Differential D4482 Diff 15904 site-modules/profile/manifests/opnsense/monitoring.pp

Changeset View

Standalone View

site-modules/profile/manifests/opnsense/monitoring.pp

	# Configure the icinga checks and prometheus endpoints for the firewalls			# Configure the icinga checks and prometheus endpoints for the firewalls
	class profile::opnsense::monitoring {			class profile::opnsense::monitoring {
	$fw_hosts = lookup('opnsense::hosts')			$fw_hosts = lookup('opnsense::hosts')
	$fw_prometheus_port = lookup('opnsense::prometheus::port')			$fw_prometheus_port = lookup('opnsense::prometheus::port')
	$fw_prometheus_metrics_path = lookup('opnsense::prometheus::metrics_path')			$fw_prometheus_metrics_path = lookup('opnsense::prometheus::metrics_path')

	$icinga_checks_file = lookup('icinga2::exported_checks::filename')			$icinga_checks_file = lookup('icinga2::exported_checks::filename')
	$icinga_zonename = lookup('icinga2::master::zonename')			$icinga_zonename = lookup('icinga2::master::zonename')

	$fw_hosts.each \| $host \| {			$fw_hosts.each \| $host, $config \| {
				ardumontUnsubmitted Not Done Inline Actions `fqdn =` ardumont: `fqdn =`
				$fqdn = $config['fqdn']
				$ip = $config['ip']

	$target = "${host}:${fw_prometheus_port}"			$target = "${fqdn}:${fw_prometheus_port}"

	profile::prometheus::export_scrape_config { $host :			profile::prometheus::export_scrape_config { $fqdn :
	target => $target,			target => $target,
	scheme => 'http',			scheme => 'http',
	metrics_path => $fw_prometheus_metrics_path,			metrics_path => $fw_prometheus_metrics_path,
	}			}

	::icinga2::object::host {$host:			::icinga2::object::host {$fqdn:
	display_name => $host,			display_name => $fqdn,
	check_command => 'hostalive',			check_command => 'hostalive',
	target => "/etc/icinga2/zones.d/${icinga_zonename}/${host}.conf",			address => $ip,
				target => "/etc/icinga2/zones.d/${icinga_zonename}/${fqdn}.conf",
	}			}

	::icinga2::object::service {"opnsense https on ${host}":			::icinga2::object::service {"opnsense https on ${fqdn}":
	service_name => 'opnsense',			service_name => 'opnsense',
	import => ['generic-service'],			import => ['generic-service'],
	host_name => $host,			host_name => $fqdn,
	check_command => 'http',			check_command => 'http',
	vars => {			vars => {
	http_address => $host,			http_address => $fqdn,
	http_vhost => $host,			http_vhost => $fqdn,
	http_ssl => true,			http_ssl => true,
	http_uri => '/',			http_uri => '/',
	http_onredirect => sticky			http_onredirect => sticky
	},			},
	target => $icinga_checks_file,			target => $icinga_checks_file,
	tag => 'icinga2::exported',			tag => 'icinga2::exported',
	}			}
	}			}
	}			}