jhoblitt)
(kueyen cluster) v1.20.13-rancher1-1 #499 (jhoblitt)
(ruka cluster) v1.20.13-rancher1-1 #498 (jhoblitt)
(rancher.tu cluster) v1.20.13-rancher1-1 & rancher 2.6.3 #497 (jhoblitt)
(tu) bump rke to 1.3.3 #496 (jhoblitt)

fy22q1 (2021-12-27)

Full Changelog
Merged pull requests:

adding comp-prep01 and main7-as01 #495 (hreinking)
add prep-nuc01 node #494 (hreinking)
IT-3414: vms-data server #493 (hreinking)
IT-3401: fix gateway #492 (hreinking)
IT-3149: manage file 99-libftdi.rules #491 (hreinking)
change I/O membership to docker for rpi #490 (hreinking)
IT-3408 bump NCSA docker version to 20.10.11 #489 (andylytical)
DM-32881 bump NCSA default OS snapshot #488 (andylytical)
IT-3397: update rke #487 (hreinking)
IT-3402: change AMA1 group to docker #486 (hreinking)
IT-3400: disable lldp for rpi role #485 (hreinking)
IT-3400: split vlan 1305 into 3 subnets #484 (hreinking)
IT-3393: Perform CP site fixes and rancher.cp #483 (hreinking)
IT-3390: remove andes and add yagan cluster from monitoring #482 (hreinking)
Install /usr/local/bin/cfs on ccs hosts #481 (glennmorris)
Bump ccs_software module version #480 (glennmorris)
profile::ccs::tomcat: change to a more stable download URL #479 (glennmorris)
Comcam-software 2.2.2 #478 (jhoblitt)
Set up nfs/export mount on comcam-fp01/comcam-vs01 (on summit) #477 (jhoblitt)
IT-3352: Yagan Cluster #476 (hreinking)
(pillan cluster) bump rke to 1.3.2 #475 (jhoblitt)
Replace profile::ccs::clustershell with standard clustershell module #474 (glennmorris)
(ruka cluster) bump rke to 1.2.13 #473 (jhoblitt)
ensure that NetworkManager is running #472 (jhoblitt)
(auxtel-mcm.tu node) add dds interface #471 (jhoblitt)
(auxtel-ccs.tu cluster) fwv #470 (jhoblitt)
(auxtel-fp01.tu node) set ccs_software::hostname to atsdaq1 #469 (jhoblitt)
Replace profile::ccs::daq_client with module ccs_daq #468 (glennmorris)
rename TTS auxtel hosts (auxtel-mcm & auxtel-fp01) #467 (jhoblitt)
({auxtel,comcam}-archiver.tu node) nfs export typos #466 (jhoblitt)
hiera: add the h2db service on comcam-fp01.tu #465 (glennmorris)
CCS changes for Tucson test-stand #464 (glennmorris)
(auxtel-ccs{1,2}.tu nodes) nfs export /css-data from -ccs2 -> -ccs1 #463 (jhoblitt)
comcam-fp01.tu nfs exports to comcam-dc01.tu #462 (jhoblitt)
(defaults) fix openldap certs path #461 (jhoblitt)
(forwarder role) add git package #460 (jhoblitt)
add docker::networks to profile::core::docker #459 (jhoblitt)
update ca-certificates package on all hosts; bump foreman_envsynv to 1.1.1; restart smee & webhook daily #458 (jhoblitt)
(rke role) add jq package #457 (jhoblitt)
IT-3294: Add Mount Points LATISS and LSSTComCam to dm-bastion01 #456 (igonzalezcl)
update foreman_envsync to 1.1.0 #455 (jhoblitt)
archiver role refactor #454 (jhoblitt)
dedup LHN tuning sysctls #453 (jhoblitt)
IT-3278: add dmz zone and  specify external nameservers #452 (hreinking)
retire core<site>_production puppet env naming convention #451 (jhoblitt)
IT-2347: add vlan 2199 #450 (hreinking)
add dds bridge interface to all multi-homed TTS hosts #449 (jhoblitt)
(andes cluster) bump rke to 1.2.13 #448 (jhoblitt)
fix docker daemon startup issues #447 (jhoblitt)
(amor tu role) use dds interface for docker networking #445 (jhoblitt)
It 3204/comcam software #444 (tony-johnson)
add spec to check for lsst top level roles #443 (jhoblitt)
IT-3240: add role for dm-bastion #442 (hreinking)
IT-3243: add base and summit wlc to icinga #441 (hreinking)
IT-3240: adjust server mountpoint #440 (hreinking)
(daq-mgt role) add serial console packages #439 (jhoblitt)
rename comcam-fwd02.tu -> comcam-dc01.tu #438 (jhoblitt)
rename comcam-fwd01.tu -> forwarders.tu #437 (jhoblitt)
provision tel-hw1.tu #436 (jhoblitt)
provision comcam-fp01.tu #435 (jhoblitt)
provision comcam-archiver.tu #434 (jhoblitt)
provision comcam-mcm.tu #433 (jhoblitt)

