{"push_id":2644242020,"size":28,"distinct_size":1,"ref":"refs/heads/update_recovery_instructions","head":"8654e81df8f186b7c8f749218ebc3495238ec671","before":"f8d1ba2bfcd735aa78d17ee94918ca4b586403a2","commits":[{"sha":"2019b411b5c3870d67abee0653c10a47c2f1fcdc","author":{"name":"Risto Laurikainen","email":"fe313d74b443b1f39f781d4dc97bf9caa0e49f50@csc.fi"},"message":"Clarify single VM recovery instructions\n\nThe single VM recovery instructions had an example rebuild command where\nthe image was specified as a specific CentOS image. In most cases we\ndon't want to specify the image but just want to use whatever image was\noriginally used to build the server. Thus, leave the --image option out\nof the command as it is potentially dangerous. Explain what --image does\ninstead.\n\nAlso add a note about nova evacuate and additional advice about not\ndeleting servers because it messes up Heat.","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/2019b411b5c3870d67abee0653c10a47c2f1fcdc"},{"sha":"be8e3397f89a42b91b8bbd6cd37e3d863028ba93","author":{"name":"Olli Tourunen","email":"d81c2d73f580700f67e0ca0650f327a4e0e17709@csc.fi"},"message":"Merge branch 'clarify_recovery_instructions' into 'master'\n\nClarify single VM recovery instructions\n\nSee merge request c14n/poc!247","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/be8e3397f89a42b91b8bbd6cd37e3d863028ba93"},{"sha":"782bed536e475399ab4f7600678216e4f238850b","author":{"name":"Risto Laurikainen","email":"fe313d74b443b1f39f781d4dc97bf9caa0e49f50@csc.fi"},"message":"Make yum repo locking optional\n\nAdd a new boolean setting lock_os_minor_version that defaults to false\nand determines whether we use the latest packages from the major version\n(e.g. 7) or the latest packages from the given minor version (e.g. 7.4).\nHosts can be switched between these two modes by changing the value of\nthe boolean.\n\nBecause mirror.centos.org only has packages for the latest minor version\navailable, switch to using vault.centos.org when we lock to a specific\nminor release version.\n\nTemplatize the default CentOS base repo file so that we always have it\nand just enable or disable the repos in it as needed.","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/782bed536e475399ab4f7600678216e4f238850b"},{"sha":"80ac7b14f58805818283beacc041608ec0e8d05d","author":{"name":"Olli Tourunen","email":"d81c2d73f580700f67e0ca0650f327a4e0e17709@csc.fi"},"message":"Merge branch 'make_repo_lock_optional' into 'master'\n\nMake yum repo locking optional\n\nSee merge request c14n/poc!248","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/80ac7b14f58805818283beacc041608ec0e8d05d"},{"sha":"96c322c653cd8329c496a70ed6946a8c0795728d","author":{"name":"Risto Laurikainen","email":"fe313d74b443b1f39f781d4dc97bf9caa0e49f50@csc.fi"},"message":"Explicitly run keepalived scripts as root\n\nSet the script_user setting for keepalived as \"root root\". If this is\nnot set, keepalived should default to using the root user, but this is\napparently not the case, according to the logs:\n\nWARNING - default user 'keepalived_script' for script execution does not\nexist - please create.\nUnable to set default user for track script\n/usr/local/share/keepalived/check_app_routes.bash - removing\n  check_app_routes no match, ignoring...\n\nIf one does create the keepalived_script user and set keepalived to use\nthis, this still doesn't work (possibly because of SELinux). Then we get\nthis:\n\nCouldn't setgid: 1001 (Operation not permitted)\n\nIf we do set script_user as \"root root\" then the scripts run\nsuccesfully. Running the scripts as root should be OK in our case as no\npart of the path to the script nor the script itself is writable by\nnon-root users.","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/96c322c653cd8329c496a70ed6946a8c0795728d"},{"sha":"330511b6675245c0089eeac0fbdbc7c458cb0839","author":{"name":"Olli Tourunen","email":"d81c2d73f580700f67e0ca0650f327a4e0e17709@csc.fi"},"message":"Merge branch 'keepalived_script_user_as_root' into 'master'\n\nExplicitly run keepalived scripts as root\n\nSee merge request c14n/poc!249","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/330511b6675245c0089eeac0fbdbc7c458cb0839"},{"sha":"d4e492db504a82349bd2d93b749c1a433dadff09","author":{"name":"Risto Laurikainen","email":"fe313d74b443b1f39f781d4dc97bf9caa0e49f50@csc.fi"},"message":"Lock Docker version in pipeline to latest stable\n\nInstead of using the latest tag (bad), use a specific versioned tag\ninstead. This is the latest stable release according to the Docker\nrelease notes at the time of this writing.","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/d4e492db504a82349bd2d93b749c1a433dadff09"},{"sha":"5ad653f83f8c14ceb0d2e749afcd447c334dfc0b","author":{"name":"Olli Tourunen","email":"d81c2d73f580700f67e0ca0650f327a4e0e17709@csc.fi"},"message":"Merge branch 'lock_docker_version_in_pipeline' into 'master'\n\nLock Docker version in pipeline to latest stable\n\nSee merge request c14n/poc!251","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/5ad653f83f8c14ceb0d2e749afcd447c334dfc0b"},{"sha":"b2732fa2d459cff244f41159e68b5a8cd14dfd0a","author":{"name":"Risto Laurikainen","email":"fe313d74b443b1f39f781d4dc97bf9caa0e49f50@csc.fi"},"message":"Install service brokers only after post-install\n\nThe Ansible service broker requires working storage. We will only have a\nworking default storage class after the post-install phase, so we can't\nget the Ansible service broker to work before that. If we install the\nbroker during the main install playbook, it will have stopped trying to\nredeploy by the time storage becomes available.