1
0
Fork 0
Commit Graph

1234 Commits (924d0035fdb64b7652f534d05ee67867b764c4d3)

Author SHA1 Message Date
radex 924d0035fd *: Fix code.hackerspace.pl references
Change-Id: I677cbf743c524bf43cd012579642c34c846f4bcc
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1722
Reviewed-by: informatic <informatic@hackerspace.pl>
2023-10-11 21:01:13 +00:00
radex 0776a79df3 cluster/kube: Centralize namespace admin RoleBindings
Change-Id: Iec3505b2f4a1647e67cf47cf189c77534b5be6ac
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1696
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-10 17:34:22 +00:00
q3k fe94c9b649 dc/topo: unvendor viz.js
This instead grabs a prebuild viz.js 2.x from a GH release.

Ideally we would use some more generic JS dep mechanism here (there's
some Good (tm) ones for Bazel now!), but this will do for now.

Change-Id: I58e9f67534acd2e3d08d93dc5f9a989dbbbbe3d1
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1721
Reviewed-by: radex <radex@hackerspace.pl>
2023-10-10 15:25:34 +00:00
q3k aafef3373d hswaw/machines/sound: add blitzloop, fix prod diff
Change-Id: I10f9659455842e5a8904183b8929be16c2a633fe
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1633
Reviewed-by: informatic <informatic@hackerspace.pl>
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-10 11:01:24 +00:00
q3k 63ce423ebb hswaw/site: post-deploy changes
This deploys the changes in Id64cccadcd1e109035ed09f62086772fa615dd72
and I34163bbb62ba792d359a5f5e72de1024c0109eab .

Turns out the site actually serves at new.hackerspace.pl and is being
proxy-passed from boston-packets, as that for legacy reasons still has
to live at hackerspace.pl.

Change-Id: Ieaa3e8b6f9c4ced14db83c121e30c9cbaa416b00
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1700
Reviewed-by: radex <radex@hackerspace.pl>
2023-10-10 06:06:06 +00:00
q3k 43b6db895d k0: fully disable kube control/data plane on bc01n01,n02
Change-Id: I103f41059d75aa6b3ce318fd6f863f50ad013160
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1697
Reviewed-by: implr <implr@hackerspace.pl>
2023-10-09 23:32:26 +00:00
q3k 6534969549 k0: crdb: remove bc01n02, add dcr03s16
Change-Id: I75da414cee50dcdf951cb8968dc56a4873a023fd
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1694
Reviewed-by: implr <implr@hackerspace.pl>
2023-10-09 23:32:17 +00:00
q3k 9ae11fdabb matrix: move appservice-irc off blade
Change-Id: I9edbdedc6c2ec7aea30ee7fc5ad83deddb569b00
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1695
Reviewed-by: informatic <informatic@hackerspace.pl>
2023-10-09 22:46:27 +00:00
radex a28fa4d7f2 hswaw/site: remove mirko dependency
Change-Id: Id64cccadcd1e109035ed09f62086772fa615dd72
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1690
Reviewed-by: q3k <q3k@hackerspace.pl>
Reviewed-by: radex <radex@hackerspace.pl>
2023-10-09 21:23:14 +00:00
radex d318d7e6d4 hswaw/capacifier: remove mirko dependency
Change-Id: I3afbe1857c321ac6db1255d8a2fe1d9aa3da5c12
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1689
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-09 21:23:07 +00:00
radex 3ca8454555 hswaw/capacifier: migrate deployment away from mirko
Change-Id: Ic15945ae0489cfc3026f4cb11123b8e6b575d471
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1688
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-09 21:22:55 +00:00
radex a364934d33 hswaw/site: migrate away from mirko
Change-Id: I34163bbb62ba792d359a5f5e72de1024c0109eab
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1631
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-09 21:10:10 +00:00
q3k 8dcca254ce bazlets: note down version origin
Change-Id: I3fcead7676ec41ae9905c29098f36737668cf475
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1693
Reviewed-by: implr <implr@hackerspace.pl>
2023-10-09 20:28:23 +00:00
q3k 6e10e46f96 gerrit-qa: deploy
A little QA environment, currently without any data populated.

Change-Id: Ifbe5e97f312376ca64222a3754fe6fa29d7fda79
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1643
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-09 19:11:02 +00:00
q3k 2ceb69f30b gerrit: bump to 3.7.5
This involved messing with both of our source-built plugins (owners and
oauth).

The main issue seems to have been the desync between Jackson as
requested by different plugins. Jackson is split into multiple Maven
packages, and they all have to be the same version to work together. The
oauth plugin was requesting only part of it, and these parts were
incompatible with the parts that the owners plugin requested.

In addition, we have to make the owners plugin include more bits of
Jackson.

Without these changes, we would get runtime
`java.lang.NoClassDefFoundError: com/fasterxml/jackson/...` errors,
which were a symptom of Jackson either not being included fully into the
plugin's JAR, or a mixup between Jackson component/package versions.

