Page MenuHomeSoftware Heritage
Files F9340962

No OneTemporary
Actions

View Options

diff --git a/data/defaults.yaml b/data/defaults.yaml
index 531ec3f2..6839b48d 100644
--- a/data/defaults.yaml
+++ b/data/defaults.yaml
@@ -1,3281 +1,3282 @@
---
dns::local_cache: true
dns::nameservers:
- 127.0.0.1
dns::search_domains:
- internal.softwareheritage.org
- softwareheritage.org
# dns::forward_zones per-location. No default value
# dns::forwarders per-location. No Default value
# ntp::servers per-location. Default value:
ntp::servers:
- 0.debian.pool.ntp.org
- 1.debian.pool.ntp.org
- 2.debian.pool.ntp.org
- 3.debian.pool.ntp.org
sudo::configs: {}
# smtp::relayhost is per-location. Default value:
smtp::relayhost: '[pergamon.internal.softwareheritage.org]'
smtp::mydestination:
- "%{::fqdn}"
smtp::mynetworks:
- 127.0.0.0/8
- "[::ffff:127.0.0.0]/104"
- "[::1]/128"
smtp::relay_destinations: []
smtp::virtual_aliases: []
smtp::mail_aliases:
- user: anlambert
aliases:
- antoine.lambert33@gmail.com
- user: ardumont
aliases:
- antoine.romain.dumont@gmail.com
- user: ddouard
aliases:
- david.douard@sdfa3.org
- user: fiendish
aliases:
- patcherton.fixesthings@gmail.com
- user: ftigeot
aliases:
- ftswh@wolfpond.org
- user: olasd
aliases:
- nicolas+swhinfra@dandrimont.eu
- user: morane
aliases:
- morane.gg@gmail.com
- user: postgres
aliases:
- root
- user: rdicosmo
aliases:
- roberto@dicosmo.org
- user: root
aliases:
- olasd
- zack
- ardumont
- ftigeot
- user: seirl
aliases:
- antoine.pietri1@gmail.com
- user: swhstorage
aliases:
- root
- user: swhworker
aliases:
- zack
- olasd
- ardumont
- user: swhdeposit
aliases:
- ardumont
- user: zack
aliases:
- zack@upsilon.cc
- user: vlorentz
aliases:
- valentin.lorentz@inria.fr
locales::default_locale: C.UTF-8
locales::installed_locales:
- C.UTF-8 UTF-8
- en_US.UTF-8 UTF-8
- fr_FR.UTF-8 UTF-8
- it_IT.UTF-8 UTF-8
timezone: Etc/UTC
packages:
- acl
- etckeeper
- git
- htop
- ipython3
- molly-guard
- moreutils
- ncdu
- nfs-common
- python3
- ruby-filesystem
- strace
- tmux
- vim
- zsh
packages::desktop:
- autojump
- chromium
- curl
- emacs
- ethtool
- gnome
- i3
- ii
- libx11-dev
- mosh
- myrepos
- net-tools
- ruby-dev
- rxvt-unicode-256color
- screen
- scrot
- tcpdump
- tree
- vim-nox
- weechat
- weechat-scripts
packages::devel:
- arcanist
- elpa-magit
- git-email
- gitg
- gitk
- ltrace
- perl-doc
packages::devel::debian:
- devscripts
- dpkg-dev
- reprepro
- sbuild
packages::devel::python:
- graphviz
- make
- python3-arrow
- python3-azure-storage
- python3-blinker
- python3-celery
- python3-cffi
- python3-click
- python3-dateutil
- python3-dev
- python3-dulwich
- python3-flake8
- python3-flask
- python3-flask-api
- python3-flask-limiter
- python3-flask-testing
- python3-libcloud
- python3-msgpack
- python3-nose
- python3-psycopg2
- python3-pygit2
- python3-requests
- python3-retrying
- python3-sphinx
- python3-subvertpy
- python3-vcversioner
- python3-venv
- python3-wheel
packages::devel::broker:
- rabbitmq-server
packages::devel::postgres:
- apgdiff
- barman
- check-postgres
- libpq-dev
- postgresql
- postgresql-autodoc
- postgresql-client
- postgresql-contrib
- postgresql-doc
- postgresql-plpython3-9.6
users:
root:
uid: 0
full_name:
shell: /bin/bash
groups: []
authorized_keys:
root@louvre:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDMLEWHlUQldlvZs5rg0y42lRNAfOhD+6pmO8a73DzpJWHTqvAlfteLpU78IPjSacB4dO5ish1E/1RX/HC+Bt8p2v4RBqbCnVLx2w+Hx4ahWu6qbeTVmTz+U++1SQrHnL08fSlhT0OekCw0lRZM2sQq21FZi6+vul97Ecikag4Xaw6Qfumylu94pM3t05uzTUlKk1+6VMCjhT8dlSe8VS8OirVQpE/OqYtTMAWtQaMXGHPCsqDdYRAKzkJ8GjH7ydZmX5VCRyqS0RvPKAlcJfLCs5HBtv0u5rbeGtiHhuzhj/j3YgS/6NJOC2mUfcetcDOMPLnhkKpnF0vUAzTsJ7aR
root@banco:
type: ssh-ed25519
key: AAAAC3NzaC1lZDI1NTE5AAAAIDcljv9eR52wJsu9yYan6/riIQw70lQuyz+Qt0XpGXMs
zack:
uid: 1000
full_name: Stefano Zacchiroli
shell: /usr/bin/zsh
groups:
- adm
- swhdev
- swhstorage
- swhscheduler
- swhdeploy
- sudo
- gitorious
- swhteam
authorized_keys:
zack-software-heritage:
type: ssh-rsa
key: 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
olasd:
uid: 1001
full_name: Nicolas Dandrimont
shell: /bin/bash
groups:
- adm
- swhdev
- swhstorage
- swhscheduler
- swhdeploy
- sudo
- gitorious
- swhteam
authorized_keys:
nicolasd@darboux:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ1TCpfzrvxLhEMhxjbxqPDCwY0nazIr1cyIbhGD2bUdAbZqVMdNtr7MeDnlLIKrIPJWuvltauvLNkYU0iLc1jMntdBCBM3hgXjmTyDtc8XvXseeBp5tDqccYNR/cnDUuweNcL5tfeu5kzaAg3DFi5Dsncs5hQK5KQ8CPKWcacPjEk4ir9gdFrtKG1rZmg/wi7YbfxrJYWzb171hdV13gSgyXdsG5UAFsNyxsKSztulcLKxvbmDgYbzytr38FK2udRk7WuqPbtEAW1zV4yrBXBSB/uw8EAMi+wwvLTwyUcEl4u0CTlhREljUx8LhYrsQUCrBcmoPAmlnLCD5Q9XrGH
ardumont:
uid: 1003
full_name: Antoine R. Dumont
shell: /usr/bin/zsh
groups:
- adm
- swhdev
- swhstorage
- swhscheduler
- swhdeploy
- sudo
- gitorious
- swhteam
authorized_keys:
eniotna.t@gmail.com:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDZarzgHrzUYspvrgSI6fszrALo92BDys7QOkJgUfZa9t9m4g7dUANNtwBiqIbqijAQPmB1zKgG6QTZC5rJkRy6KqXCW/+Qeedw/FWIbuI7jOD5WxnglbEQgvPkkB8kf1xIF7icRfWcQmK2je/3sFd9yS4/+jftNMPPXkBCxYm74onMenyllA1akA8FLyujLu6MNA1D8iLLXvz6pBDTT4GZ5/bm3vSE6Go8Xbuyu4SCtYZSHaHC2lXZ6Hhi6dbli4d3OwkUWz+YhFGaEra5Fx45Iig4UCL6kXPkvL/oSc9KGerpT//Xj9qz1K7p/IrBS8+eA4X69bHYYV0UZKDADZSn
ardumont@louvre:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQC0Xj8nwGWTb6VGFNIrlhVTLX6VFTlvpirjdgOTOz8riRxBTS9ra35g3cz8zfDl0iVyE455GXzxlm33w/uu3DX0jQOIzkcoEBRw+T33EK89lo6tCCd9xQrteWCTNR1ZBFloHSnYk2m7kw9kyrisziyAdULsCrXmMd3BH1oJyEpISA+sv/dtVpIOWdEQmkbLmdHl2uEdjBLjqb3BtAp2oJZMmppE5YjAx0Aa1+7uSnURf7NnwMx+0wTDMdfqn8z4wqI8eQny+B+bqLH9kY++52FfMVALuErGh5+75/vtd2xzRQamjKsBlTGjFFbMRagZiVNLDX2wtdudhNmnQDIKA+rH
swhworker:
uid: 1004
full_name: SWH Worker Acccount
shell: /bin/bash
groups:
- swhdeploy
- gitorious
swhstorage:
uid: 1005
full_name: SWH Storage Account
shell: /bin/bash
groups:
- swhdeploy
- swhstorage
swhwebapp:
uid: 1006
full_name: SWH Web App Account
shell: /bin/bash
groups: []
swhbackup:
uid: 1007
full_name: SWH Backup Account
shell: /bin/bash
groups: []
rdicosmo:
uid: 1008
full_name: Roberto Di Cosmo
shell: /bin/bash
groups:
- swhteam
authorized_keys:
dicosmo@voyager:
type: ssh-rsa
key: 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
swhteamannex:
uid: 1009
full_name: SWH Team Git Annex Account
shell: /bin/bash
groups:
- swhteam
authorized_keys:
swhteamannex@louvre:
type: ssh-rsa
key: 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
swhscheduler:
uid: 1010
full_name: SWH Scheduler Account
shell: /bin/bash
groups:
- swhscheduler
jbertran:
uid: 2001
full_name: Jordi Bertran de Balanda
shell: /bin/false
password: "!"
qcampos:
uid: 2002
full_name: Quentin Campos
shell: /bin/false
password: "!"