fy21q4 (2021-09-30)

Full Changelog
Merged pull requests:

provision auxtel-archiver.tu #432 (jhoblitt)
provision comcam-fwd0[12].tu #431 (jhoblitt)
fix puppet-lint warnings #430 (jhoblitt)
IT-3200: add summit icinga instance, vcenter/vsphere and cross-site monitoring #429 (hreinking)
provision love1.tu #428 (jhoblitt)
provision auxtel-ccs[12].tu #427 (jhoblitt)
provision daq-mgt.tu node #426 (jhoblitt)
(m1m3 role) add catch-devel & yaml-cpp-devel packages #425 (jhoblitt)
IT-2471: Add opsgenie integration #424 (hreinking)
(tu site) enable powertop auto-tune #423 (jhoblitt)
(tu site) set tuned profile to powersave #422 (jhoblitt)
IT-3196: Enable VMWare as compute resource #421 (hreinking)
IT-3156: Manage config from boot file and minicom #420 (hreinking)
IT-3182: remove end space character #419 (hreinking)
IT-3154: add tmux and rsync #417 (hreinking)
expand tu teststand dds subnet dhcp pools #416 (jhoblitt)
Disable icinga and telegraf from allsky2 #415 (hreinking)
IT-2987:  Raspberry Puppet Role #414 (hreinking)
IT-3164: add network 139.229.168.0/24 #413 (hreinking)
(m2 role) fix lsst-ts-private/ts_yum_private repo #412 (jhoblitt)
forbid classes in the hiera node layer #411 (jhoblitt)
pull lsst/dellperc from the forge instead of git #410 (jhoblitt)
automatically install perccli when Dell PERC controller is present #409 (jhoblitt)
migrate from travis-ci to github actions #408 (jhoblitt)
IT-3127 NCSA OS snapshot 2021-07-22-1626989101 #407 (andylytical)
(puppetdb role) bump puppetdb to 6.18.0 #406 (jhoblitt)
upgrade tu rke #405 (jhoblitt)
(ccs-mcm role) re-enable management of tomcat #404 (jhoblitt)
Make puppet generate sudo files for ccs services, rather than relying on a cron job #403 (glennmorris)
(p::ccs::tomcat) update JAVA_HOME & CATALINA_BASE #402 (jhoblitt)
(trewa cluster) rm kernel version pin #401 (jhoblitt)
trewa dds debugging env #400 (jhoblitt)
(archiver role) versionlock rabbitmq/erlang #399 (jhoblitt)
(p::core::common) do not include scl on aarch64  #398 (jhoblitt)
(p::core::docker) fix versionlock epochs #397 (jhoblitt)
(p::core::docker) fix default version string #396 (jhoblitt)
disable ipv6 by default for dev & ls #395 (jhoblitt)
It 3026/comcam auxtel software #394 (tony-johnson)
versionlock perfsonar packages #393 (jhoblitt)
rm unused epel/scl repos #392 (jhoblitt)
cleanup centos yum repo names #391 (jhoblitt)
manage centos base yum repos by default #390 (jhoblitt)
rm all explicit docker version strings #389 (jhoblitt)
versionlock docker packages #388 (jhoblitt)
(ipareplica role) versionlock freeipa packages #387 (jhoblitt)
configure resolv.conf to rotate nameservers #386 (jhoblitt)
versionlock foreman #385 (jhoblitt)
versionlock puppetserver & puppetdb #384 (jhoblitt)
versionlock puppet-agent-6.22.1-1.el7.x86_64 #383 (jhoblitt)
include profile::core::kernel by default #382 (jhoblitt)
install yum versionlock plugin by default #381 (jhoblitt)
rm versionlocked kernel versions #380 (jhoblitt)
support pillan cluster refresh #379 (jhoblitt)
reduce systemd reboot timeout to 3 minutes #378 (jhoblitt)
bump theforeman/dhcp to 7.0.0 #377 (jhoblitt)
(dev) fix hypervisor foreman ssh pubkey #376 (jhoblitt)
(tu) fix hypervisor foreman ssh pubkey #375 (jhoblitt)
rm node nfs01.tu (no longer exists) #374 (jhoblitt)
tu network changes to support pillan cluster #373 (jhoblitt)
rm environment config from puppet.conf  #372 (jhoblitt)
IT-3083: Mount /readonly/lsstdata/auxtel at dm-bastion #371 (hreinking)
IT-3081: turn comcam-dmctl01 into a hypervisor #370 (hreinking)
(ipa{master,replica} role) enable bash completion #369 (jhoblitt)
add ipa clustershell group #368 (jhoblitt)
disable .ssh/authorized_keys by default; whitelist root & foreman users #367 (jhoblitt)
disable sudo lecture #366 (jhoblitt)
add ipa3.cp.lsst.org #365 (jhoblitt)
(archiver,ccs-mcm,atsccs roles) recursively ignore /tmp/docker_tmp  #364 (jhoblitt)
purge ssh pub keys for all managed accounts #363 (jhoblitt)
rm sudo wheel rule #362 (jhoblitt)
disable telegraf logging #361 (jhoblitt)
prune unused docker resources #360 (jhoblitt)
remove "authoritative" statement from dhcp pools #359 (jhoblitt)
(hyperviser role) purge unmanaged foreman pubkeys #358 (jhoblitt)
(rke role) install bash git prompt + misc convenience #357 (jhoblitt)
(foreman role) ignore all classes except profile:: #356 (jhoblitt)
IT-3040: Create hvac role  #355 (hreinking)
IT-3000: Access to Nexus CAG repo #354 (hreinking)
IT-3004: Add new switches and replace old IPs #353 (hreinking)