While we're at it, we remove the broken theming attempt.

Change-Id: I26531818a395de2a8bb6054d2583881fd1d5b806
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1642
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-09 19:11:02 +00:00
implr bae9499880 cluster/machines: enable controlplane on dcr03s16, disable on bc01n01
Change-Id: I199f66ac60c522c29fe4900702eb9eed48749cfe
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1692
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-09 19:10:19 +00:00
implr 9a88f28805 cluster/{machines,certs}: add dcr03s16.hswaw.net
Also make dataplane-only nodes actually work:
- make kubeproxy use the same package as kubelet
- disable firewall

Change-Id: I7babbb749656e6f75151c8eda6e3f09f3c6bff5f
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1686
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-09 19:02:18 +00:00
q3k d9567b3b99 java: use JDK 11
This is needed for newer versions of the gerrit owners plugin.

We also need to add zlib to our shell, as binary builds of JDK11 used by
Bazel require it.

Change-Id: Idbbc5e0d88cac13daf2e5f201be6032412bf1a5d
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1641
Reviewed-by: implr <implr@hackerspace.pl>
2023-10-09 19:02:12 +00:00
informatic e4519b1419 cluster-k0/admitomatic: add codehosting-prod
Change-Id: If6cd75e2fce73bdc92a3f313f39603616a343fd0
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1684
Reviewed-by: informatic <informatic@hackerspace.pl>
2023-10-08 21:16:39 +00:00
informatic ba81655145 cluster: cleanup CephObjectStoreUser creation, add codehosting bucket
Change-Id: I6f41ef3d4775b52c43953f1133e56e69c4c462b8
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1683
Reviewed-by: informatic <informatic@hackerspace.pl>
2023-10-08 21:16:39 +00:00
informatic f549d43b40 matrix: add informatic & q3k as admins
Change-Id: I7c70e5c0c31aa9bae8b5cdc4b4ed5331223913c2
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1682
Reviewed-by: informatic <informatic@hackerspace.pl>
2023-10-08 21:16:39 +00:00
informatic a7af16d37a hswaw/machines/customs: add htpasswd file support, expose label
This allows for generic service access to hswaw LAN sites.

Change-Id: I2b290b19ae83496d6b878005ae1c57b0d3955e73
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1603
Reviewed-by: vuko <vuko@hackerspace.pl>
2023-10-08 21:12:07 +00:00
q3k 7f5f2099c5 gerrit: add ref-updated hook to poke forgejo
This has been deployed already.

Technically depends on I26531818a395de2a8bb6054d2583881fd1d5b806 as this
has been deployed on top of that.

Change-Id: I1b8d453d04f3a9a5435ae0dd6575f82d9ca10db7
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1681
Reviewed-by: informatic <informatic@hackerspace.pl>
2023-10-08 20:08:50 +00:00
q3k c68343caad gerrit: use Forgejo for viewing repo state
Already deployed.

Change-Id: I3a82e99f22e66676d79baafac85e7263ca140014
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1661
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-08 20:08:50 +00:00
implr 2281b5b618 env.sh: force CC=clang if present
Change-Id: I2369f4ad357b079c2525b7e4cea6d0178aca4c69
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1630
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-08 16:53:01 +00:00
q3k 95b8c57415 rules_jvm_external: remove leftovers
This was used by q3k's minecraft plugins, and it was in the process of
being patched to better resolve snapshot versions as used in the Spigot
artifact server.

I have since decided this is not worth it, and yote the plugins and thus
we don't need rules_jvm_external at all.

Change-Id: I1a02354ec5e706c5e44501512149fe9a197ddb7c
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1644
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-08 12:38:42 +00:00
arsenicum 924be126f7 Merge remote-tracking branch 'origin/master'
Change-Id: I31065ed4d5ab138a90e0be79a9d00db155896ecc
2023-10-05 00:07:11 +02:00
arsenicum bdf2defc07 invoicer initial version
Change-Id: Ib20a96c224f5c055874f72f8f9a04a4dc8bbbc24
2023-10-05 00:05:32 +02:00
radex d60a68d4f3 hswaw/ldapweb: bump app, simplify config
Change-Id: Ia1a0097c097c8d75b7123088b89b51b4cf5ab46c
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1632
Reviewed-by: informatic <informatic@hackerspace.pl>
2023-09-24 14:56:13 +00:00
informatic 69957c346f devtools/gerrit: add simple healthcheck
This should somewhat temporarily fix gerrit outright dying (ie. refusing
to accept any new http connections) for no reason once in a while.