gitorious:
uid: 5000
full_name: Gitorious System User
shell: /bin/false
groups:
- gitorious
fiendish:
uid: 1011
full_name: Avi Kelman
shell: /bin/bash
groups:
- swhdev
- swhstorage
- swhteam
authorized_keys:
avi@Temperance:
type: ssh-rsa
key: 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
morane:
uid: 1012
full_name: Morane Otilia Gruenpeter
shell: /bin/bash
groups:
- swhdev
- swhstorage
- swhteam
authorized_keys:
morane.gg@gmail.com:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDm8kH1pP+4ENKmpkTCkL2ashxxnOFVndGrcvfX05lV1hOo2NdItpdoR9txIgFEs3d7v73mtH4nWciUyaK7FIByrtvsR2TIhdVgEcb0Xai8viV+sDMTndpiNlWNilbfxm0K70tgpG4BeSWRJy8cPxnCR9CWoB2Vo9Df7lDKz1LXDgfY4VLJd69ahf1DPFUDjpWIEQdPFX2ZyGUYM+0yPXIoyYW/qreDt1JkYZXXVbRAV8j44/TVgTRYJLgYb9ThW6WzlGM1S4uP7GQdAuROCcspqW3ahV/UmV4Z9SM6S34NN182KvM0Ve7uxAPQz+IdWOgZTK0pvd+hfjHKbLSTA6I3
seirl:
uid: 1013
full_name: Antoine Pietri
shell: /usr/bin/zsh
groups:
- swhdev
- swhstorage
- swhteam
- swhdeploy
authorized_keys:
seirl:
type: ssh-ed25519
key: AAAAC3NzaC1lZDI1NTE5AAAAILiua8eEg+nU0XSbYPTgnOMftzvpbN+u7v5jDabeO/0E
ssushant:
uid: 1014
full_name: Sushant
shell: /bin/bash
groups:
- swhdev
- swhstorage
- swhteam
authorized_keys:
sushant.mukhija0@gmail.com:
type: ssh-rsa
key: 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
sushant.mukhija0@gmail.com-2:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQC4oLTkZZscbdiMZnh/p8VhfEyRKapqRT7L24kTxxL9Y9QWj3DzCQ7tj8SK/0Y+O0NcrZtXZS/Mx/f6qAjuZwp6Vzo3hLcB016gd5+6suFwz5wfwLFlwF6zgRFc9SqlKuVQdfc0aUvkjReUUalvqXioUqAWi633ZCMGmvjI3c7paIaeGtmjJ2TUE/Qm7x/XxURwk02Y+t7yNhGRGeaGBTKW/OZmIkkaFiSA2syHVRB+fdynPcilYhzaKKWs+6OjG4osKGVJaSef02dSSYHXI4D0HcLgVjExDCt2GGp0Q8e3fFo954btoXLpmij+fOJH1DpHKfUFyOkAnGVOz1wM3Y97
anlambert:
uid: 1015
full_name: Antoine Lambert
shell: /bin/bash
groups:
- swhdev
- swhstorage
- swhteam
- swhdeploy
- swhwebapp
authorized_keys:
antoine.lambert@inria.fr:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAACAQDLWPcZnSUszEedMa39dT3ZCHpRod3NTs6WT4OfMMRVahrhTtWYdSiNGy8U3kEQveTZvMrb9WLtLPB3K8o7Xrf8WCI8iTOl9eb9DVjE9XL+zS0ZAcEmoZ5YH8e3gEDoDm8ZrMxF+V5XSlvhNi6kbWzJdqhXu++bJHHqGrKUHeTCQCfpYYMrsnvhPjtxe+90BK7e+IGm1Ha8LZMCCmOtz0XggxD8d2mFBaP2p8v9xsM48KfwFvsRMb3TZIaO/+NcsRSTe7wfFAR1pb14pi5LZAHeb2tpWfVH2vQGaE7Rej+Ycf4UOeaRmFGpimw7u7fugvDvKfZ/vs7w7Qs2RtxNdqJf9JM+vvi78OQbloufot1Tz2r19aDbhM9nsCn+Uo3rNfkmD+UcSMKrRJCMEXVBbaY/bgzs7XoqCJ8ODE2U/dF3NtHBZr+CB52iilUtemXy+Xwqw4TSs/r9vW7/XueTdb0Yp/cUs5uLCqCwlMpGS5okorpdJextp5gRuN6EMlUo6PffRiz5T0CqKm1xJu0NeT0EaacAXoGTDQaS4pIQGglqWfAOmjej9dM8gxAF6rgrx70uJt6Hy18tvzdB5iwJ4F2LUjcZhFnrxjUDzhjPoDBiRtPNgEKrCc30OHsveqXwMPo3v/d3np1Vpkum0JEwmp83q92P5T2rbf+wiruxZhhtww==
grouss:
uid: 1016
full_name: Guillaume Rousseau
shell: /bin/bash
groups:
- swhteam
authorized_keys:
guillaume.rousseau@univ-paris-diderot.fr:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Akcdxrod/MFcHg53dCf7iZY/ph9MR0tWU08pjMDfU04j1nAgmHmvumYbxBtFNnd0nu4A9YY4nT79273PCE3c6ba3zSGS9DBYhrASGDqHBECrgEREM3YPXpA2NI0FKEZ878Ic3CQlYaOmRoe/QkFpm2j8CMoG4VdKp0EcvV1RCTgWqJY1P4KC30CJUg+OdGRaaqHEoSskjstU5yjbZCC9M90Hz0xO+MsMl/xKdcDmvwbLDMtp/3SKDQeyN4Q7Uu/zZwoZ8FmgEU4Xp7nKN3yCiEB9rqMkP/lLY71hTPHn/GiZnPo4rWL13w3unuI3X0GDpqxPxjt0LZN4xQEGEn+1
ftigeot:
uid: 1017
full_name: Francois Tigeot
shell: /usr/bin/zsh
groups:
- adm
- swhteam
- sudo
authorized_keys:
ftswh@wolfpond.org:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAACAQDXpL8nJw6kUgXSxxO1GrScPWYA7wa1ng7VwF0l1StAVavRGcYpYHdahCYrdIz4QF6fY+HSsUoTwyMHLsmU8tHOK6Urx+EAnUB0t6x0v3wfuwKslAK0hHSgZYGIEkFd4qWX2guHwekIILrSIj+TnlodFMUw5ulCrcGIj8Ss2YZlxXkw8opFLNA22cmrYVwHryv0yfYFejnpBlM9WLA8R8ZKc5Du9Enx5fG0YIFjPH4aaU20W77b+aIQrJTIostANwhSn2TnbhubFklqM314LfgUpVC7+rIe5L5Vk3iY0FHhYN4cBi1DK7NVrw1gwfuBt2Hpjnv/4FRazmn7LM+F0eLdYWzIFVv68vrCtOSSxvUeJtjDYWLWPn/sBJQ8/5yOP3vhxAJAgIvvHnWuGIPVLK9UO6lFGmhaxPP01I8pX/aE7AoRNqFFUXxnkSkSbjLNEGpDSfGVmxnM1fYlqkZzabPFEAbkm2iUKpAEcJWugLMNCGR5Vy2Lspf7DjviNelLvuIOGBeNhY99ecqFLRej0oTf46HHpsaZEWx8zdg7BvAjkCmII8YtZyqYD7tW8P3yEFPkBRhpu+85FwUe+335ZiTPnlR37+QHz4Ax4vBPB3/3q9u+JTXnKqkm3kfiLUcPu1VrwkLBXKr56fnw4+ckUNTVrnkt8/Czz9RghnCM4cD/3w==
swhdeposit:
uid: 1018
full_name: SWH Deposit App Account
shell: /bin/bash
groups:
- swhscheduler
swhvault:
uid: 1019
full_name: SWH Vault Account
shell: /bin/bash
groups:
- swhdeploy
- swhstorage
- swhvault
ddouard:
uid: 1020
full_name: David Douard
shell: /bin/bash
groups:
- swhdev
- swhteam
authorized_keys:
david.douard@sdfa3.org:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAACAQCoON7De2Bx03owpZfzbOyucZTmyQdm7F+LP4D4H9EyOFxtyMpjH2S9Ve/JvMoFIWGQQlXSkYzRv63Z0BzPLKD2NsYgomcjOLdw1Baxnv8VOH+Q01g4B3cabcP2LMVjerHt/KRkY3E6dnKLQGE5UiER/taQ7KazAwvu89nUd4BJsV43rJ3X3DtFEfH3lR4ZEIgFyPUkVemQAjBhueFmN3w8debOdr7t9cBpnYvYKzLQN+G/kQVFc+fgs+fFOtOv+Az9kTXChfLs5pKPBm+MuGxz4gS3fPiAjY9cN6vGzr7ZNkCRUSUjJ10Hlm7Gf2EN8f+k6iSR4CPeixDcZ+scbCg4dCORqTsliSQzUORIJED9fbUR6bBjF4rRwm5GvnXx5ZTToWDJu0PSHYOkomqffp30wqvAvs6gLb+bG1daYsOLp+wYru3q09J9zUAA8vNXoWYaERFxgwsmsf57t8+JevUuePJGUC45asHjQh/ON1H5PDXtULmeD1GKkjqyaS7SBNbpOWgQb21l3pwhLet3Mq3TJmxVqzGMDnYvQMUCkiPdZq2pDplzfpDpOKLaDg8q82rR5+/tAfB4P2Z9RCOqnMLRcQk9AluTyO1D472Mkp+v5VA4di0eTWZ0tuzwYJEft0OVo+QOVTslCGsyGiEUoOcHzkrdgsT5uQziyAfgTMSuiw==
vlorentz:
uid: 1021
full_name: Valentin Lorentz
shell: /usr/bin/zsh
groups:
- swhdev
- swhteam
authorized_keys:
valentin.lorentz@inria.fr:
type: ssh-ed25519
key: AAAAC3NzaC1lZDI1NTE5AAAAILsRMQjrrfUjX1ka9e6YlyMyDvTC+qk5a21Fp9yXYI7p
vlorentz@softwareheritage.org:
type: ssh-ed25519
key: AAAAC3NzaC1lZDI1NTE5AAAAIIjJoY4XBTTNsxLVF/sUKBI4WGR2AIiR9qfMdspnsRfJ
groups:
adm:
gid: 4 # assigned from base-files
zack:
gid: 1000
olasd:
gid: 1001
ardumont:
gid: 1003
ddouard:
gid: 1020
swhworker:
gid: 1004
swhdev:
gid: 1002
swhstorage:
gid: 1005
swhdeploy:
gid: 1006
swhbackup:
gid: 1007
swhwebapp:
gid: 1008
swhteam:
gid: 1009
swhscheduler:
gid: 1010
sudo:
gid: 27 # assigned from base-files
gitorious:
gid: 5000
swhdeposit:
gid: 1018
swhvault:
gid: 1019
munin::node::allow:
- 192.168.100.20
munin::node::network: "%{lookup('internal_network')}"
munin::node::plugins::enable:
- apt
- postfix_mailvolume
- postfix_mailqueue
munin::node::plugins::disable:
- apt_all
- df_inode
- entropy
- exim_mailstats
- exim_mailqueue
- interrupts
- irqstats
- netstat
- nfs4_client
- nfsd4
- open_files
- open_inodes
- proc_pri
- vmstat
munin::master::hostname: munin.internal.softwareheritage.org
munin::plugins::rabbitmq::messages_warn: 18000000
munin::plugins::rabbitmq::messages_crit: 20000000
munin::plugins::rabbitmq::queue_memory_warn: 1073741824 # 1GB
munin::plugins::rabbitmq::queue_memory_crit: 2147483648 # 2GB
rabbitmq::monitoring::user: swhdev
# rabbitmq::monitoring::password in private data
puppet::master::hostname: pergamon.internal.softwareheritage.org
puppet::master::puppetdb: pergamon.internal.softwareheritage.org
strict_transport_security::max_age: 15768000
# Those variables get picked up by 'include ::php::fpm::daemon'
php::fpm::daemon::log_owner: www-data
php::fpm::daemon::log_group: adm
php::fpm::daemon::log_dir_mode: '0750'
# Those variables get picked up by 'include ::apache'
apache::server_tokens: 'Prod'
apache::server_signature: 'Off'
apache::trace_enable: 'Off'
# Those variables get picked up by 'include ::apache::mod::passenger'
apache::mod::passenger::passenger_root: /usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini
# Those variables need to be set manually in the SSL vhosts.
apache::ssl_protocol: all -SSLv2 -SSLv3
apache::ssl_honorcipherorder: 'On'
apache::ssl_cipher: EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
apache::hsts_header: "set Strict-Transport-Security \"max-age=%{hiera('strict_transport_security::max_age')}\""
# Those variables need to be set manually for all vhosts
apache::http_port: 80
apache::https_port: 443
# Hitch TLS proxy configuration
hitch::frontend: "[*]:10443"
hitch::proxy_support: false
hitch::http2_support: false
# Varnish configuration
varnish::http_port: 10080
varnish::proxy_port: 6081
varnish::http2_support: false
varnish::listen:
- ":%{hiera('varnish::http_port')}"
- "[::1]:%{hiera('varnish::proxy_port')},PROXY"
varnish::backend_http_port: "%{hiera('apache::http_port')}"
varnish::admin_listen: 127.0.0.1
varnish::admin_port: 6082
varnish::storage_type: malloc
varnish::storage_size: 256m
varnish::storage_file: /var/lib/varnish/varnish_storage.bin
# varnish::secret in private-data
ssl:
star_softwareheritage_org:
certificate: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
ca_bundle: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
star_internal_softwareheritage_org:
certificate: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
ca_bundle: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
stats_export_softwareheritage_org:
certificate: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
ca_bundle: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
bind::update_key: local-update
bind::zones:
internal.softwareheritage.org:
domain: internal.softwareheritage.org
100.168.192.in-addr.arpa:
domain: 100.168.192.in-addr.arpa
101.168.192.in-addr.arpa:
domain: 101.168.192.in-addr.arpa
200.168.192.in-addr.arpa:
domain: 200.168.192.in-addr.arpa
201.168.192.in-addr.arpa:
domain: 201.168.192.in-addr.arpa
202.168.192.in-addr.arpa:
domain: 202.168.192.in-addr.arpa
203.168.192.in-addr.arpa:
domain: 203.168.192.in-addr.arpa
204.168.192.in-addr.arpa:
domain: 204.168.192.in-addr.arpa
205.168.192.in-addr.arpa:
domain: 205.168.192.in-addr.arpa
206.168.192.in-addr.arpa:
domain: 206.168.192.in-addr.arpa
207.168.192.in-addr.arpa:
domain: 207.168.192.in-addr.arpa
# Defaults for secondary bind server
bind::zones::type: slave
bind::zones::masters:
- 192.168.100.29
bind::zones::allow_transfers:
- 192.168.100.0/24
- 192.168.101.0/24
- 192.168.200.22
bind::zones::default_data:
zone_type: "%{alias('bind::zones::type')}"
dynamic: true
masters: "%{alias('bind::zones::masters')}"
transfer_source: ''
allow_updates: []
update_policies: ''
allow_transfers: "%{alias('bind::zones::allow_transfers')}"
dnssec: false
key_directory: ''
ns_notify: true
also_notify: ''
allow_notify: ''
forwarders: ''
forward: ''
source: ''
ns_records:
- pergamon.internal.softwareheritage.org.
- ns0.euwest.azure.internal.softwareheritage.org.
bind::resource_records:
archive/CNAME:
type: CNAME
record: archive.internal.softwareheritage.org
data: moma.internal.softwareheritage.org.
db/CNAME:
type: CNAME
record: db.internal.softwareheritage.org
data: prado.internal.softwareheritage.org.
debian/CNAME:
type: CNAME
record: debian.internal.softwareheritage.org
data: pergamon.internal.softwareheritage.org.
backup/CNAME:
type: CNAME
record: backup.internal.softwareheritage.org
data: banco.internal.softwareheritage.org.
banco/A:
record: banco.internal.softwareheritage.org
data: 192.168.100.18
beaubourg/A:
record: beaubourg.internal.softwareheritage.org
data: 192.168.100.32
icinga/CNAME:
type: CNAME
record: icinga.internal.softwareheritage.org
data: pergamon.internal.softwareheritage.org.
faitout/CNAME:
type: CNAME
record: faitout.internal.softwareheritage.org
data: prado.internal.softwareheritage.org.
logstash/CNAME:
type: CNAME
record: logstash.internal.softwareheritage.org
data: logstash0.internal.softwareheritage.org.
logstash0/A:
record: logstash0.internal.softwareheritage.org
data: 192.168.100.19
munin/CNAME:
type: CNAME
record: munin.internal.softwareheritage.org
data: munin0.internal.softwareheritage.org.
munin0/A:
record: munin0.internal.softwareheritage.org
data: 192.168.100.20
kibana/CNAME:
type: CNAME
record: kibana.internal.softwareheritage.org
data: banco.internal.softwareheritage.org.
kibana0/A:
record: kibana0.internal.softwareheritage.org
data: 192.168.100.50
rabbitmq/CNAME:
type: CNAME
record: rabbitmq.internal.softwareheritage.org
data: saatchi.internal.softwareheritage.org.
esnode1/A:
record: esnode1.internal.softwareheritage.org
data: 192.168.100.61
esnode2/A:
record: esnode2.internal.softwareheritage.org
data: 192.168.100.62
esnode3/A:
record: esnode3.internal.softwareheritage.org
data: 192.168.100.63
# VPN hosts
zack/A:
record: zack.internal.softwareheritage.org
data: 192.168.101.6
olasd/A:
record: olasd.internal.softwareheritage.org
data: 192.168.101.10
ardumont/A:
record: ardumont.internal.softwareheritage.org
data: 192.168.101.14
ardumont-desktop/A:
record: ardumont-desktop.internal.softwareheritage.org
data: 192.168.101.158
rdicosmo/A:
record: rdicosmo.internal.softwareheritage.org
data: 192.168.101.38
petitpalais/A:
record: petitpalais.internal.softwareheritage.org
data: 192.168.101.154
grand-palais/A:
record: grand-palais.internal.softwareheritage.org
data: 192.168.101.62
grandpalais/CNAME:
type: CNAME
record: grandpalais.internal.softwareheritage.org
data: grand-palais.internal.softwareheritage.org.
