(merken) Provision Cluster

Author: igonzalezcl

hieradata/cluster/merken.yaml

@@ -0,0 +1,97 @@
+---
+clustershell::groupmembers:
+  merken: {group: "merken", member: "merken[01-04]"}
+tuned::active_profile: "latency-performance"
+nm::conf:
+  device:
+    keep-configuration: "no"
+    allowed-connections: "except:origin:nm-initrd-generator"
+
+nm::connections:
+  enp65s0f0:
+    content:
+      connection:
+        id: "enp65s0f0"
+        uuid: "3e516a55-fffc-44ab-828c-5ca7b17c7bbf"
+        type: "ethernet"
+        interface-name: "enp65s0f0"
+        master: "bond0"
+        slave-type: "bond"
+      ethernet: {}
+      ipv4:
+        method: "disabled"
+      ipv6:
+        method: "disabled"
+  enp65s0f1:
+    content:
+      connection:
+        id: "enp65s0f1"
+        uuid: "28ac7f8a5-48e2-4d1b-b17c-103d4ab4c951"
+        type: "ethernet"
+        interface-name: "enp65s0f1"
+        master: "bond0"
+        slave-type: "bond"
+      ethernet: {}
+      ipv4:
+        method: "disabled"
+      ipv6:
+        method: "disabled"
+  bond0:
+    content:
+      connection:
+        id: "bond0"
+        uuid: "b9c03f5b-adab-4857-8f73-0f7599656a62"
+        type: "bond"
+        interface-name: "bond0"
+      ethernet:
+        cloned-mac-address: "%{facts.networking.interfaces.enp65s0f0.mac}"
+      bond:
+        mode: "802.3ad"
+        miimon: "100"
+        xmit_hash_policy: "layer3+4"
+      ipv4:
+        method: "disabled"
+      ipv6:
+        method: "disabled"
+  bond0.1131:
+    content:
+      connection:
+        id: "bond0.1131"
+        uuid: "4f98595d-f363-40f1-b4c1-5a87f63d0f4a"
+        type: "vlan"
+        interface-name: "bond0.1131"
+        master: "br1131"
+        slave-type: "bridge"
+      ethernet: {}
+      vlan:
+        flags: "1"
+        id: "1131"
+        parent: "bond0"
+      bridge-port: {}
+  br1131:
+    content:
+      connection:
+        id: "br1131"
+        uuid: "b5c7a6ef-b449-4729-b944-ec45c40b40cc"
+        type: "bridge"
+        interface-name: "br1131"
+      ethernet: {}
+      bridge:
+        stp: "false"
+      ipv4:
+        method: "auto"
+      ipv6:
+        method: "disabled"
+      proxy: {}
+  enp12s0f4u1u2c2:
+    content:
+      connection:
+        id: "enp12s0f4u1u2c2"
+        type: "ethernet"
+        autoconnect: "false"
+        interface-name: "enp12s0f4u1u2c2"
+      ethernet: {}
+      ipv4:
+        method: "disabled"
+      ipv6:
+        method: "disabled"

hieradata/cluster/merken/role/rke2server.yaml

@@ -0,0 +1,7 @@
+---
+classes:
+  - "profile::core::sysctl::rp_filter"
+profile::core::sysctl::rp_filter::enable: false
+rke2::config:
+  node-label:
+    - "role=storage-node"

spec/hosts/nodes/merken01.cp.lsst.org_spec.rb

@@ -0,0 +1,97 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe 'merken01.ls.lsst.org', :sitepp do
+  on_supported_os.each do |os, os_facts|
+    next unless os =~ %r{almalinux-9-x86_64}
+
+    context "on #{os}" do
+      let(:facts) do
+        lsst_override_facts(os_facts,
+                            is_virtual: false,
+                            virtual: 'physical',
+                            dmi: {
+                              'product' => {
+                                'name' => 'AS -1115HS-TNR',
+                              },
+                            })
+      end
+      let(:node_params) do
+        {
+          role: 'rke2server',
+          site: 'cp',
+          cluster: 'merken',
+          variant: '1115s',
+        }
+      end
+
+      it { is_expected.to compile.with_all_deps }
+
+      include_examples 'baremetal'
+      include_context 'with nm interface'
+      include_examples 'ceph cluster'
+      include_examples 'docker', docker_version: '25.0.3'
+
+      it do
+        is_expected.to contain_class('profile::core::sysctl::rp_filter').with_enable(false)
+      end
+
+      it do
+        is_expected.to contain_class('clustershell').with(
+          groupmembers: {
+            'merken' => {
+              'group' => 'merken',
+              'member' => 'merken[01-04]',
+            },
+          }
+        )
+      end
+
+      it do
+        is_expected.to contain_class('rke2').with(
+          node_type: 'server',
+          release_series: '1.32',
+          version: '1.32.2~rke2r1'
+        )
+      end
+
+      it { is_expected.to have_nm__connection_resource_count(5) }
+
+      %w[
+        enp12s0f4u1u2c2
+        enp65s0f0
+      ].each do |i|
+        context "with #{i}" do
+          let(:interface) { i }
+
+          it_behaves_like 'nm disabled interface'
+        end
+      end
+
+      context 'with enp65s0f1' do
+        let(:interface) { 'enp65s0f1' }
+
+        it_behaves_like 'nm enabled interface'
+        it_behaves_like 'nm dhcp interface'
+        it_behaves_like 'nm ethernet interface'
+      end
+
+      context 'with enp65s0f0.2130' do
+        let(:interface) { 'enp65s0f0.2130' }
+
+        it_behaves_like 'nm enabled interface'
+        it_behaves_like 'nm vlan interface', id: 2130, parent: 'enp65s0f0'
+        it_behaves_like 'nm bridge slave interface', master: 'br2130'
+      end
+
+      context 'with br2130' do
+        let(:interface) { 'br2130' }
+
+        it_behaves_like 'nm enabled interface'
+        it_behaves_like 'nm no-ip interface'
+        it_behaves_like 'nm bridge interface'
+      end
+    end # on os
+  end # on_supported_os
+end