Change-Id: Ie0dfcab020945d17010c012ecfae19f4c8c5c374
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1601
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-24 13:42:48 +00:00
q3k 641fa54783 ci: update presubmit script
Change-Id: I43884faff856b5ca7d8f728ebb9784131544a5e4
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1629
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-22 23:00:45 +00:00
palid 62b83e04de app: +inventory (spejstore)
Co-authored-by: Radek Pietruszewski <radexpl@gmail.com>
Change-Id: If334f59ae8fe13c6e9362c080b22d53ced49f3ea
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1572
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-22 22:51:48 +00:00
q3k 94d96497b5 hswaw/site: implement recurring events
Change-Id: Ib3c570d058141c4d8441801010f0f1755ccfc0e7
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1624
Reviewed-by: radex <radex@hackerspace.pl>
2023-09-22 22:50:39 +00:00
q3k 937722e465 hswaw/ldapweb: give admin rights to radex
Change-Id: I5d0ce4b500e7d9c9750dc5f306ea182013362838
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1627
Reviewed-by: radex <radex@hackerspace.pl>
2023-09-22 22:49:05 +00:00
q3k c5f466822e third_party/py: bump/reformat
Change-Id: Ia148d7f56af8ecbf382dfb3d663963f682f64fb9
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1628
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-22 22:44:25 +00:00
q3k 80cee0a987 hswaw/site: deploy
Already contains https://gerrit.hackerspace.pl/1624

Change-Id: I248c2f1653a3423d7dfc6ca5374229f072e111dc
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1626
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-22 22:23:00 +00:00
q3k 88bec7a3c3 capacifier: lol, lmao even
This was never deployed. It is now.

It was broken. It is less now.

Change-Id: I37bcdc5d5d1ffc3484aadecd2226d41aea49bca4
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1625
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-22 22:22:47 +00:00
radex f3d42d6ddc hswaw/site: add "upcoming events" section
Change-Id: Ic5d36a7ff35c210aff3b3c451e6f0024ed20e896
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1563
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-22 22:19:11 +00:00
radex b8d4a8a902 ldapweb: migrate from mirko to standalone
Change-Id: I169598232b39b99bfd2d4ff3799b44083ba77e84
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1623
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-22 21:54:20 +00:00
radex a7c36ed9f3 ldapweb: bump image and config
Change-Id: I5dd24c3dca84f191c45d453f31812f2091d3036c
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1622
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-22 21:54:20 +00:00
q3k 97b5cd7b58 go: re-do the entire thing
This is a mega-change, but attempting to split this up further is
probably not worth the effort.

Summary:

1. Bump up bazel, rules_go, and others.
2. Switch to new go target naming (bye bye go_default_library)
3. Move go deps to go.mod/go.sum, use make gazelle generate from that
4. Bump up Python deps a bit

And also whatever was required to actually get things to work - loads of
small useless changes.

Tested to work on NixOS and Ubuntu 20.04:

   $ bazel build //...
   $ bazel test //...

Change-Id: I8364bdaa1406b9ae4d0385a6b607f3e7989f98a9
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1583
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-22 21:50:19 +00:00
radex 291f554164 go/pki: show helpful hint to new contributors about -hspki_disable
Change-Id: I714f503f5962578055b99009aa0eccb72517d37b
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1562
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-22 20:45:15 +00:00
radex 26fb573055 doc: improve cluster/user docs, make it more discoverable
Change-Id: Icbb348865a442a01a3ab191dad88662a88635007
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1565
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-22 20:44:48 +00:00
q3k 603b4f7293 hswaw/kube: add radex to admins
Change-Id: I4f60b139bb86b52399ad84a5373ac5e1eb8828f9
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1621
Reviewed-by: radex <radex@hackerspace.pl>
2023-09-22 20:44:29 +00:00
informatic 69dd2bfd2a hswaw/paperless: grant access to zarzad *and* paperless-admin groups
Change-Id: I622ee8818da2097914cf0da433e3832d680286db
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1587
Reviewed-by: arsenicum <arsenicum@hackerspace.pl>
2023-09-17 22:33:19 +00:00
implr f5b1a215f4 app/mailman-web: create
There's a lot of ugly hacks here, but this has been the state of prod
for months now, so we should reflect that.
Also, this bumps a bunch of workspace deps.

Change-Id: I744e0d3aff27036cfed73416cf442c7d62444a8b
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1473
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-10 21:11:37 +00:00
radex 8036d7f4da hswaw/site: update README, fix non-breaking whitespace and nitpicks
Change-Id: Id9dac11a1b4f2ac527dacf96e3b5c6fb79f1f3a4
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1561
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-02 16:35:40 +00:00
radex 6715080ebc doc/codelabs: stub of bazel-go.md
Change-Id: Icf408f9edddfb5e446b2675485c6f9e17ff7357a
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1564
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-02 16:32:48 +00:00
q3k 54183ba222 go/workspace: fix nix-instantiate exec error typecast
Also skip nix tests on systems without nix.

Change-Id: I4c0069a429df10a496b2651c2506b2d4625d5f43
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1585
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-01 17:22:41 +00:00
q3k 0d3e609013 bazlets: use python3
Change-Id: Idf8ec4b70eed991874a0bcdcced132b9f6da3f83
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1584
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-09-01 17:17:24 +00:00