giverny/A:
type: A
record: giverny.internal.softwareheritage.org
data: 192.168.101.118
orangeriedev/A:
type: A
record: orangeriedev.internal.softwareheritage.org
data: 192.168.101.130
orangerie/A:
type: A
record: orangerie.internal.softwareheritage.org
data: 192.168.101.142
ddouard-desktop/A:
record: ddouard-desktop.internal.softwareheritage.org
data: 192.168.101.162
bind::resource_records::default_data:
type: A
bind::clients:
- 192.168.100.0/24
- 192.168.101.0/24
- 192.168.200.0/21
- 127.0.0.0/8
- '::1/128'
bind::autogenerate:
- 192.168.100.0/24
- 192.168.200.0/21
dar::backup::storage: /srv/backups
dar::backup::num_backups: 1
dar::backup::base: /
dar::backup::select: [] # empty list = full backup
dar::backup::exclude:
- dev
- proc
- run
- srv/backups
- srv/elasticsearch
- srv/remote-backups
- srv/softwareheritage/objects
- srv/softwareheritage/postgres
- srv/softwareheritage/scratch
- srv/softwareheritage/scratch.2TB
- srv/storage
- sys
- tmp
- var/cache
- var/lib/mysql
- var/log/journal
- var/run
- var/tmp
dar::backup::options:
- -zbzip2
dar::cron:
hour: 0
minute: fqdn_rand
dar_server::backup::storage: /srv/remote-backups
dar_server::cron:
hour: '0-4'
minute: '*/10'
phabricator::basepath: /srv/phabricator
phabricator::user: phabricator
phabricator::vcs_user: git
phabricator::notification::client_host: 127.0.0.1
phabricator::notification::client_port: 22280
phabricator::notification::listen: "%{hiera('phabricator::notification::client_host')}:%{hiera('phabricator::notification::client_port')}"
phabricator::mysql::database_prefix: phabricator
phabricator::mysql::username: phabricator
phabricator::mysql::conf::max_allowed_packet: 33554432
phabricator::mysql::conf::sql_mode: STRICT_ALL_TABLES
phabricator::mysql::conf::ft_stopword_file: "%{hiera('phabricator::basepath')}/phabricator/resources/sql/stopwords.txt"
phabricator::mysql::conf::ft_min_word_len: 3
phabricator::mysql::conf::ft_boolean_syntax: "' |-><()~*:\"\"&^'"
phabricator::mysql::conf::innodb_buffer_pool_size: 4G
phabricator::mysql::conf::innodb_file_per_table: TRUE
phabricator::mysql::conf::innodb_flush_method: O_DIRECT
phabricator::mysql::conf::innodb_log_file_size: 1G
phabricator::php::fpm_listen: 127.0.0.1:9001
phabricator::php::max_file_size: 128M
phabricator::php::opcache_validate_timestamps: 0
phabricator::vhost::name: forge.softwareheritage.org
phabricator::vhost::docroot: "%{hiera('phabricator::basepath')}/phabricator/webroot"
phabricator::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
phabricator::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
phabricator::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
phabricator::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
mediawiki::php::fpm_listen: 127.0.0.1:9002
mediawiki::vhosts:
intranet.softwareheritage.org:
swh_logo: /images/9/99/Swh-intranet-logo.png
mysql:
username: mw_intranet
dbname: mediawiki_intranet
aliases: []
site_name: Software Heritage Intranet
wiki.softwareheritage.org:
swh_logo: /images/b/b2/Swh-logo.png
mysql:
username: mw_public
dbname: mediawiki_public
aliases: []
site_name: Software Heritage Wiki
mediawiki::vhost::docroot: /var/lib/mediawiki
mediawiki::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
mediawiki::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
mediawiki::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
mediawiki::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
annex::basepath: /srv/softwareheritage/annex
annex::vhost::name: annex.softwareheritage.org
annex::vhost::docroot: "%{hiera('annex::basepath')}/webroot"
annex::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
annex::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
annex::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
annex::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
docs::basepath: /srv/softwareheritage/docs
docs::vhost::name: docs.softwareheritage.org
docs::vhost::docroot: "%{hiera('docs::basepath')}/webroot"
docs::vhost::docroot_owner: "jenkins-push-docs"
docs::vhost::docroot_group: "www-data"
docs::vhost::docroot_mode: "2755"
docs::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
docs::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
docs::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
docs::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
ssh::port: 22
ssh::permitrootlogin: without-password
swh::base_directory: /srv/softwareheritage
swh::conf_directory: /etc/softwareheritage
swh::log_directory: /var/log/softwareheritage
swh::global_conf::file: "%{hiera('swh::conf_directory')}/global.ini"
swh::global_conf::contents: |
# Managed by puppet (class profile::swh) - modifications will be overwritten
[main]
log_db =
swh::apt_config::swh_repository::hostname: debian.softwareheritage.org
swh::apt_config::swh_repository: "https://%{hiera('swh::apt_config::swh_repository::hostname')}/"
swh::apt_config::enable_non_free: false
debian_repository::basepath: "%{hiera('swh::base_directory')}/repository"
debian_repository::vhost::name: "%{hiera('swh::apt_config::swh_repository::hostname')}"
debian_repository::vhost::aliases:
- debian.internal.softwareheritage.org
debian_repository::vhost::docroot: "%{hiera('debian_repository::basepath')}"
debian_repository::vhost::docroot_owner: root
debian_repository::vhost::docroot_group: swhdev
debian_repository::vhost::docroot_mode: "02775"
debian_repository::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
debian_repository::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
debian_repository::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
debian_repository::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
swh::apt_config::debian_mirror::hostname: deb.debian.org
swh::apt_config::debian_mirror: "http://%{hiera('swh::apt_config::debian_mirror::hostname')}/debian/"
swh::apt_config::debian_security_mirror::hostname: "%{hiera('swh::apt_config::debian_mirror::hostname')}"
swh::apt_config::debian_security_mirror: "http://%{hiera('swh::apt_config::debian_mirror::hostname')}/debian-security/"
swh::apt_config::azure_repository::hostname: debian-archive.trafficmanager.net
swh::apt_config::azure_repository: "http://%{hiera('swh::apt_config::azure_repository::hostname')}/debian-azure/"
swh::apt_config::unattended_upgrades: true
swh::apt_config::unattended_upgraes::origins:
- "o=Debian,n=%{::lsbdistcodename}" # main Debian archive
- "o=Debian,n=%{::lsbdistcodename}-updates" # stable-updates (ex-volatile)
- "o=Debian,n=%{::lsbdistcodename},l=Debian-Security" # security updates
- "o=debian icinga-%{::lsbdistcodename},n=icinga-%{::lsbdistcodename}" # Icinga2 repository
- "o=Debian Azure,n=%{::lsbdistcodename}" # Debian Azure
- "o=Proxmox,n=%{::lsbdistcodename}" # Proxmox repository
- "o=packages.sury.org" # PHP backports (tate)
swh::remote_service::storage::port: 5002
swh::remote_service::objstorage::port: 5003
swh::remote_service::webapp::port: 5004
swh::remote_service::vault::port: 5005
swh::remote_service::deposit::port: 5006
swh::remote_service::indexer::port: 5007
swh::remote_service::scheduler::port: 5008
swh::remote_service::objstorage::config::azure: &swh_objstorage_config_azure
cls: azure-prefixed
args:
accounts:
"0":
account_name: 0euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::0euwestswh')}"
container_name: contents
"1":
account_name: 1euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::1euwestswh')}"
container_name: contents
"2":
account_name: 2euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::2euwestswh')}"
container_name: contents
"3":
account_name: 3euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::3euwestswh')}"
container_name: contents
"4":
account_name: 4euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::4euwestswh')}"
container_name: contents
"5":
account_name: 5euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::5euwestswh')}"
container_name: contents
"6":
account_name: 6euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::6euwestswh')}"
container_name: contents
"7":
account_name: 7euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::7euwestswh')}"
container_name: contents
"8":
account_name: 8euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::8euwestswh')}"
container_name: contents
"9":
account_name: 9euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::9euwestswh')}"
container_name: contents
"a":
account_name: aeuwestswh
api_secret_key: "%{hiera('swh::azure::credentials::aeuwestswh')}"
container_name: contents
"b":
account_name: beuwestswh
api_secret_key: "%{hiera('swh::azure::credentials::beuwestswh')}"
container_name: contents
"c":
account_name: ceuwestswh
api_secret_key: "%{hiera('swh::azure::credentials::ceuwestswh')}"
container_name: contents
"d":
account_name: deuwestswh
api_secret_key: "%{hiera('swh::azure::credentials::deuwestswh')}"
container_name: contents
"e":
account_name: eeuwestswh
api_secret_key: "%{hiera('swh::azure::credentials::eeuwestswh')}"
container_name: contents
"f":
account_name: feuwestswh
api_secret_key: "%{hiera('swh::azure::credentials::feuwestswh')}"
