1
0
Fork 0
Commit Graph

784 Commits (f4d02581f60b18a8635d026079ed67039cdc45e6)

Author SHA1 Message Date
q3k e00fe3a448 cluster/tools/kartongips: skip tests broken by fork
These tests are broken as they depend on some test data that we
currently don't have in hscloud. They should be fixed ASAP.

Change-Id: I2571c2958cb84e145a7e3a44171685ecf43cf499
2020-11-12 00:45:15 +01:00
q3k 640336144d cluster/tools: integrate kartongips as main kubecfg tool
Change-Id: If6a6c8e9c9163f0fc25adcaa8680857fdca69cd3
2020-11-12 00:40:08 +01:00
q3k be538db63b cluster/tools/kartongips: init
This forks bitnami/kubecfg into kartongips. The rationale is that we
want to implement hscloud-specific functionality that wouldn't really be
upstreamable into kubecfg (like secret support, mulit-cluster support).

We forked off from github.com/q3k/kubecfg at commit b6817a94492c561ed61a44eeea2d92dcf2e6b8c0.

Change-Id: If5ba513905e0a86f971576fe7061a471c1d8b398
2020-11-12 00:39:34 +01:00
q3k 21e9f7aaea app/matrix: allow not7cd access to matrix-0x3c
Change-Id: Iba9edfdfd2d05701e1266c279ec2f4881fa3505e
2020-11-11 23:39:48 +01:00
Norbert Szulc 2117416052 app/matrix: fix typo in secret in matrix.0x3c.pl
it looks like I have missed a typo

Change-Id: I5cdf06d44d23ab678f239c19d78170d3f1125b9c
2020-11-11 18:37:46 +01:00
Norbert Szulc 2508009f50 app/matrix bump casProxy to 0.1.5 for matrix.0x3c.pl
Change-Id: I182ce7a23f21faf20f04f7211e4837dc30e2cf1e
2020-11-11 17:34:09 +00:00
Norbert Szulc 6ab920a103 app/matrix: fix secret in matrix.0x3c.pl
Change-Id: Iffd361b6fde96e9a6c3967bc88c730b5acf14082
2020-11-10 23:20:07 +00:00
not7cd 5903c1e64a Merge "app/matrix enable cas proxy for matrix.0x3c.pl" 2020-11-10 23:06:04 +00:00
Norbert Szulc c67abc23a8 app/matrix enable cas proxy for matrix.0x3c.pl
Change-Id: I63c8172dbc93b9f6781aa03f7924be944b8f1846
2020-11-10 23:34:30 +01:00
q3k 9491512a97 Merge "app/matrix: make cas deployment configurable" 2020-11-10 21:19:37 +00:00
q3k 8483d37581 app/matrix: make cas deployment configurable
This is an alternative to https://gerrit.hackerspace.pl/509 that was
reverted in https://gerrit.hackerspace.pl/541 .

This has already been deployed.

Change-Id: I7d54943c970804cac910e0e15201d1c3fa337489
2020-11-10 22:07:30 +01:00
q3k 56f8d5fda1 Merge "Revert "app/matrix make cas deployment configurable"" 2020-11-10 21:02:18 +00:00
q3k f164c2d4bd Revert "app/matrix make cas deployment configurable"
This reverts commit 014c9cd018.

Reason for revert:

When applying app/matrix/matrix.hackerspace.pl.jsonnet:

ERROR Error in deployments matrix.oauth2-cas-proxy: ValidationError(v1.Deployment.spec.template.spec.containers[0].env[4].valueFrom): unknown field "secretkeyref" in io.k8s.api.core.v1.EnvVarSource

Change-Id: I833f8a7d7174632b2edffe2f6a9b3e9bb55eebb9
2020-11-10 21:01:58 +00:00
not7cd 84510fc3be Merge "app/matrix make cas deployment configurable" 2020-11-10 20:59:55 +00:00
q3k 5100715a76 bgpwtf: bump net.ipv6.route_max_size on routers
This combats this:

    [126624.252775] Route cache is full: consider increasing sysctl net.ipv[4|6].route.max_size.

