nfs export the state dir to login node for use by zenith-ood proxy

Author: sjpb

group_vars/cluster.yml

@@ -17,3 +17,5 @@ appliances_local_users_podman_enable: "{{ groups.get('podman', []) | length > 0
 # The server name for Open OnDemand depends on whether Zenith is enabled or not
 openondemand_servername_default: "{{ hostvars[groups['openstack'][0]].cluster_floating_ip_address | replace('.', '-') ~ '.sslip.io' }}"
 openondemand_servername: "{{ zenith_fqdn_ood | default(openondemand_servername_default) }}"
+
+appliances_state_dir: /var/lib/state

group_vars/control.yml

@@ -5,3 +5,5 @@ grafana_serve_from_sub_path: "{{ 'openondemand' in groups }}"
 grafana_auth_anonymous: "{{ 'openondemand' in groups }}"
 
 grafana_url: "{{ grafana_url_openondemand_proxy if 'openondemand' in groups else grafana_url_direct }}"
+
+state_dir_mnt_opts: "x-systemd.required-by=zenith-monitoring.service,x-systemd.before=zenith-monitoring.service"

group_vars/grafana.yml

@@ -1,2 +1,17 @@
 # Use the IP address instead
-nfs_server_default: "{{ hostvars[groups['control'] | first ].ansible_default_ipv4.address }}"
+nfs_server: "{{ hostvars[groups['control'] | first ].ansible_default_ipv4.address }}"
+
+nfs_configurations:
+  - comment: Export /exports/home from Slurm control node as /home
+    nfs_enable:
+        server:  "{{ inventory_hostname in groups['control'] }}"
+        clients: "{{ inventory_hostname in groups['cluster'] and inventory_hostname not in groups['control'] }}"
+    nfs_export: "/exports/home" # assumes skeleton TF is being used
+    nfs_client_mnt_point: "/home"
+  - comment: Export /var/lib/state from Slurm control node to login
+    nfs_enable:
+        server:  "{{ inventory_hostname in groups['control'] }}"
+        clients: "{{ inventory_hostname in groups['login'] }}"
+    nfs_export: "{{ appliances_state_dir }}"
+    nfs_client_mnt_point: "{{ appliances_state_dir }}"
+    nfs_client_mnt_options: "{{ state_dir_mnt_opts }}"

group_vars/nfs.yml

@@ -75,4 +75,4 @@ _opeonondemand_unset_auth: '    RequestHeader unset Authorization'
 # Fix grafana proxying for basic auth if anonymous grafana access enabled:
 openondemand_node_proxy_directives: "{{ _opeonondemand_unset_auth if (openondemand_auth == 'basic_pam' and 'openondemand_host_regex' and 'grafana' in groups and hostvars[groups['grafana'][0]]._grafana_auth_is_anonymous) else '' }}"
 
-
+state_dir_mnt_opts: "x-systemd.required-by=zenith-ood.service,x-systemd.before=zenith-ood.service"

group_vars/openondemand.yml

@@ -1,7 +1,7 @@
 ---
 roles:
   - src: stackhpc.nfs
-    version: v21.2.1
+    version: v22.9.1
   - src: https://github.com/stackhpc/ansible-role-openhpc.git
     version: v0.16.0
     name: stackhpc.openhpc

requirements.yml

@@ -169,7 +169,7 @@ resource "openstack_compute_instance_v2" "control" {
         device: {{ home_volume_device_path }}
         partition: auto
     mounts:
-        - [LABEL=state, /var/lib/state]
+        - [LABEL=state, /var/lib/state, auto, "x-systemd.required-by=nfs-server.service,x-systemd.before=nfs-server.service"]
         - [LABEL=home, /exports/home, auto, "x-systemd.required-by=nfs-server.service,x-systemd.before=nfs-server.service"]
   EOF
 }

roles/cluster_infra/templates/resources.tf.j2

@@ -69,10 +69,11 @@
     - import_role:
         name: podman
         tasks_from: config.yml
-# Deploy the Zenith client for Grafana
+
 - hosts: grafana
   tasks:
-    - include_role:
+    - name: Deploy the Zenith client for Grafana
+      include_role:
         name: zenith_proxy
       vars:
         zenith_proxy_service_name: zenith-monitoring
@@ -87,10 +88,11 @@
         zenith_proxy_mitm_auth_basic_username: "{{ grafana_security.admin_user }}"
         zenith_proxy_mitm_auth_basic_password: "{{ grafana_security.admin_password }}"
       when: zenith_subdomain_monitoring is defined
-# Deploy the Zenith client for OOD
+
 - hosts: openondemand
   tasks:
-    - include_role:
+    - name: Deploy the Zenith client for OOD
+      include_role:
         name: zenith_proxy
       vars:
         zenith_proxy_service_name: zenith-ood