fy21q3 (2021-06-30)

Full Changelog
Merged pull requests:

add .conf to systemd::tmpfile resource names #352 (jhoblitt)
IT-3028: add RubinObs_LHN to global exports #351 (hreinking)
IT-3028: add RubinObs-LHN network to nfsserver #350 (hreinking)
IT-3024 update docker nat ignore rules for puppet firewall #349 (andylytical)
IT-3022 bump NCSA pakrat snapshot to 2021-06-16-1623878701 #348 (andylytical)
IT-3017: Landing Node for DM #347 (hreinking)
(rancher.cp) bump docker/helm/rke #346 (jhoblitt)
add tu rancher cluster #345 (jhoblitt)
upgrade tu/ls/dev clusters to cert-manager 1.3.1 #344 (jhoblitt)
increase foreman session idle timeout to 5 days (7200 minutes) #343 (jhoblitt)
bump lsst/cni mod to 1.0.0 #342 (jhoblitt)
change vlan3040 dhcp pool to 140.252.146.90-94 #341 (jhoblitt)
migrate to new tu teststand ip address space #340 (jhoblitt)
Bump ccs_sal module version to 0.5.0 #339 (glennmorris)
enable dns3.cp as resolver #338 (jhoblitt)
rm dds network debug IPs from antu cluster #337 (jhoblitt)
foreman performance tuning #336 (jhoblitt)
antu rke + docker update #335 (jhoblitt)
add tmpfiles.d rule for /tmp/docker_tmp  #334 (jhoblitt)
change  comcam-arctl01 & comcam-mcm dds interface dhcp -> static ip #333 (jhoblitt)
IT-2954/ComCam-Auxtel-xml90 #332 (jhoblitt)
hieradata: set ccs_sal ospl_home for auxtel and comcam clusters #331 (glennmorris)
hierdata: add ccs software comcam-mmm service #330 (glennmorris)
update foreman to 2.4.0 + manage foreman-proxy #329 (jhoblitt)
IT-2819: Add dimm nfs mount to atarchiver #328 (hreinking)
hiera: add rh-git218 to ccs clusters #327 (glennmorris)
IT-2962 update ncsa OS snapshot #326 (andylytical)
hexrot node newline #325 (hreinking)
migrate tu hosts from tuc.lsst.cloud -> tu.lsst.org #324 (jhoblitt)
Fix identation #323 (hreinking)
manage /rubin ownership & permissions recursively  #322 (jhoblitt)
enable postfix with only ipv4 #320 (hreinking)
IT-2939 remove puppet-miniconda #319 (andylytical)
tu teststand refactor core networking #318 (jhoblitt)
It 2753/comcam software v2 #317 (glennmorris)
Bump ccs_sal module version #316 (glennmorris)
IT-2737-hexapod-gui #314 (jhoblitt)
IT-2926: Create /repo and export NFS RW for gen3 butler summit services #313 (hreinking)
IT-2914: allow chrony forwarding to internal netowork #312 (hreinking)
IT-2820: auxtel ccs #311 (glennmorris)
Comcam mcm sal #310 (glennmorris)

