Merge branch 'ubuntu' of gitlab.erc.monash.edu.au:hpc-team/ansible_cluster_in_a_box into ubuntu

CICD/heat/gc_HOT.yaml

@@ -51,23 +51,28 @@ resources:
      name: "heatnfssecgroup"
      rules: [ { protocol: tcp,
                port_range_min: 2049,
-               port_range_max: 2049},
+               port_range_max: 2049,
+               remote_mode: "remote_group_id"},
               { protocol: tcp,
                port_range_min: 111,
-               port_range_max: 111},
+               port_range_max: 111,
+               remote_mode: "remote_group_id"},
               { protocol: udp,
                port_range_min: 2049,
-               port_range_max: 2049},
+               port_range_max: 2049,
+               remote_mode: "remote_group_id"},
               { protocol: udp,
                port_range_min: 111,
-               port_range_max: 111} ]
+               port_range_max: 111,
+               remote_mode: "remote_group_id"} ]
   MySQLSecGroup:
    type: "OS::Neutron::SecurityGroup"
    properties:
      name: "heatmysqlsecgroup"
      rules: [ { protocol: tcp,
                port_range_min: 3306,
-               port_range_max: 3306} ]
+               port_range_max: 3306,
+               remote_mode: "remote_group_id"} ]
   SSHMonashSecGroup:
    type: "OS::Neutron::SecurityGroup"
    properties:
@@ -227,7 +232,7 @@ resources:
     flavor: m3.small
     image: { get_param: ubuntu_1804_image_id }
     key_name: { get_param: ssh_key }
-    security_groups: [ { get_resource: SSHMonashSecGroup }, { get_resource: SlurmSecGroup }, { get_resource: MySQLSecGroup }, { get_resource: NFSSecGroup } ]
+    security_groups: [ default, { get_resource: SSHMonashSecGroup }, { get_resource: SlurmSecGroup }, { get_resource: MySQLSecGroup }, { get_resource: NFSSecGroup } ]
     metadata:
      ansible_host_groups: [ SQLNodes, NFSNodes ]
      ansible_ssh_user: ubuntu

roles/mysql/tasks/Ubuntu_18_mysql_server.yml

@@ -8,6 +8,13 @@
   apt: name="{{ server_packages }}" update_cache=yes state=present
   become: true
 
+- name: Comment out bind address so it doesn't bind to 127.0.0.1
+  replace:
+    path: /etc/mysql/mariadb.conf.d/50-server.cnf
+    regexp: '(.*bind.*)'
+    replace: '#\1'
+  become: true
+
 - name: make sure mysql conf directory exists
   file: dest=/etc/mysql/conf.d state=directory
   become: true

roles/nfs-server/tasks/startServer.yml

@@ -29,7 +29,15 @@
   become: true
   when: ansible_os_family == "RedHat"  and ansible_distribution_major_version == "7"
 
+- name: "Run exportfs"
+  command: /usr/sbin/exportfs -a
+  become: true
+  when: ansible_os_family == "Debian"
+
 - name: "Start the Server"
   service: "name=nfs-kernel-server state=started enabled=true"
   become: true
   when: ansible_os_family == "Debian"
+
+
+