Differential D6635 Diff 24165 site-modules/profile/manifests/systemd_journal/journalbeat.pp

Changeset View

Standalone View

View Options

site-modules/profile/manifests/systemd_journal/journalbeat.pp

# Journalbeat: a systemd journal collection beater for the ELK stack

class profile::systemd_journal::journalbeat {

$package = 'journalbeat'

$user = 'journalbeat'

$group = 'nogroup'

$homedir = '/var/lib/journalbeat'

$configdir = '/etc/journalbeat'

$configfile = "${configdir}/journalbeat.yml"

$service = 'journalbeat'

$default_elk_version = lookup('elastic::elk_version')

$version = lookup('elastic::beat_version', { default_value => $default_elk_version })

$logstash_hosts = lookup('systemd_journal::logstash_hosts')

package {$package:

include ::profile::elastic::apt_config

ensure => present

# cleanup

::apt::pin {'swh-journalbeat':

ensure => absent,

}

-> ::apt::pin {'journalbeat':

olasdUnsubmitted

Not Done

-> ::apt::pin {'journalbeat':

- explanation => 'Use the elk stack version',

+ explanation => 'Use the elk stack version for journalbeat',

packages => ['journalbeat'],

olasd:

explanation => 'Use the elk stack version for journalbeat',

packages => ['journalbeat'],

version => $version,

priority => 1001,

}

-> package {$package:

ensure => $version,

}

user {$user:

# To remove after complete migration to 7.15

ensure => present,

-> user {'journalbeat': # journalbeat needs to be stopped before trying to remove the user

gid => $group,

ensure => absent,

groups => 'systemd-journal',

managehome => false,

home => $homedir,

managehome => true,

system => true,

}

# Uses variables

# cleanup pre 7.15 version

# - $user

file {"/etc/systemd/system/${service}.service":

# - $homedir

ensure => absent,

# - $configfile

}

file {'/var/lib/journalbeat/cursor_state':

::systemd::unit_file {"${service}.service":

ensure => absent,

}

::systemd::dropin_file { "${service}.conf":

ensure => present,

content => template('profile/systemd_journal/journalbeat/journalbeat.service.erb'),

unit => "${service}.service",

content => template('profile/systemd_journal/journalbeat/journalbeat.conf.erb'),

}

~> service {$service:

ensure => running,

enable => true,

require => [

Package[$package],

File[$configfile],

::Systemd::Dropin_file["${service}.conf"],

subscribe => [

Package[$package],

File[$configfile],

::Systemd::Dropin_file["${service}.conf"],

}

file {$configdir:

ensure => directory,

owner => 'root',

group => 'root',

mode => '0644',

}

# Uses variables

# - $logstash_hosts

file {$configfile:

ensure => present,

owner => 'root',

group => 'root',

mode => '0644',

content => template('profile/systemd_journal/journalbeat/journalbeat.yml.erb'),

notify => [

require => [Package[$package]],

Service[$service],

notify => [Service[$service]],

}

::apt::pin {'swh-journalbeat':

explanation => 'Use journalbeat packages from Software Heritage',

packages => ['journalbeat'],

originator => 'softwareheritage',

priority => 990,

}

profile::cron::d {'logrotate-journal':

target => 'logrotate-journal',

command => 'chronic sh -c "/usr/lib/nagios/plugins/swh/check_journal && journalctl --vacuum-time=\'7 days\'"',

user => 'root',

minute => 'fqdn_rand',

hour => 'fqdn_rand',

}