container_name: contents
swh::remote_service::objstorage::config::azure::readonly:
cls: filtered
args:
storage_conf: "%{alias('swh::remote_service::objstorage::config::azure')}"
filters_conf:
- type: readonly
swh::remote_service::objstorage::config::uffizi: &swh_objstorage_config_uffizi
cls: remote
args:
url: "http://uffizi.internal.softwareheritage.org:%{hiera('swh::remote_service::objstorage::port')}/"
swh::remote_service::objstorage::config::uffizi::readonly:
cls: filtered
args:
storage_conf: "%{alias('swh::remote_service::objstorage::config::uffizi')}"
filters_conf:
- type: readonly
swh::remote_service::objstorage::config::banco: &swh_objstorage_config_banco
cls: remote
args:
url: "http://banco.internal.softwareheritage.org:%{hiera('swh::remote_service::objstorage::port')}/"
swh::remote_service::objstorage::config::banco::readonly:
cls: filtered
args:
storage_conf: "%{alias('swh::remote_service::objstorage::config::banco')}"
filters_conf:
- type: readonly
swh::remote_service::objstorage::config::azure_readonly_with_fallback:
cls: multiplexer
args:
objstorages:
- "%{alias('swh::remote_service::objstorage::config::azure::readonly')}"
- "%{alias('swh::remote_service::objstorage::config::banco::readonly')}"
- "%{alias('swh::remote_service::objstorage::config::uffizi::readonly')}"
swh::remote_service::objstorage::config::localhost:
cls: remote
args:
url: "http://127.0.0.1:%{hiera('swh::remote_service::objstorage::port')}/"
swh::remote_service::objstorage::config: "%{alias('swh::remote_service::objstorage::config::uffizi')}"
swh::remote_service::objstorage::config_as_dict:
banco: "%{alias('swh::remote_service::objstorage::config::banco')}"
uffizi: "%{alias('swh::remote_service::objstorage::config::uffizi')}"
azure: "%{alias('swh::remote_service::objstorage::config::azure')}"
swh::remote_service::storage::config::uffizi:
cls: remote
args:
url: "http://uffizi.internal.softwareheritage.org:%{hiera('swh::remote_service::storage::port')}/"
swh::remote_service::storage::config::azure:
cls: remote
args:
url: "http://storage0.euwest.azure.internal.softwareheritage.org:%{hiera('swh::remote_service::storage::port')}/"
swh::remote_service::storage::config::localhost:
cls: remote
args:
url: "http://localhost:%{hiera('swh::remote_service::storage::port')}/"
swh::remote_service::storage::config: "%{alias('swh::remote_service::storage::config::uffizi')}"
swh::indexer::storage::config::uffizi: &swh_indexer_storage_config_uffizi
cls: remote
args:
url: "http://uffizi.internal.softwareheritage.org:%{hiera('swh::remote_service::indexer::port')}/"
swh::indexer::storage::config::azure:
cls: remote
args:
url: "http://storage0.euwest.azure.internal.softwareheritage.org:%{hiera('swh::remote_service::indexer::port')}/"
swh::remote_service::scheduler::config::saatchi: &swh_scheduler_remote_config_saatchi
cls: remote
args:
url: "http://saatchi.internal.softwareheritage.org:%{hiera('swh::remote_service::scheduler::port')}/"
swh::deploy::directory: "%{hiera('swh::conf_directory')}/deploy"
swh::deploy::group: swhdeploy
swh::deploy::public_key: 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWrJX/uUss/EYZaTp2EIsZgg3ZSH8JcNZV5gBdNZ7EHcQcqxYUCqmwv9Ss3xT8n9kIrH6iz/vquqf84XR+keoZK3bsp50tMOY8LJWpcl/JK2XD6ovoJrHPu+iAroLkE59RdTa1Vz+jF67Q2UuG9f0nKwL4rnkeWTyuK/zAbyHyYKFQntkkwMr5/YTU8sjl/4aNF/2Ww8hitdi2GORlCjav2bB0wyPBA2e8sMt8Hp9O4TIWg/RD6vPX+ZvuFaB/Lw/Hv21622QGTHoZiO92/8/W9/t24il6SU4z96ZGfXqdUZkpPYKBGwyIkZkS4dN6jb4CcRlyXTObphyu3dAlABRt swhworker@worker01'
swh::deploy::storage::conf_directory: "%{hiera('swh::conf_directory')}/storage"
swh::deploy::storage::conf_file: "%{hiera('swh::deploy::storage::conf_directory')}/storage.yml"
swh::deploy::storage::user: swhstorage
swh::deploy::storage::group: swhstorage
swh::deploy::storage::db::host: db
swh::deploy::storage::db::port: 5432
swh::deploy::storage::db::user: swhstorage
swh::deploy::storage::db::dbname: softwareheritage
swh::deploy::storage::directory: "%{hiera('swh::base_directory')}/objects"
swh::deploy::storage::backend::listen::host: 127.0.0.1
swh::deploy::storage::backend::listen::port: "%{alias('swh::remote_service::storage::port')}"
swh::deploy::storage::backend::workers: 4
swh::deploy::storage::backend::reload_mercy: 3600
swh::deploy::storage::backend::http_keepalive: 5
swh::deploy::storage::backend::http_timeout: 3600
swh::deploy::storage::backend::max_requests: 10000
swh::deploy::storage::backend::max_requests_jitter: 1000
swh::deploy::storage::backend::server_names:
- "%{::swh_hostname.internal_fqdn}"
- "%{::hostname}"
- 127.0.0.1
- localhost
- "::1"
swh::deploy::storage::config:
storage:
cls: local
args:
db: "host=%{hiera('swh::deploy::storage::db::host')} port=%{hiera('swh::deploy::storage::db::port')} user=%{hiera('swh::deploy::storage::db::user')} dbname=%{hiera('swh::deploy::storage::db::dbname')} password=%{hiera('swh::deploy::storage::db::password')}"
objstorage: "%{alias('swh::remote_service::objstorage::config')}"
swh::deploy::indexer::storage::conf_file: "%{hiera('swh::deploy::storage::conf_directory')}/indexer.yml"
swh::deploy::indexer::storage::user: swhstorage
swh::deploy::indexer::storage::group: swhstorage
swh::deploy::indexer::storage::db::host: somerset
swh::deploy::indexer::storage::db::port: 5434
swh::deploy::indexer::storage::db::user: swhstorage
swh::deploy::indexer::storage::db::dbname: softwareheritage-indexer
swh::deploy::indexer::storage::backend::listen::host: 127.0.0.1
swh::deploy::indexer::storage::backend::listen::port: "%{alias('swh::remote_service::indexer::port')}"
swh::deploy::indexer::storage::backend::workers: 4
swh::deploy::indexer::storage::backend::reload_mercy: 3600
swh::deploy::indexer::storage::backend::http_keepalive: 5
swh::deploy::indexer::storage::backend::http_timeout: 3600
swh::deploy::indexer::storage::backend::max_requests: 10000
swh::deploy::indexer::storage::backend::max_requests_jitter: 1000
swh::deploy::indexer::storage::backend::server_names:
- "%{::swh_hostname.internal_fqdn}"
- "%{::hostname}"
- 127.0.0.1
- localhost
- "::1"
swh::deploy::indexer::storage::config:
indexer_storage: "%{alias('swh::indexer::storage::config::uffizi')}"
swh::deploy::storage_listener::conf_directory: "%{hiera('swh::conf_directory')}/storage"
swh::deploy::storage_listener::conf_file: "%{hiera('swh::deploy::storage_listener::conf_directory')}/listener.ini"
swh::deploy::storage_listener::user: swhstorage
swh::deploy::storage_listener::group: swhstorage
swh::deploy::storage_listener::database: host=db user=guest dbname=softwareheritage
swh::deploy::storage_listener::topic_prefix: swh.tmp_journal.new
swh::deploy::storage_listener::kafka_brokers:
- getty.internal.softwareheritage.org
swh::deploy::storage_listener::poll_timeout: 10
swh::deploy::vault::conf_directory: "%{hiera('swh::conf_directory')}/vault"
swh::deploy::vault::conf_file: "%{hiera('swh::deploy::vault::conf_directory')}/server.yml"
swh::deploy::vault::user: swhvault
swh::deploy::vault::group: swhvault
swh::deploy::vault::db::host: orangerie
swh::deploy::vault::db::port: 5432
swh::deploy::vault::db::user: swhvault
swh::deploy::vault::db::dbname: swhvault
swh::deploy::vault::cache: "%{hiera('swh::base_directory')}/vault_cache"
swh::deploy::vault::backend::listen::host: 127.0.0.1
swh::deploy::vault::backend::listen::port: "%{alias('swh::remote_service::vault::port')}"
swh::deploy::vault::backend::workers: 4
swh::deploy::vault::backend::reload_mercy: 3600
swh::deploy::vault::backend::http_keepalive: 5
swh::deploy::vault::backend::http_timeout: 3600
swh::deploy::vault::backend::max_requests: 10000
swh::deploy::vault::backend::max_requests_jitter: 1000
swh::deploy::vault::backend::server_names:
- "%{::swh_hostname.internal_fqdn}"
- "%{::hostname}"
- 127.0.0.1
- localhost
- "::1"
swh::deploy::vault::config:
storage: "%{alias('swh::remote_service::storage::config')}"
cache:
cls: pathslicing
args:
root: "%{hiera('swh::deploy::vault::cache')}"
slicing: "0:1/1:5"
db: "host=%{hiera('swh::deploy::vault::db::host')} port=%{hiera('swh::deploy::vault::db::port')} user=%{hiera('swh::deploy::vault::db::user')} dbname=%{hiera('swh::deploy::vault::db::dbname')} password=%{hiera('swh::deploy::vault::db::password')}"
scheduling_db: "%{hiera('swh::deploy::scheduler::database')}"
swh::deploy::journal::conf_directory: "%{hiera('swh::conf_directory')}/journal"
swh::deploy::journal_publisher::conf_file: "%{hiera('swh::deploy::journal::conf_directory')}/publisher.yml"
swh::deploy::journal_publisher::user: swhstorage
swh::deploy::journal_publisher::group: swhstorage
swh::deploy::journal_publisher::config:
brokers:
- getty.internal.softwareheritage.org
temporary_prefix: swh.tmp_journal.new
final_prefix: swh.journal.objects
consumer_id: swh.journal.publisher
publisher_id: swh.journal.publisher
object_types:
- content
- revision
- release
max_messages: 1000
storage: "%{alias('swh::remote_service::storage::config')}"
swh::deploy::journal_simple_checker_producer::conf_file: "%{hiera('swh::deploy::journal::conf_directory')}/checker.yml"
