subspace 3.0.12 → 3.0.14

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 935d4125d64c00864f60dbd6757b22e6be2ee7c96da64480b87178ad4c286dcb
-  data.tar.gz: ee223791b07e266cf51b77e2e706c400e3ec8729c61d48cd85987334a2ea7b48
+  metadata.gz: 5b8e42060884330c35aba2c6696c7e2d517d1077b5123850ac2a5e65e234ec33
+  data.tar.gz: f0a73c27e6b04d65e613efab30c537f0956a61bacfa57062be856e095eaf2217
 SHA512:
-  metadata.gz: e88b7598daec4a79b50a36d6af5778fdcf7153d36caf9a1ee896a6a589b2bb1f190a8712b0e17af37fa4572a5048662565dc73b459e8e1630669d0291a3935e7
-  data.tar.gz: 611bcb89723ed8032622f7cd8a3c7bdc01238e9f1cb609ce4d7b381a9390d01bdd5cacf0d8612154ed7d42e30990b1e3c32febc212c6d73da85c17f68cdb59b9
+  metadata.gz: f7c98b1bda739a664137fec217e6b74fa71cb2a3b4a01c41fb925b6d09f51cbd76494526c5803de0d38ba03e6dbd82ac49ac4716969f9daa32de04c0bc8648aa
+  data.tar.gz: f69db016de6cbf90cc19f3d64cbec5068c79df228a6ee26b11e9c4cf14febd13ae970123d10f20b3ce120ac832bc4adf3f3ce33468e4b0b8f633990e79890b4b

data/CHANGELOG.md

@@ -12,6 +12,13 @@ This project attempts to follow [semantic versioning](https://semver.org/).
 
 ## Unreleased
 
+## 3.0.14
+  * Update oxenwagen template: remove profile, add final_snapshot_identifier
+  * Change key to stat_type for client stats
+
+## 3.0.13
+  * Allow tailscale to update itself again; bug that required known good version pinning in 3.0.10 has been resolved.
+
 ## 3.0.12
   * Bugfix: use `exist?`
 

data/README.md

@@ -480,6 +480,23 @@ This will install a monit script that keeps sidekiq running.  We spawn one sidek
 
 Sidekiq uses redis by default, and rails connects to a redis running on localhost by default.  However, this role does not depend on redis since in production it's likely redis will be running elsewhere.  If you're provisioning a standalone server, make sure to include the redis role.
 
+## tailscale
+
+This installs/updates the Tailscale package, and adds/authenticates servers to the 10FW Tailnet.
+
+**Prerequesites:**
+- Create an auth key within tailscale, appropriately tagged & granted ACL access for the given project.
+- Add `tailscale_auth_key` to the secrets vault for the environment you wish to provision.
+
+**Recommendations:**
+
+At the top of `config/subspace/{env}.yml`, add a separate block to allow the tailscale role to execute before all other roles. When the tailscale package is updated, the ssh connection will be broken, and it's best to get this out of the way first thing during a maintain or provision.
+
+**Force Reauthentication:**
+
+To force authentication with the tailnet, use the following tag when provisioning:
+
+    subspace provision {env} --tags=tailscale_reauth`
 
 ## Other Internal Roles
 

data/ansible/roles/common/tasks/main.yml

@@ -168,7 +168,7 @@
       body_format: json
       body:
         client_stat:
-          key: os_upgrades
+          stat_type: os_upgrades
           value: "{{stats_os_upgrades.stdout}}"
           hostname: "{{hostname}}"
     when: (send_stats == true) and (stats_url is defined) and (stats_api_key is defined) and (stats_os_upgrades.stdout | length > 0)
@@ -236,7 +236,7 @@
       body_format: json
       body:
         client_stat:
-          key: os_security_upgrades
+          stat_type: os_security_upgrades
           value: "{{stats_os_security_upgrades.stdout}}"
           hostname: "{{hostname}}"
     when: (send_stats == true) and (stats_url is defined) and (stats_api_key is defined) and (stats_os_security_upgrades.stdout | length > 0)
@@ -323,7 +323,7 @@
       body_format: json
       body:
         client_stat:
-          key: os_version
+          stat_type: os_version
           value: "{{stats_os_version.stdout}}"
           hostname: "{{hostname}}"
     when: send_stats == true and stats_url is defined and stats_api_key is defined