\n\nMove the broker installation after the post-install to make it work.\nThis is done so that we initially always set the install options for the\nservice brokers to false and then set them later according to what it\nset in the inventory.","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/b2732fa2d459cff244f41159e68b5a8cd14dfd0a"},{"sha":"c4f7f408f03aa63076d7518d140b298c35e7bd18","author":{"name":"Risto Laurikainen","email":"fe313d74b443b1f39f781d4dc97bf9caa0e49f50@csc.fi"},"message":"Make post_install.yml work when called on its own\n\nWe refer to some variables for service broker install flags in\npost_install.yml that will not have been set if we only run\npost_install.yml itself. Add a conditional for checking whether the\nvariables in question are set to avoid running into an error and to\nensure post_install.yml works on its own as well.","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/c4f7f408f03aa63076d7518d140b298c35e7bd18"},{"sha":"f79b0f56f087d62f0d4f96c365e9db602bc9faa6","author":{"name":"Risto Laurikainen","email":"fe313d74b443b1f39f781d4dc97bf9caa0e49f50@csc.fi"},"message":"Only run service broker install on new installs\n\nTo follow the same logic we follow with the rest of the\nopenshift-ansible install playbooks, only run the service broker\ninstallation when we are installing a fresh cluster.","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/f79b0f56f087d62f0d4f96c365e9db602bc9faa6"},{"sha":"0a4ba019541aa15ff74f25085721851d97588620","author":{"name":"Olli Tourunen","email":"d81c2d73f580700f67e0ca0650f327a4e0e17709@csc.fi"},"message":"Merge branch 'service_brokers_after_post_install' into 'master'\n\nInstall service brokers only after post-install\n\nSee merge request c14n/poc!252","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/0a4ba019541aa15ff74f25085721851d97588620"},{"sha":"29356c2fe104b0c523aafc3e6cdfa7e22ae4f041","author":{"name":"tourunen","email":"d81c2d73f580700f67e0ca0650f327a4e0e17709@csc.fi"},"message":"bump CI environment to 3.9","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/29356c2fe104b0c523aafc3e6cdfa7e22ae4f041"},{"sha":"094a1930a54171a4c9cca33fc3b680dbcd607d2c","author":{"name":"Risto Laurikainen","email":"fe313d74b443b1f39f781d4dc97bf9caa0e49f50@csc.fi"},"message":"Use site_3.9.yml for oso-qa in .gitlab-ci.yml\n\nSince the QA environment has been upgraded to OpenShift 3.9, use the\nsite_3.9.yml playbook with it that works with 3.9.","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/094a1930a54171a4c9cca33fc3b680dbcd607d2c"},{"sha":"875494316c35e7d1fdde47a0344e5f0d8add89ec","author":{"name":"Olli Tourunen","email":"d81c2d73f580700f67e0ca0650f327a4e0e17709@csc.fi"},"message":"Merge branch 'oso-ci_3.9.0_centos-7.5' into 'master'\n\nUpdate CI and QA to 3.9 in pipeline\n\nSee merge request c14n/poc!253","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/875494316c35e7d1fdde47a0344e5f0d8add89ec"},{"sha":"e6337136ba9f238e7207a55b9da4a5c513b542f5","author":{"name":"Risto Laurikainen","email":"fe313d74b443b1f39f781d4dc97bf9caa0e49f50@csc.fi"},"message":"Lock version of Docker DinD image\n\nUse the latest stable tag (18.03.1-ce-dind at the time of this writing)\nfor the Docker DinD image.","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/e6337136ba9f238e7207a55b9da4a5c513b542f5"},{"sha":"c9ffae1643c3f632092c633456e215d114b16dbc","author":{"name":"Risto Laurikainen","email":"fe313d74b443b1f39f781d4dc97bf9caa0e49f50@csc.fi"},"message":"Always print test output, don't use rescue\n\nIt looks like Ansible will return a zero exit code when you use\n'rescue'. This means using rescue as a means to print test output on\nfailed tests is probably not a great idea. Use 'always' instead and\nalways print test output even if tests succeed.","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/c9ffae1643c3f632092c633456e215d114b16dbc"},{"sha":"bfed5233faf5ca2cf0b9bdbd7ad514c5eb78b9e0","author":{"name":"Olli Tourunen","email":"d81c2d73f580700f67e0ca0650f327a4e0e17709@csc.fi"},"message":"Merge branch 'lock_docker_dind_image_version' into 'master'\n\nLock version of Docker DinD image\n\nSee merge request c14n/poc!254","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/bfed5233faf5ca2cf0b9bdbd7ad514c5eb78b9e0"},{"sha":"798fe32cc8fe99141531c00e9ca3801f181c639f","author":{"name":"Olli Tourunen","email":"d81c2d73f580700f67e0ca0650f327a4e0e17709@csc.fi"},"message":"Merge branch 'always_print_test_output' into 'master'\n\nAlways print test output, don't use rescue\n\nSee merge request c14n/poc!250","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/798fe32cc8fe99141531c00e9ca3801f181c639f"},{"sha":"0975167d98c958d43029654bb7e1efc45c9ed481","author":{"name":"Risto Laurikainen","email":"fe313d74b443b1f39f781d4dc97bf9caa0e49f50@csc.fi"},"message":"Use site_3.9.yml for Rahti-int deployments\n\nSince Rahti-int has been upgraded to OpenShift 3.9, we should use\nsite_3.9.yml when deploying there.","distinct":false,"url":"https://api.github.com/repos/CSCfi/pouta-openshift-cluster/commits/0975167d98c958d43029654bb7e1efc45c9ed481"}]}
{"actor":{"display_login":"rlaurika"}}