swh::deploy::journal_simple_checker_producer::user: swhstorage
swh::deploy::journal_simple_checker_producer::group: swhstorage
swh::deploy::journal_simple_checker_producer::config:
brokers:
- getty.internal.softwareheritage.org
temporary_prefix: swh.tmp_journal.new
storage_dbconn: "host=%{hiera('swh::deploy::storage::db::host')} port=%{hiera('swh::deploy::storage::db::port')} user=%{hiera('swh::deploy::storage::db::user')} dbname=%{hiera('swh::deploy::storage::db::dbname')} password=%{hiera('swh::deploy::storage::db::password')}"
object_types:
- content
- directory
- revision
- release
- origin
- origin_visit
swh::deploy::archiver_content_updater::conf_file: "%{hiera('swh::deploy::worker::swh_storage_archiver::conf_directory')}/content_updater.yml"
swh::deploy::archiver_content_updater::user: swhstorage
swh::deploy::archiver_content_updater::group: swhstorage
swh::deploy::archiver_content_updater::config:
brokers:
- getty.internal.softwareheritage.org
auto_offset_reset: earliest
topic_prefix: swh.journal.objects
consumer_id: swh.journal.archiver.content.updater
object_types:
- content
archiver_storage:
cls: db
args:
dbconn: "host=%{hiera('swh::deploy::worker::swh_storage_archiver::db::host')} user=%{hiera('swh::deploy::worker::swh_storage_archiver::db::user')} dbname=%{hiera('swh::deploy::worker::swh_storage_archiver::db::dbname')} password=%{hiera('swh::deploy::worker::swh_storage_archiver::db::password')}"
sources_present:
- uffizi
swh::deploy::objstorage::conf_directory: "%{hiera('swh::conf_directory')}/objstorage"
swh::deploy::objstorage::conf_file: "%{hiera('swh::deploy::objstorage::conf_directory')}/server.yml"
swh::deploy::objstorage::user: "%{hiera('swh::deploy::storage::user')}"
swh::deploy::objstorage::group: "%{hiera('swh::deploy::storage::group')}"
swh::deploy::objstorage::directory: "%{hiera('swh::deploy::storage::directory')}"
swh::deploy::objstorage::slicing: 0:2/2:4/4:6
swh::deploy::objstorage::config:
cls: pathslicing
args:
root: "%{hiera('swh::deploy::objstorage::directory')}"
slicing: "%{hiera('swh::deploy::objstorage::slicing')}"
max_client_size: 1073741824 # 1 GiB
swh::deploy::objstorage::backend::listen::host: 127.0.0.1
swh::deploy::objstorage::backend::listen::port: "%{alias('swh::remote_service::objstorage::port')}"
swh::deploy::objstorage::backend::workers: 4
swh::deploy::objstorage::backend::reload_mercy: 3600
swh::deploy::objstorage::backend::http_workers: 1
swh::deploy::objstorage::backend::http_keepalive: 5
swh::deploy::objstorage::backend::http_timeout: 3600
swh::deploy::objstorage::backend::max_requests: 0
swh::deploy::objstorage::backend::max_requests_jitter: 0
swh::deploy::objstorage::backend::server_names:
- "%{::swh_hostname.internal_fqdn}"
- "%{::hostname}"
- 127.0.0.1
- localhost
- "::1"
swh::deploy::deposit::vhost::name: deposit.softwareheritage.org
swh::deploy::deposit::vhost::aliases: []
swh::deploy::deposit::vhost::docroot: "/var/www/%{hiera('swh::deploy::deposit::vhost::name')}"
swh::deploy::deposit::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
swh::deploy::deposit::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
swh::deploy::deposit::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
swh::deploy::deposit::locked_endpoints:
- /1/private/[^/]+/[^/]+/[^/]+
- /1/private/deposits/
swh::deploy::deposit::conf_directory: "%{hiera('swh::conf_directory')}/deposit"
swh::deploy::deposit::swh_conf_file: "%{hiera('swh::deploy::deposit::conf_directory')}/server.yml"
swh::deploy::deposit::settings_private_data_file: "%{hiera('swh::deploy::deposit::conf_directory')}/private.yml"
swh::deploy::deposit::user: swhdeposit
swh::deploy::deposit::group: swhdeposit
swh::deploy::deposit::media_root_directory: /srv/storage/space/swh-deposit/uploads/
# test configuration
swh::deploy::deposit::config:
max_upload_size: 209715200
tool:
name: 'swh-deposit'
version: '0.0.1'
configuration:
sword_version: 2
scheduler: "%{alias('swh::remote_service::scheduler::config::saatchi')}"
# swh::deploy::deposit::runtime_secret_key in private data
swh::deploy::deposit::settings_private_data:
secret_key: "%{hiera('swh::deploy::deposit::runtime_secret_key')}"
db:
host: db
port: 5432
name: softwareheritage-deposit
user: swhstorage
password: "%{hiera('swh::deploy::storage::db::password')}"
media_root: "%{hiera('swh::deploy::deposit::media_root_directory')}"
swh::deploy::worker::swh_loader_deposit::swh_conf_dir: "%{hiera('swh::conf_directory')}/loader"
swh::deploy::worker::swh_loader_deposit::swh_conf_file: "%{hiera('swh::deploy::worker::swh_loader_deposit::swh_conf_dir')}/deposit.yml"
swh::deploy::worker::swh_loader_deposit::concurrency: 2
swh::deploy::worker::swh_loader_deposit::private_tmp: true
swh::deploy::worker::swh_loader_deposit::loglevel: info
swh::deploy::worker::swh_loader_deposit::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_loader_deposit::config:
storage: "%{alias('swh::remote_service::storage::config')}"
extraction_dir: /tmp/swh.loader.deposit/
swh::deploy::deposit::client::swh_conf_file: "%{hiera('swh::deploy::deposit::conf_directory')}/client.yml"
# deposit_basic_auth_swhworker_{username|password} in private_data
swh::deploy::deposit::client::settings_private_data:
url: https://deposit.softwareheritage.org
auth:
username: "%{hiera('deposit_basic_auth_swhworker_username')}"
password: "%{hiera('deposit_basic_auth_swhworker_password')}"
swh::deploy::deposit::backend::listen::host: 127.0.0.1
swh::deploy::deposit::backend::listen::port: "%{alias('swh::remote_service::deposit::port')}"
swh::deploy::deposit::backend::workers: 8
swh::deploy::deposit::backend::reload_mercy: 3600
swh::deploy::deposit::backend::http_keepalive: 5
swh::deploy::deposit::backend::http_timeout: 3600
swh::deploy::objstorage_log_checker::conf_directory: "%{hiera('swh::deploy::objstorage::conf_directory')}"
swh::deploy::objstorage_log_checker::conf_file: "%{hiera('swh::deploy::objstorage_log_checker::conf_directory')}/log_checker.yml"
swh::deploy::objstorage_log_checker::user: "%{hiera('swh::deploy::objstorage::user')}"
swh::deploy::objstorage_log_checker::group: "%{hiera('swh::deploy::objstorage::group')}"
swh::deploy::objstorage_log_checker:config:
storage:
cls: pathslicing
args:
root: "%{hiera('swh::deploy::objstorage::directory')}"
slicing: "%{hiera('swh::deploy::objstorage::slicing')}"
batch_size: 1000
log_tag: objstorage.checker.log
swh::deploy::objstorage_repair_checker::conf_directory: "%{hiera('swh::deploy::objstorage::conf_directory')}"
swh::deploy::objstorage_repair_checker::conf_file: "%{hiera('swh::deploy::objstorage_repair_checker::conf_directory')}/repair_checker.yml"
swh::deploy::objstorage_repair_checker::user: "%{hiera('swh::deploy::objstorage::user')}"
swh::deploy::objstorage_repair_checker::group: "%{hiera('swh::deploy::objstorage::group')}"
swh::deploy::objstorage_repair_checker::config:
storage:
cls: pathslicing
args:
root: "%{hiera('swh::deploy::objstorage::directory')}"
slicing: "%{hiera('swh::deploy::objstorage::slicing')}"
batch_size: 1000
log_tag: objstorage.checker.repair
backup_storages: "%{alias('swh::remote_service::objstorage::config_as_dict')}"
swh::deploy::objstorage_archive_notifier_checker::conf_directory: "%{hiera('swh::deploy::objstorage::conf_directory')}"
swh::deploy::objstorage_archive_notifier_checker::conf_file: "%{hiera('swh::deploy::objstorage_archive_notifier_checker::conf_directory')}/archive_notifier_checker.yml"
swh::deploy::objstorage_archive_notifier_checker::user: "%{hiera('swh::deploy::objstorage::user')}"
swh::deploy::objstorage_archive_notifier_checker::group: "%{hiera('swh::deploy::objstorage::group')}"
swh::deploy::objstorage_archive_notifier_checker::log_tag: objstorage.checker.archive_notifier
swh::deploy::objstorage_archive_notifier_checker::storage_name: this-must-be-overriden-on-a-host-basis
swh::deploy::objstorage_archive_notifier_checker::db::host: "%{hiera('swh::deploy::worker::swh_storage_archiver::db::host')}"
swh::deploy::objstorage_archive_notifier_checker::db::dbname: "%{hiera('swh::deploy::worker::swh_storage_archiver::db::dbname')}"
swh::deploy::objstorage_archive_notifier_checker::db::user: "%{hiera('swh::deploy::worker::swh_storage_archiver::db::user')}"
swh::deploy::objstorage_archive_notifier_checker::db::password: "%{hiera('swh::deploy::worker::swh_storage_archiver::db::password')}"
swh::deploy::objstorage_archive_notifier_checker::config:
storage:
cls: pathslicing
args:
root: "%{hiera('swh::deploy::objstorage::directory')}"
slicing: "%{hiera('swh::deploy::objstorage::slicing')}"
batch_size: 1000
log_tag: objstorage.checker.archive_notifier
storage_name: this-must-be-overriden-on-a-per-host-basis
archiver_storage:
cls: db
args:
dbconn: "host=%{hiera('swh::deploy::worker::swh_storage_archiver::db::host')} user=%{hiera('swh::deploy::worker::swh_storage_archiver::db::user')} dbname=%{hiera('swh::deploy::worker::swh_storage_archiver::db::dbname')} password=%{hiera('swh::deploy::worker::swh_storage_archiver::db::password')}"
swh::deploy::webapp::conf_directory: "%{hiera('swh::conf_directory')}/web"
