Merge pull request #14973 from rocky-linux/develop

merging some internal changes for awx
This commit is contained in:
Louis Abel 2021-01-17 20:48:37 -07:00 committed by GitHub
commit ebafc8c475
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
6 changed files with 69 additions and 4 deletions

View File

@ -25,8 +25,9 @@ chrony001.rockylinux.org ansiblehost=10.100.3.110
chrony002.rockylinux.org ansiblehost=10.200.3.111
git.rockylinux.org ansible_host=10.100.1.113
[ipsilon]
[idp]
idp001.rockylinux.org ansible_host=10.100.x.x
idp002.rockylinux.org ansible_host=10.100.x.x
[chronyservers]
chrony001.rockylinux.org ansiblehost=10.100.3.110

View File

@ -5,10 +5,25 @@
# Memory: 2GB
# Storage: a piece of string
- name: Install Prometheus
hosts: monitoringserver
hosts: monitoringservers
become: true
vars_files:
- vars/vaults/encpass.yml
- vars/monitoring.yml
- vars/monitoring/alertmanager.yml
- vars/monitoring/grafana.yml
- vars/monitoring/prometheus.yml
# This is to try to avoid the handler issue in pre/post tasks
handlers:
- import_tasks: handlers/main.yml
pre_tasks:
- name: Check if ansible cannot be run here
stat:
path: /etc/no-ansible
register: no_ansible
- name: Verify if we can run ansible
assert:
that:
@ -21,11 +36,24 @@
name: python3-policycoreutils.noarch
state: present
role:
roles:
- role: rockylinux.ipagetcert
state: present
- role: cloudalchemy.prometheus
state: present
- role: cloudalchemy.alertmanager
state: present
- role: cloudalchemy.grafana
state: present
post_tasks:
- name: Open firewalld ports
ansible.posix.firewalld:
port: "{{ item.port }}"
permanent: "{{ item.permanent }}"
state: "{{ item.state }}"
loop: "{{ monitoring_server_firewall_rules }}"
- name: Touching run file that ansible has ran here
file:
path: /var/log/ansible.run

View File

@ -1,6 +1,6 @@
---
# Vars for ipsilon
ipsilon_fqdn: idp.rockylinux.org
ipsilon_fqdn: accounts.rockylinux.org
ipsilon_databases:
- name: rockyipsilon

View File

@ -1,4 +1,37 @@
---
# monitoring
monitoring_server_firewall_rules:
- port: 80/tcp
permanent: true
state: enabled
- port: 443/tcp
permanent: true
state: enabled
- port: 9100/tcp
permanent: true
state: enabled
- port: 3000/tcp
permanent: true
state: enabled
- port: 9090/tcp
permanent: true
state: enabled
- port: 9093/tcp
permanent: true
state: enabled
monitoring_tls_ca_cert: "/etc/pki/tls/certs/ca-bundle.crt"
monitoring_tls_cert: "/etc/pki/tls/certs/{{ ansible_fqdn }}.crt"
monitoring_tls_key: "/etc/pki/tls/private/{{ ansible_fqdn }}.key"
ipa_getcert_requested_hostnames:
- name: "{{ ansible_fqdn }}"
owner: grafana
key_location: "{{ monitoring_tls_key }}"
cert_location: "{{ monitoring_tls_cert }}"
postcmd: "/bin/systemctl restart grafana"
# prometheus_targets:
# node:
# - targets:

View File

@ -0,0 +1 @@
# Blank for now

View File

@ -5,6 +5,8 @@ roles:
# monitoring
- name: cloudalchemy.node-exporter
- name: cloudalchemy.prometheus
- name: cloudalchemy.alertmanager
- name: cloudalchemy.grafana
- name: geerlingguy.gitlab
- name: geerlingguy.postgresql
- name: rockylinux.ipagetcert