data/ansible/roles/postgresql/tasks/main.yml

@@ -117,7 +117,7 @@
       body_format: json
       body:
         client_stat:
-          key: psql_version
+          stat_type: psql_version
           value: "{{stats_psql_version.stdout}}"
           hostname: "{{hostname}}"
     when: send_stats == true and stats_url is defined and stats_api_key is defined

data/ansible/roles/postgresql-client/tasks/main.yml

@@ -103,7 +103,7 @@
     body_format: json
     body:
       client_stat:
-        key: psql_version
+        stat_type: psql_version
         value: "{{stats_psql_version.stdout}}"
         hostname: "{{hostname}}"
   when: send_stats == true and stats_url is defined and stats_api_key is defined

data/ansible/roles/rails/tasks/main.yml

@@ -73,7 +73,7 @@
       body_format: json
       body:
         client_stat:
-          key: rails_version
+          stat_type: rails_version
           value: "{{stats_rails_version.stdout}}"
           hostname: "{{hostname}}"
     when: send_stats == true and stats_url is defined and stats_api_key is defined

data/ansible/roles/ruby-common/tasks/main.yml

@@ -100,7 +100,7 @@
     body_format: json
     body:
       client_stat:
-        key: ruby_version
+        stat_type: ruby_version
         value: "{{stats_ruby_version.stdout}}"
         hostname: "{{hostname}}"
   when: send_stats == true and stats_url is defined and stats_api_key is defined

data/ansible/roles/tailscale/tasks/main.yml

@@ -18,6 +18,7 @@
       - tailscale_reauth
 
   - name: "Allow tailscale to be installed"
+    ignore_errors: yes
     dpkg_selections:
       name: tailscale
       selection: install
@@ -27,7 +28,7 @@
 
   - name: "Install tailscale from apt"
     apt:
-      name: tailscale=1.66.4
+      name: tailscale
       state: present
       allow_downgrade: true
       update_cache: yes
@@ -35,14 +36,6 @@
       - maintenance
       - tailscale_reauth
 
-  - name: "Prevent tailscale from being upgraded"
-    dpkg_selections:
-      name: tailscale
-      selection: hold
-    tags:
-      - maintenance
-      - tailscale_reauth
-
   - name: "Join the tailnet and force reauth"
     become: true
     command: tailscale up --ssh --auth-key={{tailscale_auth_key}} --hostname={{project_name | regex_replace('_', '')}}-{{hostname}} --accept-risk=lose-ssh {{tailscale_options}} --force-reauth

data/lib/subspace/cli.rb

@@ -46,7 +46,7 @@ class Subspace::Cli
     end
 
     command :bootstrap do |c|
-      c.syntax = 'subspace boostrap [host]'
+      c.syntax = 'subspace bootstrap [host]'
       c.summary = 'Install ansible requirements (python) and authorized_keys file'
       c.description = 'Ansible has very few dependencies, but python is one that is not installed by
       default on many linux images.  The bootstrap command will install python on a host as well as

data/lib/subspace/commands/init.rb

@@ -51,7 +51,7 @@ class Subspace::Commands::Init < Subspace::Commands::Base
 
     3. Bootstrap the new server
 
-      subspace boostrap #{@env}1
+      subspace bootstrap #{@env}1
 
     4. Inspect new environment
       - ensure the correct roles are present in #{@env}.yml

data/lib/subspace/version.rb

@@ -1,3 +1,3 @@
 module Subspace
-  VERSION = "3.0.12"
+  VERSION = "3.0.14"
 end

data/template/subspace/terraform/template/main-oxenwagen.tf.erb

@@ -21,7 +21,6 @@ terraform {
 
 provider aws {
   region = "us-west-2"
-  profile = "subspace-<%= project_name %>"
   default_tags {
     tags = {
       Environment = "<%= @env %>"
@@ -58,6 +57,7 @@ module oxenwagen {
   database_allocated_storage = 100
   database_max_allocated_storage = 1000
   database_iops = 1000
+  final_snapshot_identifier = "<%= "#{project_name}-#{@env}-1" %>"
 
   # lb_domain_name = "www.<%= project_name %>.com"
   # lb_alternate_names = []

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: subspace
 version: !ruby/object:Gem::Version
-  version: 3.0.12
+  version: 3.0.14
 platform: ruby
 authors:
 - Brian Samson
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-11-11 00:00:00.000000000 Z
+date: 2025-03-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -313,8 +312,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.22
-signing_key:
+rubygems_version: 3.6.6
 specification_version: 4
 summary: Ansible-based server provisioning for rails projects
 test_files: []