swh::deploy::webapp::conf_file: "%{hiera('swh::deploy::webapp::conf_directory')}/web.yml"
swh::deploy::webapp::user: swhwebapp
swh::deploy::webapp::group: swhwebapp
swh::deploy::webapp::conf::log_dir: "%{hiera('swh::log_directory')}/webapp"
swh::deploy::webapp::backend::listen::host: 127.0.0.1
swh::deploy::webapp::backend::listen::port: "%{alias('swh::remote_service::webapp::port')}"
swh::deploy::webapp::backend::workers: 32
swh::deploy::webapp::backend::http_keepalive: 5
swh::deploy::webapp::backend::http_timeout: 3600
swh::deploy::webapp::backend::reload_mercy: 3600
swh::deploy::webapp::vhost::docroot: "/var/www/%{hiera('swh::deploy::webapp::vhost::name')}"
swh::deploy::webapp::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
swh::deploy::webapp::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
swh::deploy::webapp::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
swh::deploy::webapp::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
swh::deploy::webapp::config::allowed_hosts:
- archive.softwareheritage.org
swh::deploy::webapp::production_db_dir: /var/lib/swh
swh::deploy::webapp::production_db: "%{hiera('swh::deploy::webapp::production_db_dir')}/web.sqlite3"
swh::deploy::webapp::indexer_storage: "%{alias('swh::indexer::storage::config::uffizi')}"
# in private data:
# swh::deploy::webapp::config::grecaptcha::private_key
# deposit_basic_auth_swhworker_username
# deposit_basic_auth_swhworker_password
swh::deploy::webapp::config:
storage:
cls: remote
args:
url: "http://127.0.0.1:%{hiera('swh::remote_service::storage::port')}/"
vault: "http://orangerie.internal.softwareheritage.org:%{hiera('swh::remote_service::vault::port')}/"
indexer_storage: "%{alias('swh::deploy::webapp::indexer_storage')}"
log_dir: "%{hiera('swh::deploy::webapp::conf::log_dir')}"
secret_key: "%{hiera('swh::deploy::webapp::conf::secret_key')}"
content_display_max_size: 1048576
throttling:
cache_uri: "%{hiera('memcached::server::bind')}:%{hiera('memcached::server::port')}"
scopes:
swh_api:
limiter_rate:
default: 120/h
exempted_networks:
- 127.0.0.0/8
- 192.168.100.0/23
- 128.93.193.29
swh_vault_cooking:
limiter_rate:
default: 120/h
GET: 60/m
exempted_networks:
- 127.0.0.0/8
- 192.168.100.0/23
- 128.93.193.29
swh_save_origin:
limiter_rate:
default: 120/h
POST: 10/h
exempted_networks:
- 127.0.0.0/8
- 192.168.100.0/23
- 128.93.193.29
allowed_hosts: "%{alias('swh::deploy::webapp::config::allowed_hosts')}"
scheduler:
cls: remote
args:
url: "http://saatchi.internal.softwareheritage.org:%{hiera('swh::remote_service::scheduler::port')}/"
grecaptcha:
validation_url: https://www.google.com/recaptcha/api/siteverify
site_key: 6Le0l2wUAAAAAHgtL_aJmIfnow8pFB62sAoG8B7m
private_key: "%{hiera('swh::deploy::webapp::config::grecaptcha::private_key')}"
production_db: "%{hiera('swh::deploy::webapp::production_db')}"
deposit:
private_api_url: https://deposit.softwareheritage.org/1/private/
private_api_user: "%{hiera('deposit_basic_auth_swhworker_username')}"
private_api_password: "%{hiera('deposit_basic_auth_swhworker_password')}"
swh::deploy::webapp::locked_endpoints:
- /api/1/content/[^/]+/symbol/
- /api/1/entity/
- /api/1/provenance/
swh::deploy::scheduler::conf_file: "%{hiera('swh::conf_directory')}/scheduler.ini"
swh::deploy::scheduler::user: swhscheduler
swh::deploy::scheduler::group: swhscheduler
swh::deploy::scheduler::db::host: db
swh::deploy::scheduler::db::dbname: softwareheritage-scheduler
swh::deploy::scheduler::db::user: swhscheduler
# swh::deploy::scheduler::db::password in private data
swh::deploy::scheduler::database: "host=%{hiera('swh::deploy::scheduler::db::host')} dbname=%{hiera('swh::deploy::scheduler::db::dbname')} user=%{hiera('swh::deploy::scheduler::db::user')} password=%{hiera('swh::deploy::scheduler::db::password')}"
# swh::deploy::scheduler::task_broker::password in private data
swh::deploy::scheduler::task_broker: "amqp://swhproducer:%{hiera('swh::deploy::scheduler::task_broker::password')}@rabbitmq:5672//"
swh::deploy::scheduler::task_packages:
- python3-swh.lister
- python3-swh.loader.debian
- python3-swh.loader.dir
- python3-swh.loader.git
- python3-swh.loader.mercurial
- python3-swh.loader.pypi
- python3-swh.loader.svn
- python3-swh.loader.tar
- python3-swh.deposit.loader
- python3-swh.indexer
- python3-swh.vault
swh::deploy::scheduler::backported_packages:
jessie:
- python3-sqlalchemy
swh::deploy::scheduler::task_modules:
- swh.lister.debian.tasks
- swh.lister.github.tasks
- swh.lister.gitlab.tasks
- swh.lister.pypi.tasks
- swh.loader.debian.tasks
- swh.loader.dir.tasks
- swh.loader.git.tasks
- swh.loader.mercurial.tasks
- swh.loader.pypi.tasks
- swh.loader.svn.tasks
- swh.loader.tar.tasks
- swh.deposit.loader.tasks
- swh.indexer.tasks
- swh.vault.cooking_tasks
swh::deploy::scheduler::remote::conf_dir: "%{hiera('swh::conf_directory')}/backend"
swh::deploy::scheduler::remote::conf_file: "%{hiera('swh::deploy::scheduler::remote::conf_dir')}/scheduler.yml"
swh::deploy::scheduler::remote::user: swhscheduler
swh::deploy::scheduler::remote::group: swhscheduler
swh::deploy::scheduler::remote::backend::listen::host: 127.0.0.1
swh::deploy::scheduler::remote::backend::listen::port: "%{alias('swh::remote_service::scheduler::port')}"
swh::deploy::scheduler::remote::backend::workers: 16
swh::deploy::scheduler::remote::backend::reload_mercy: 3600
swh::deploy::scheduler::remote::backend::http_keepalive: 5
swh::deploy::scheduler::remote::backend::http_timeout: 3600
swh::deploy::scheduler::remote::backend::max_requests: 10000
swh::deploy::scheduler::remote::backend::max_requests_jitter: 1000
swh::deploy::scheduler::remote::backend::server_names:
- "%{::swh_hostname.internal_fqdn}"
- "%{::hostname}"
- 127.0.0.1
- localhost
- "::1"
swh::deploy::scheduler::remote::config:
scheduler: "%{alias('swh::remote_service::scheduler::config::saatchi')}"
swh::deploy::scheduler::updater::backend::conf_dir: "%{hiera('swh::conf_directory')}/backend"
swh::deploy::scheduler::updater::backend::conf_file: "%{hiera('swh::deploy::scheduler::updater::backend::conf_dir')}/scheduler-updater.yml"
swh::deploy::scheduler::updater::backend::user: swhscheduler
swh::deploy::scheduler::updater::backend::group: swhscheduler
swh::deploy::scheduler::updater::backend::db::host: db.internal.softwareheritage.org
swh::deploy::scheduler::updater::backend::db::port: 5432
swh::deploy::scheduler::updater::backend::db::dbname: softwareheritage-scheduler-updater
swh::deploy::scheduler::updater::backend::db::user: swhscheduler
swh::deploy::scheduler::updater::backend::config:
scheduling_updater_db: "host=%{hiera('swh::deploy::scheduler::updater::backend::db::host')} dbname=%{hiera('swh::deploy::scheduler::updater::backend::db::dbname')} user=%{hiera('swh::deploy::scheduler::updater::backend::db::user')} password=%{hiera('swh::deploy::scheduler::updater::backend::db::password')}"
cache_read_limit: 1000
swh::deploy::scheduler::updater::consumer::ghtorrent::conf_dir: "%{hiera('swh::conf_directory')}/backend"
swh::deploy::scheduler::updater::consumer::ghtorrent::conf_file: "%{hiera('swh::deploy::scheduler::updater::consumer::ghtorrent::conf_dir')}/ghtorrent.yml"
swh::deploy::scheduler::updater::consumer::user: swhscheduler
swh::deploy::scheduler::updater::consumer::group: swhscheduler
swh::deploy::scheduler::updater::consumer::ghtorrent::user: streamer
swh::deploy::scheduler::updater::consumer::ghtorrent::port: 2765
swh::deploy::scheduler::updater::consumer::ghtorrent::config:
conn:
url: "amqp://%{hiera('swh::deploy::scheduler::updater::consumer::ghtorrent::user')}:%{hiera('swh::deploy::scheduler::updater::consumer::ghtorrent::password')}@localhost:%{hiera('swh::deploy::scheduler::updater::consumer::ghtorrent::port')}"
exchange_name: ght-streams
routing_key: evt.*.insert
queue_name: swh_queue
debug: no
batch_cache_write: 1000
rabbitmq_prefetch_read: 1000
swh::deploy::scheduler::updater::writer::conf_dir: "%{hiera('swh::conf_directory')}/backend"
swh::deploy::scheduler::updater::writer::conf_file: "%{hiera('swh::deploy::scheduler::updater::writer::conf_dir')}/scheduler-updater-writer.yml"
swh::deploy::scheduler::updater::writer::user: swhscheduler
swh::deploy::scheduler::updater::writer::group: swhscheduler
# systemd-analyze calendar "*-*-* *:00:00"
swh::deploy::scheduler::updater::writer::timer_period: "00/4:00"
swh::deploy::scheduler::updater::writer::config:
scheduler: "%{alias('swh::remote_service::scheduler::config::saatchi')}"
scheduler_updater:
scheduling_updater_db: "host=%{hiera('swh::deploy::scheduler::updater::backend::db::host')} dbname=%{hiera('swh::deploy::scheduler::updater::backend::db::dbname')} user=%{hiera('swh::deploy::scheduler::updater::backend::db::user')} password=%{hiera('swh::deploy::scheduler::updater::backend::db::password')}"
cache_read_limit: 1000
pause: 10
verbose: no
swh::deploy::scheduler::archive::conf_dir: "%{hiera('swh::conf_directory')}/backend"
swh::deploy::scheduler::archive::conf_file: "%{hiera('swh::deploy::scheduler::archive::conf_dir')}/elastic.yml"