This used to be fixed manually on edge01.waw, but we forgot to actually
set this in configuration. Whoops

Change-Id: Ibd45f019a9f4d8d6c2bf1db27f438589acaffd77
2020-11-10 19:39:55 +01:00
Norbert Szulc 014c9cd018 app/matrix make cas deployment configurable
Change-Id: I59ea4d0d5f4a68ffbd88264857c309f6bac61288
2020-11-09 15:22:56 +01:00
not7cd 9e5a8b8520 Merge "app/matrix enable telegram in matrix.0x3c.pl" 2020-11-08 15:51:11 +00:00
not7cd cc711d23ab Merge "app/matrix add branding to matrix.0x3c.pl" 2020-11-08 15:48:01 +00:00
not7cd 8a504b1bc2 Merge "app/matrix: make riotConfig parametrizable" 2020-11-08 15:39:01 +00:00
q3k e9f2c9d21b bgpwtf: widen hswaw prefix
Change-Id: I6bf97db741af6cfb788a0e69227ea9e616afea15
2020-11-08 16:31:11 +01:00
Norbert Szulc 9dcf5f886f app/matrix enable telegram in matrix.0x3c.pl
Change-Id: Id602fb46904f4499a797af593ec129b9ebc3f526
2020-11-08 16:19:01 +01:00
Norbert Szulc caabcaba01 app/matrix add branding to matrix.0x3c.pl
Change-Id: Ib78a2dae0ed177d670ab760892896306363ed3e6
2020-11-08 16:16:32 +01:00
Norbert Szulc 1ef5600dcb app/matrix: make riotConfig parametrizable
Change-Id: Ib616ec7fbf097ab1e17a254c5c16202bb9151585
2020-11-08 16:13:58 +01:00
q3k d80b04f37f Merge changes I10505615,I1f1d41fd
* changes:
  app/matrix: add wellknown server
  app/matrix: add matrix.0x3c.pl
2020-11-05 19:49:34 +00:00
q3k ec7e0a9dc2 app/matrix: add wellknown server
This is in preparation for spinning up a staging/QA matrix instance,
where the MXID domain is under control by hscloud machinery (and not a
top-level organizational domain).

Change-Id: I10505615ebb407b3b2eac0c1b87ad5625e2009c0
2020-11-05 20:47:04 +01:00
q3k d931004bd5 Merge "app/matrix: finish parametrization, fix running as non-root" 2020-11-03 23:10:32 +00:00
q3k 434393bc84 Merge "app/matrix: parametrize configuration" 2020-11-03 23:10:28 +00:00
q3k 062d199da9 Merge "matrix: refactor synapse into library" 2020-11-03 23:10:21 +00:00
q3k 52e796606f app/matrix: add matrix.0x3c.pl
Change-Id: I1f1d41fd80c08cefd274141ca598526dd466ad24
2020-11-04 00:09:03 +01:00
q3k 21a9616583 app/matrix: finish parametrization, fix running as non-root
This should allow us to run matrix on our default podsecuritypolicy.

Change-Id: I054f527ebab2f499e7a6595e618281a58c82e283
2020-11-04 00:09:03 +01:00
q3k ace32c0360 app/matrix: parametrize configuration
This adds cfg.cas.enable, and parametrizes homeserver.yaml from jsonnet
configuration.

Change-Id: I37a9b27a7080248cdd70282b897bbf6d3f9ae5f6
2020-11-03 22:04:08 +01:00
q3k 60076c70f8 matrix: refactor synapse into library
This is in prepration for bringing up a Matrix server for hsp.sh.

Verified to cause no diff on prod.

