Page MenuHomeSoftware Heritage
Create Task
Maniphest T2566

Add an icinga check on whether the puppet agent is enabled
Closed, MigratedEdits Locked
Actions

Description

Sometimes, we disable the puppet agent with puppet agent --disable; we should have an icinga check for this, to avoid forgetting to enable it again.

I suggest warning after 4 hours, and erroring after 24 hours.

Revisions and Commits

rSPSITE puppet-swh-site
D5065rSPSITE8bc7ef05cca4 icinga: grant access to private puppet directories
D5043rSPSITEe3c3a3dc844a icinga: monitor puppet agent activation

Related Objects

Event Timeline

olasd triaged this task as Normal priority.Sep 7 2020, 10:46 AM
olasd created this task.
vsellier moved this task from Backlog to Weekly backlog on the System administration board.Feb 8 2021, 12:50 PM
vsellier changed the task status from Open to Work in Progress.Feb 8 2021, 2:20 PM
vsellier moved this task from Weekly backlog to in-progress on the System administration board.
vsellier added a subscriber: vsellier.Feb 8 2021, 3:15 PM

The file /var/lib/puppet/state/agent_disabled.lock can be checked to detect if puppet is disable or not.

vsellier claimed this task.Feb 9 2021, 9:26 AM
vsellier added a revision: D5043: icinga: monitor puppet agent activation.Feb 9 2021, 9:37 AM
vsellier added a commit: rSPSITEe3c3a3dc844a: icinga: monitor puppet agent activation.Feb 9 2021, 4:26 PM
vsellier mentioned this in rSPSITEfb01f43ad2cd: icinga: use the right parameter name for ignoremissing.Feb 9 2021, 4:43 PM
vsellier added a revision: D5065: icinga: grant access to private puppet directories.Feb 11 2021, 3:03 PM
vsellier added a commit: rSPSITE8bc7ef05cca4: icinga: grant access to private puppet directories.Feb 11 2021, 3:35 PM
vsellier mentioned this in rSPSITE08c1f568a165: icinga: convert puppet checks threshold to seconds.Feb 11 2021, 3:55 PM
vsellier closed this task as Resolved.Feb 11 2021, 4:55 PM

After puppet has added the group to the user nagios[1], the icinga services needed to be restarted.

# clush -b -w @staging 'systemctl restart icinga2'
# clush -b -w @all 'systemctl restart icinga2'

[1] The group was manually added on the hosts where puppet was disable (worker01 and saatchi). There is still giverny, but I kept it untouched

vsellier moved this task from in-progress to done on the System administration board.Feb 18 2021, 9:28 AM
gitlab-migration changed the task status from Resolved to Migrated.Oct 19 2022, 5:57 PM
gitlab-migration claimed this task.
gitlab-migration added a subscriber: gitlab-migration.

This task has been migrated to GitLab.

About · Developer information · Legal