fy21q2 (2021-03-26)

Full Changelog
Merged pull requests:

fix comcam-mcm dds static routes #309 (jhoblitt)
IT-2844: replace short hostname for fqdn #308 (hreinking)
IT-2833: Replace umbrella dns forwarders for cloudfare #307 (hreinking)
IT-2815: Enable servers to send metrics over telegraf #306 (hreinking)
Updates for xml 8.0.0 and Python 3.8 #305 (menanteau)
IT-2825: add users network to nfs export and dimm #304 (hreinking)
IT-2798: Add lsstcam ccs network to foreman and minor adjustments to comcam-dc01 node #302 (hreinking)
Bump lsst/ccs_monit to v0.1.2 #301 (glennmorris)
IT-2792: Add ts-lsst repos #300 (hreinking)
IT-2690: SAL Teststand #299 (hreinking)
update rke & helm #298 (jhoblitt)
add chonchon cluster #297 (jhoblitt)
It 2751/hvac01 node #296 (csilva-cl)
IT-2513: Add 3 new nodes to ruka cluster #295 (hreinking)
manage cni ipam dhcp plugin on k8s cluster with multus #294 (jhoblitt)
Updates to NTS header service for xml 7.1.0 #293 (menanteau)
add daq-mgmt role #292 (jhoblitt)
update /project/shared/auxTel/_parent symlink #291 (jhoblitt)
use <site>._locations.<realm> for ipa srv lookups #290 (jhoblitt)
filter out KRB5CCNAME env var when sudo'ing to a user #289 (jhoblitt)
add forwarder role + passwd-less ssh forwarder->archiver #288 (jhoblitt)
add socat to debugutils package list #287 (jhoblitt)
remove vlan1201/vlan1400 test IPs; expand 139.229.170.0/24 dhcp pool #286 (jhoblitt)
fix dds static routes on atarchiver #285 (jhoblitt)

fy21q1 (2020-12-30)

Full Changelog
Merged pull requests:

IT-2699: Raspberry profile for puppet #284 (hreinking)
redundant entry for 160.0/24 at lsstdata #283 (hreinking)
IT-2697: Missing AuxTel network at exports #282 (hreinking)
IT-2697: Add network 170.0/24 for dimm nfs mount #281 (hreinking)
IT-2688: Add nfs mount at nfs1 for dimm.cp #280 (hreinking)
IT-2687: fix CTIO gateway, setup routes for VPN and Rubin, add monitoring for second interface #279 (hreinking)
IT-2661: Add vimp packages requirement #278 (hreinking)
IT-2687: Network Diagnostic Node #277 (hreinking)
Update HeaderService to 2.6.0 #276 (menanteau)
change 139.229.170.0/24 dhcp pool to .64 - .128 (~/26) #275 (jhoblitt)
rm andes bond0 #274 (jhoblitt)
abandon vlan1301/139.229.167.0/24 #273 (jhoblitt)
audit summit host network configuration #272 (jhoblitt)
disable ipv6 for all cp hosts #271 (jhoblitt)
Install some more basic OS rpms on CCS nodes #270 (glennmorris)
IT-2633: add border router and additional IPMI switch #269 (hreinking)
Changes to NTS for ts_xml 7.0.0 and HS 2.5.4 #268 (menanteau)
IT-2649: move role dtn to ls, use common profile and add flag to firewall #267 (hreinking)
IT-2595: Turn comcam-ocsbr01 into a hypervisor for control network VMs #266 (hreinking)
update rke & k8s on andes cluster #264 (jhoblitt)
IT-2581: m2-control node definition for VIPM #263 (hreinking)
add vlan1201 to andes cluster #256 (jhoblitt)
comcam ls -> cp migration #255 (jhoblitt)
move kueyen from summit -> bdc teststand control/sal network #254 (jhoblitt)
IT-2524: Add monitoring to Summit switches and gateways #253 (hreinking)
merge atarchiver & comcam-arctl roles -> archiver #252 (jhoblitt)
add hexrot, m2, and m1m3 roles #251 (jhoblitt)
Updates for xml 6.2.1 #250 (menanteau)
manage /etc/ipa/default.conf on ipa clients #249 (jhoblitt)
manage openldap config on ipa clients #248 (jhoblitt)
add /run/ospl path to kueyen, antu, andes, & pillan nodes #247 (jhoblitt)
disable ssh ChallengeResponseAuthentication #246 (jhoblitt)
enable ssh between hosts using krb5 by default #245 (jhoblitt)
manage sssd config on ipa clients #244 (jhoblitt)
improve ipareplica bootstrapping #243 (jhoblitt)
manage docker + docker-compose in atarchiver role #242 (jhoblitt)
Updates to NTS puppet for HeaderService 2.5.0 #241 (menanteau)
add dns3.tu + update tu dns/dhcp/ntp config #240 (jhoblitt)
add core3.tu hypervisor #239 (jhoblitt)
IT-2498: update syslog destination #238 (hreinking)
LSST3559 remove ncsa bastion node #237 (andylytical)
LSST-3559 updates for private access to sal2 yumrepo #236 (andylytical)
IT-2487: change network 1621 for 1101 #235 (hreinking)
Bump ccs_software to v0.4.2 #234 (glennmorris)
IT-2484: Summit Network Normalization #233 (hreinking)
IT-2472: mrtg to icinga #232 (hreinking)

fy20q4 (2020-09-18)

Full Changelog
Merged pull requests:

Bump ccs_software to v0.4.1 #231 (glennmorris)
IT-1739: additional features monitoring #230 (hreinking)
bump lsst/ccs_software to v0.4.0 #228 (jhoblitt)
change ocs-bridge-comcam service to 20200807 installation #227 (jhoblitt)
IT-2444: Remove force deploy exec, add icinga director daemon, php additional modules and add visitors role #225 (hreinking)
Revert "remove force deploy, add director daemon" #221 (hreinking)
tidy-up dnscache role #219 (jhoblitt)
add ipa CA to all ipareplicas + dedup ipa role hiera keys #218 (jhoblitt)
add dns3.ls.lsst.org as NS for ls & dev #217 (jhoblitt)
undefine puppet::server_common_modules_path #216 (jhoblitt)
forward 136.229.139.in-addr.arpa to crux (active directory) #215 (jhoblitt)
IT-2427: icinga master as CA for icinga agents #214 (hreinking)
explicitly manage all dev hypervisor physical ports / update core2.dev trunk port #213 (jhoblitt)
Update HeaderService to version 2.3.3 #212 (menanteau)
sync tu dhcp dns w/ tu resolv.conf #211 (jhoblitt)
Allow scp from BDC nodelist, add ampath to nodelist #210 (andylytical)
bump puppet agent to version 6.17.0 #209 (jhoblitt)
mv sysctl related profiles to profile::core::sysctl:: namespace #208 (jhoblitt)
add p::core::debugutils to foreman role #207 (jhoblitt)
reboot node if selinux state is incorrect #206 (jhoblitt)
dedup inclusion of network #205 (jhoblitt)
dedup inclusion of sysctl::values #204 (jhoblitt)
rm pihole role #203 (jhoblitt)
bypass pihole and resolve directly to AD #202 (jhoblitt)
Setting icinga-agent flag to enable in dev site #201 (hreinking)
adding boolean for install, not installing in tu. #200 (hreinking)
puppetdb + basic puppetserver/foreman management #199 (jhoblitt)
disable telegraf due to log noise #198 (jhoblitt)
add perfsonar1.ls.lsst.org host #197 (jhoblitt)
add puppet-lint puppet-lint-strict_indent-check plugin #196 (jhoblitt)
add profile::core::letsencrypt #195 (jhoblitt)
IT-2391: icinga-master and icinga-agent profiles creation #194 (hreinking)
Updates for ts_xml 6.1 and other TS&S versions #192 (menanteau)
Revert "increase antu primary interface mtu to 9000" #191 (jhoblitt)
add 2500mbit rate limit for flows to NCSA #190 (jhoblitt)
add lhn tuning to comcam-fp01 #189 (jhoblitt)
Adding ospl_rpm_version #187 (menanteau)
add lhn tcp/ip tuning to antu cluster (and sync w/ comam-{arctl01,frwd01,frwd02}) #186 (jhoblitt)
Adding sal2::ts_dds_version variable to track the conda dds #185 (menanteau)
add 2500mbit rate limit on lhn interfaces #184 (jhoblitt)
Add comcam-software 1.0.6 to hieradata/cluster/comcam-ccs.yaml #183 (jhoblitt)
add lhn route for 141.142.237.0/24 & 141.142.238.0/23 #182 (jhoblitt)
Add profile::ncsa::lhn_target_from_bdc #181 (andylytical)
Bump lsst/ccs_mrtg to v0.1.1 #178 (glennmorris)
rm dead roles (graylog, influxdb, grafana) #177 (jhoblitt)
comcam-software-1.0.5 #176 (tony-johnson)
add pathfinder-ccs cluster #175 (jhoblitt)
fix sysctl::values::args failure on ls-fwd01 #174 (jhoblitt)
rm athebo & athebo_b users #173 (jhoblitt)
Bump lsst/ccs_monit to v0.1.1 #172 (glennmorris)

fy20q3 (2020-07-01)

Full Changelog
Merged pull requests:

add static routes for google lhn prefixes #171 (jhoblitt)
rm p::ccs::sysctl -- conflicts with LHN tuning #170 (jhoblitt)
add lhn static routes to comcam-frwd02  #169 (jhoblitt)
add CCSWebTrending.war to ccs-mcm role #168 (jhoblitt)
add nfs01 node definition #167 (hreinking)
Puppet updates for ts_xml 6.0 on the NTS #164 (menanteau)
Adding role for generic csc #163 (menanteau)
Update HeaderService version #162 (menanteau)
Add profile::headerservice_conda #161 (andylytical)
It 2313 tuc rke #160 (hreinking)
telegraf: re-enable service #159 (adrienthebo)
Add lsst/sal2 #158 (andylytical)
add condition for first run #157 (hreinking)
comcam ccs deployment #156 (jhoblitt)
rm puppetlabs/git mod; unused & github repo is archived #155 (jhoblitt)
rm ats role (unused/migrated to docker?) #153 (jhoblitt)
Disable telegraf while ruka is undergoing maintenance #152 (adrienthebo)
add atadbot to docker group #151 (jhoblitt)
centralize hiera lookup_options #150 (jhoblitt)
Add puppet-miniconda #149 (andylytical)
disable rp_filter by default; install net debug utils on all LHN attached nodes #148 (jhoblitt)
add comcam-frwd01 p2p1 interface + lhn routes #147 (julioconstanzo)
add tcp/ip sysctls for lhn tuning #146 (jhoblitt)
telegraf: reduce load on influxdb #145 (adrienthebo)
cleanup hypervisor role + setup ls-fwd01 as comcam ccs hypervisor #144 (jhoblitt)
add numactl to debug packages list #143 (jhoblitt)
add dhcp for archive lhn subnet + add comcam-arctl01 lhn interface #142 (jhoblitt)
change redis listening address + add rabbitmq guest user permissions #141 (jhoblitt)
kubecompletion and antu to ruka kernel version fix #140 (hreinking)
allow dns queries from 10.0.0.0/8 #138 (jhoblitt)
dtn role #137 (hreinking)
add vlan2500 to ls-fwdr01 so it can be used for ccs development #136 (jhoblitt)
cluster/ruka: bump kernel versionlock to currently available version #135 (adrienthebo)
Update ls.yaml #133 (hreinking)
split collector in two #132 (hreinking)
IT-2259/new cluster: deploy-test-ncsa #130 (andylytical)
initial comcam-arctl role #129 (jhoblitt)
IT-2206 add profile::ncsa::allow_sudo #128 (andylytical)
Point telegraf at the new influxdb CNAME #127 (adrienthebo)
disable tag to 134 network #126 (hreinking)
Coredev production #125 (hreinking)
remove hardware specific network config from top level roles #124 (jhoblitt)
add profile::ccs::sysctl #123 (jhoblitt)
add NM dispatch script for DAQ interface device params #122 (jhoblitt)
add comcam-sm interface/hosts to comcam-fp01 #121 (jhoblitt)
manage DAQ network dhcpd #120 (jhoblitt)
add /lsstdata/admin nfs mount to bastion role @ site ls #119 (jhoblitt)
rm lsst/ccs & lsst/headerservice mods (unused) #118 (jhoblitt)
manage lsst-daq interface name on dhcp client nodes #117 (jhoblitt)
IT-2184 New cluster "deploy-test-ncsa" #116 (andylytical)
manage ccs lsst-daq interface #115 (jhoblitt)
stirb in einem feuer libwrap #114 (jhoblitt)
add interface value in kueyen cluster #113 (hreinking)
fix dangling whitespace #112 (jhoblitt)
ifdown class #110 (hreinking)
rename to ruka #109 (hreinking)
moving to network 139.229.134.0/24 #108 (hreinking)
Create lazuli cluster profile #107 (hreinking)
Update ncsa ldap group names #106 (andylytical)
fix usage of profile::comcam::common #105 (jhoblitt)
add comcam-fp role + minor cleanups #104 (jhoblitt)
IT-2092 Add role::puppet_master for NCSA #103 (andylytical)
send all logs to graylog #102 (hreinking)
add pciutils to rke role for debugging #101 (jhoblitt)
switch to p2p2 interface after boot #100 (hreinking)
add kueyen cluster and vim package #99 (hreinking)
add ts-kueyen pool #98 (hreinking)
add archive-dualhomed role #97 (jhoblitt)
maint: remove the last remnants of the graylog/influx/grafana stack #96 (adrienthebo)
change vlan tag #95 (hreinking)
mv foreman-proxy root@ ssh keys from org to per site #94 (jhoblitt)
IT-2115: implement bastion role and remote_desktop profile #93 (adrienthebo)
It 2108 syslog #92 (hreinking)
IT-2104: remove unmanaged telegraf inputs and outputs #91 (adrienthebo)
maint: remove conntrack plugin from telegraf #90 (adrienthebo)
maint: add r10k /modules directory to .gitignore #89 (adrienthebo)
add cds-nas dhcp network #88 (jhoblitt)
change base archive network to 139.229.149.0/24 #87 (jhoblitt)
add base archive network dhcp #86 (jhoblitt)
add comcam network #84 (hreinking)
maint: don't create influx telegraf database #83 (adrienthebo)
maint: fixup telegraf configuration #80 (adrienthebo)

fy20q2 (2020-03-31)

Full Changelog
Merged pull requests:

maint: remove obsolete geppetto settings #82 (adrienthebo)
IT-2002 grant NTS access to L1 users #81 (andylytical)
add antu em2.2400 interface #79 (jhoblitt)
maint: remove ipmitool from RKE profile #77 (adrienthebo)
IT-2082: manage lldpd on poweredge systems #76 (adrienthebo)
IT-2081: Install ipmitool on all poweredge servers #75 (adrienthebo)
maint: Remove unused defaults from Telegraf #74 (adrienthebo)
split 139.229.146.0/23 into .146.0/24 & .147.0/24 #73 (jhoblitt)
add hreinking_b as backup user #72 (hreinking)
fix IP address of dns2.ls.lsst.org #71 (jhoblitt)
fix antu subnet (139.229.146.0/23) #70 (jhoblitt)
Add zone for VPN base and summit #69 (hreinking)
Enable syslogs to be send to graylog #67 (hreinking)
For different interface type on hypervisor #66 (hreinking)
IT-1480: reimplement telegraf #65 (adrienthebo)
Graylog role and class #64 (hreinking)
maint: fixup auxtel nfs server comment #63 (adrienthebo)
add butler repo symlinks #62 (jhoblitt)
add antu cluster #61 (jhoblitt)
IT-1454: regenerate types when r10k deploys modules #60 (adrienthebo)
IT-1954: set default rsyslog client log actions #58 (adrienthebo)
add summit nfs exports for nublado + puppetize atsdaq & atarchiver exports #56 (jhoblitt)
IT-1860 general docker profile #55 (andylytical)
disable herculesteam/augeasproviders_sysctl #54 (jhoblitt)
IT-1865 ncsa profiles for admin access #52 (andylytical)
Hypervisor Role for the 3 sites #51 (hreinking)
rke role #49 (jhoblitt)
X2go testing, added to node eas-hvac01 #47 (hreinking)
normalize coretuc cluster name -> coretu #46 (jhoblitt)
create dhcp configuration for 139.229.167.0/24 & 139.229.175.128/25 #45 (jhoblitt)
maint: use a CNAME for the NTP server #44 (adrienthebo)
IT-1797 remove references to IT-1383 from Puppetfile #43 (andylytical)
IT-1778 use lsst-it tuned module #42 (andylytical)
factor common keys from cluster -> lsst org #41 (jhoblitt)
IT-1673: deploy BDC #40 (adrienthebo)
add azar cluster #39 (jhoblitt)
maint: flatten IPA hierarchy #38 (adrienthebo)
fix ncsa org/role path #37 (jhoblitt)
fix org/<org>/role/<role> paths #36 (jhoblitt)
revert tuned mod to forge version #35 (jhoblitt)
factor out b-users from cp/tu sites -> lsst org #34 (jhoblitt)
migrate existing roles to be org specific #33 (jhoblitt)
Remove virtual layers, add org/role layer #32 (adrienthebo)
add sudo rules to run commands as ccs role user #31 (jhoblitt)
IT-1761: allocate DHCP pool for 139.229.178.0/24 #30 (adrienthebo)
Disable firewall at eas-hvac01 #29 (hreinking)
Add NCSA support #28 (andylytical)
IT-1402: merge hieradata from lsst-puppet-hiera #27 (adrienthebo)
rm direct lookup of hiera firewalld, monitoring & motd keys #26 (jhoblitt)
IT-1686: add NFS module, nfs profile #25 (adrienthebo)
IT-1706: switch common layer to org layer #24 (adrienthebo)
fix r10k triggering by github webhooks #23 (jhoblitt)
switch to lsst-it fork of chrony mod #22 (jhoblitt)
maint: prefer rsyslog class inclusion #20 (adrienthebo)
maint: prune old ccs and gs_dhcp roles #19 (adrienthebo)
dimm.cp.lsst.org: add ufw module #17 (adrienthebo)

fy20q1 (2019-12-30)

Full Changelog
Merged pull requests:

profile::core::common: add rsyslog class #18 (adrienthebo)
Update puppet code for profile::it::graylog application on gs-graylog-node-01 #16 (adrienthebo)
add support for love role #15 (jhoblitt)
deadcode cleanup #14 (jhoblitt)
initial CP core service deployment #13 (jhoblitt)
add core cluster #12 (jhoblitt)
rm efd related roles & profiles (replaced by influxdb efd) #11 (jhoblitt)
make puppet-lint happy #10 (jhoblitt)
rm profile::it::ims (no longer used) #9 (jhoblitt)

fy19q4 (2019-09-30)

Full Changelog
Merged pull requests:

July Puppeton 2019 initial refactor + comcam #8 (jhoblitt)
add r10k travis linting #7 (jhoblitt)
add basic CI linting (no unit or acceptance tests) #6 (jhoblitt)
module, pin thyself #5 (jhoblitt)
pin puppet/telegraf 2.1.0 #4 (womullan)


not / and version 1.5.0 telegraph #3 (womullan)


fy19q3 (2019-06-14)

Full Changelog
Merged pull requests:

Production #2 (hreinking)
Monitoring update #1 (hreinking)

* This Changelog was automatically generated by github_changelog_generator