Change-Id: Ied2de210692e3ddfdb1d3f37b12893b214c34b0b
2020-11-03 21:36:49 +01:00
q3k 9dbc263d8e Merge "third_party/go: pay off some technical debt and hide the bodies" 2020-11-03 20:16:57 +00:00
q3k cdfbacb178 Merge "third_party/go/kubernetes: fix version reported in kubectl" 2020-11-03 20:16:26 +00:00
q3k 3836b0382a Merge "third_party/go: bump kubernetes to 1.19.3" 2020-11-03 20:16:18 +00:00
q3k 301435f3c3 third_party/go: pay off some technical debt and hide the bodies
This is an amalgamation of a handful of small changes to Go deps.
Notably:

 - we remove our opencensus-proto fork, use upstream, use exclude=src to
   fix the build
 - unvendorify some deps
 - bump io_rules_go to fix WKT resolution

Notably, we now do not have the 'protoc-gen-go' error when running
kubecfg/kubectl anymore.

Change-Id: I34fb9e78b2b12e4543142183d601d01987076f32
2020-11-03 21:15:41 +01:00
q3k e23717d520 third_party/go/kubernetes: fix version reported in kubectl
Change-Id: I5a45158004280c8ce6ba04c18af93e8dbbc300e4
2020-11-03 21:15:41 +01:00
q3k c3f36e9bf1 third_party/go: bump kubernetes to 1.19.3
Change-Id: Id9245765936997088e94135fde409ff4c1539bba
2020-11-03 21:15:41 +01:00
q3k 376f58720e go/statusz: do not crash on failure to resolve uid
This can happen if a binary is built statically and fails to load
libgcc/nsd libraries at runtime.

Change-Id: Ia76645471b83a6cc75fe6552e70e6a251b50129c
2020-10-30 14:05:07 +01:00
q3k 99ce53c79a third_party: remove uWSGI
It's not being used outside of personal/q3k for now, and it's really
fucking up the build system.

Change-Id: Ie8f3e59e40e8be8ef3ec32118a591da2274e398c
2020-10-29 01:43:37 +01:00
q3k b1de757249 laserproxy: add nix build
Change-Id: If93f4ba69afa028fed9098663a523f46d6134f7c
2020-10-29 00:43:43 +01:00
q3k bfe9bb0e3a k0: add woju's personal s3 user
Change-Id: I8ed5bb5428594b74460f1b89185d684cb6c26268
2020-10-27 20:50:50 +01:00
q3k 491542589b tools/gostatic: init
This adds Bazel/hscloud integration to gostatic, via gostatic_tarball.

A sample is provided in //tools/gostatic/example, it can be built using:

    bazel build //tools/gostatic/example

The resulting tarball can then be extracted and viewed in a web
browser.

Change-Id: Idf8d4a8e0ee3a5ae07f7449a25909478c2d8b105
2020-10-26 12:08:33 +01:00
q3k 94a1af8714 hackdoc: add table css, make it colorful
Change-Id: Idab1f911c10832ef4cfcf7073f77577d1b8673ff
2020-10-24 20:20:18 +02:00
q3k 79b506bcc2 third_party/go: unbreak build
This was missed in gerrit/486. Whoops, we should CI sooner than later.

Change-Id: Ic70b742c75d52dd615d4e2f946233783d156cead
2020-10-24 17:36:25 +02:00
q3k b4c3f342e4 third_party/go: add gostatic
To test:

    bazel run '@com_github_piranha_gostatic//:gostatic'

Change-Id: Ie846429df0d1f1914f2734735591edebd5d29094
2020-10-24 17:30:44 +02:00
q3k e401735fdd Merge "bgpwtf: add static v6 routes via bird" 2020-10-16 17:09:18 +00:00
q3k d9a6365f8b bgpwtf: add static v6 routes via bird
A customer was missing a static v6 route via their router. Since we
don't want to add them to networking.interfaces.routes.* (as this
restarts the whole scripted network stack in NixOS), we add them to
bird. This requires implementing hscloud.routing.static.

Change-Id: I0a205ed1e1f17a86de43aaf72ab6c2694a069112
2020-10-16 19:07:52 +02:00
q3k 78753aa275 Merge "k0: bump to 1.16.5" 2020-10-10 20:40:56 +00:00
q3k b014a95e0a Merge "k0: expose controller-manager and scheduler metrics" 2020-10-10 20:40:35 +00:00