swh::deploy::scheduler::archive::user: "%{hiera('swh::deploy::scheduler::user')}"
swh::deploy::scheduler::archive::config:
storage_nodes:
- host: esnode2.internal.softwareheritage.org
port: 9200
- host: esnode3.internal.softwareheritage.org
port: 9200
- host: esnode1.internal.softwareheritage.org
port: 9200
client_options:
sniff_on_start: false
sniff_on_connection_fail: True
http_compress: false
swh::deploy::loader_debian::db::host: db.internal.softwareheritage.org
swh::deploy::loader_debian::db::port: 5432
swh::deploy::loader_debian::db::user: lister-debian
# in private data: swh::deploy::loader_debian::db::password
swh::deploy::loader_debian::db::dbname: lister-debian
# swh::deploy::worker::task_broker::password in private data
swh::deploy::worker::task_broker: "amqp://swhconsumer:%{hiera('swh::deploy::worker::task_broker::password')}@rabbitmq:5672//"
swh::deploy::worker::instances:
- swh_loader_debian
- swh_loader_git
- swh_lister_debian
- swh_lister_github
swh::deploy::worker::swh_loader_git::concurrency: 2
swh::deploy::worker::swh_loader_git::loglevel: info
swh::deploy::worker::swh_loader_git::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_loader_git::config:
storage: "%{alias('swh::remote_service::storage::config')}"
save_data: true
save_data_path: /srv/storage/space/data/sharded_packfiles
directory_packet_size: 100
swh::deploy::worker::swh_loader_debian::concurrency: 1
swh::deploy::worker::swh_loader_debian::loglevel: info
swh::deploy::worker::swh_loader_debian::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_loader_debian::config:
storage: "%{alias('swh::remote_service::storage::config')}"
directory_packet_size: 100
lister_db_url: "postgresql://%{hiera('swh::deploy::loader_debian::db::user')}:%{hiera('swh::deploy::loader_debian::db::password')}@%{hiera('swh::deploy::loader_debian::db::host')}:%{hiera('swh::deploy::loader_debian::db::port')}/%{hiera('swh::deploy::loader_debian::db::dbname')}"
swh::deploy::worker::swh_lister_debian::concurrency: 1
swh::deploy::worker::swh_lister_debian::loglevel: info
swh::deploy::worker::swh_lister_debian::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_lister_debian::config:
storage: "%{alias('swh::remote_service::storage::config')}"
scheduler: "%{alias('swh::remote_service::scheduler::config::saatchi')}"
lister_db_url: "postgresql://%{hiera('swh::deploy::loader_debian::db::user')}:%{hiera('swh::deploy::loader_debian::db::password')}@%{hiera('swh::deploy::loader_debian::db::host')}:%{hiera('swh::deploy::loader_debian::db::port')}/%{hiera('swh::deploy::loader_debian::db::dbname')}"
swh::deploy::worker::swh_loader_git_disk::concurrency: 2
swh::deploy::worker::swh_loader_git_disk::loglevel: info
swh::deploy::worker::swh_loader_git_disk::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_loader_git_disk::config:
storage: "%{alias('swh::remote_service::storage::config')}"
directory_packet_size: 100
swh::deploy::worker::swh_loader_mercurial::concurrency: 1
swh::deploy::worker::swh_loader_mercurial::private_tmp: true
swh::deploy::worker::swh_loader_mercurial::loglevel: info
swh::deploy::worker::swh_loader_mercurial::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_loader_mercurial::config:
storage: "%{alias('swh::remote_service::storage::config')}"
reduce_effort: False
swh::deploy::worker::swh_loader_pypi::concurrency: 1
swh::deploy::worker::swh_loader_pypi::private_tmp: true
swh::deploy::worker::swh_loader_pypi::loglevel: info
swh::deploy::worker::swh_loader_pypi::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_loader_pypi::config:
storage: "%{alias('swh::remote_service::storage::config')}"
swh::deploy::worker::swh_loader_svn::concurrency: 1
swh::deploy::worker::swh_loader_svn::private_tmp: true
swh::deploy::worker::swh_loader_svn::limit_no_file: 8192
swh::deploy::worker::swh_loader_svn::loglevel: info
# Contains a password: in private data
swh::deploy::worker::swh_loader_svn::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_loader_svn::config:
storage: "%{alias('swh::remote_service::storage::config')}"
swh::deploy::worker::swh_lister_github::concurrency: 1
swh::deploy::worker::swh_lister_github::loglevel: warning
# Contains a password: in private data
swh::deploy::worker::swh_lister_github::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_lister_github::db::host: db
swh::deploy::worker::swh_lister_github::db::dbname: lister-github
swh::deploy::worker::swh_lister_github::db::user: lister-github
#swh::deploy::worker::swh_lister_github::db::password in private data
swh::deploy::worker::swh_lister_github::config:
storage: "%{alias('swh::remote_service::storage::config')}"
scheduler: "%{alias('swh::remote_service::scheduler::config::saatchi')}"
lister_db_url: "postgresql://%{hiera('swh::deploy::worker::swh_lister_github::db::user')}:%{hiera('swh::deploy::worker::swh_lister_github::db::password')}@%{hiera('swh::deploy::worker::swh_lister_github::db::host')}/%{hiera('swh::deploy::worker::swh_lister_github::db::dbname')}"
# credentials in private data
swh::deploy::worker::swh_lister_gitlab::concurrency: 1
swh::deploy::worker::swh_lister_gitlab::loglevel: warning
# Contains a password: in private data
swh::deploy::worker::swh_lister_gitlab::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_lister_gitlab::db::host: db
swh::deploy::worker::swh_lister_gitlab::db::dbname: lister-gitlab
swh::deploy::worker::swh_lister_gitlab::db::user: lister-gitlab
#swh::deploy::worker::swh_lister_gitlab::db::password in private data
swh::deploy::worker::swh_lister_gitlab::config:
storage: "%{alias('swh::remote_service::storage::config')}"
scheduler: "%{alias('swh::remote_service::scheduler::config::saatchi')}"
lister_db_url: "postgresql://%{hiera('swh::deploy::worker::swh_lister_gitlab::db::user')}:%{hiera('swh::deploy::worker::swh_lister_gitlab::db::password')}@%{hiera('swh::deploy::worker::swh_lister_gitlab::db::host')}/%{hiera('swh::deploy::worker::swh_lister_gitlab::db::dbname')}"
# credentials in private data
swh::deploy::worker::swh_lister_pypi::concurrency: 1
swh::deploy::worker::swh_lister_pypi::loglevel: warning
# Contains a password: in private data
swh::deploy::worker::swh_lister_pypi::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_lister_pypi::db::host: db
swh::deploy::worker::swh_lister_pypi::db::dbname: lister-pypi
swh::deploy::worker::swh_lister_pypi::db::user: lister-pypi
#swh::deploy::worker::swh_lister_pypi::db::password in private data
swh::deploy::worker::swh_lister_pypi::config:
storage: "%{alias('swh::remote_service::storage::config')}"
scheduler: "%{alias('swh::remote_service::scheduler::config::saatchi')}"
lister_db_url: "postgresql://%{hiera('swh::deploy::worker::swh_lister_pypi::db::user')}:%{hiera('swh::deploy::worker::swh_lister_pypi::db::password')}@%{hiera('swh::deploy::worker::swh_lister_pypi::db::host')}/%{hiera('swh::deploy::worker::swh_lister_pypi::db::dbname')}"
# credentials in private data
swh::deploy::worker::swh_storage_archiver::conf_directory: "%{hiera('swh::conf_directory')}/archiver"
swh::deploy::worker::swh_storage_archiver::conf_file: "%{hiera('swh::deploy::worker::swh_storage_archiver::conf_directory')}/worker.yml"
swh::deploy::worker::swh_storage_archiver::archival_max_age: 3600
swh::deploy::worker::swh_storage_archiver::max_queue_length: 100000
swh::deploy::worker::swh_storage_archiver::retention_policy: 3
swh::deploy::worker::swh_storage_archiver::batch_max_size: 5
swh::deploy::worker::swh_storage_archiver::db::host: db
swh::deploy::worker::swh_storage_archiver::db::dbname: softwareheritage-archiver
swh::deploy::worker::swh_storage_archiver::db::user: "%{hiera('swh::deploy::storage::db::user')}"
swh::deploy::worker::swh_storage_archiver::db::password: "%{hiera('swh::deploy::storage::db::password')}"
swh::deploy::worker::swh_storage_archiver::concurrency: 10
swh::deploy::worker::swh_storage_archiver::max_tasks_per_child: 500
swh::deploy::worker::swh_storage_archiver::loglevel: info
# Contains a password: in private data
swh::deploy::worker::swh_storage_archiver::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_storage_archiver::config:
archival_max_age: "%{hiera('swh::deploy::worker::swh_storage_archiver::archival_max_age')}"
retention_policy: "%{hiera('swh::deploy::worker::swh_storage_archiver::retention_policy')}"
batch_max_size: "%{hiera('swh::deploy::worker::swh_storage_archiver::batch_max_size')}"
archiver_storage:
cls: db
args:
dbconn: "host=%{hiera('swh::deploy::worker::swh_storage_archiver::db::host')} user=%{hiera('swh::deploy::worker::swh_storage_archiver::db::user')} dbname=%{hiera('swh::deploy::worker::swh_storage_archiver::db::dbname')} password=%{hiera('swh::deploy::worker::swh_storage_archiver::db::password')}"
storages:
- host: uffizi
<<: *swh_objstorage_config_uffizi
- host: banco
<<: *swh_objstorage_config_banco
- host: azure
<<: *swh_objstorage_config_azure
sources:
- uffizi
- banco
max_queue_length: "%{hiera('swh::deploy::worker::swh_storage_archiver::max_queue_length')}"
swh::deploy::worker::swh_indexer::base::concurrency: 2
swh::deploy::worker::swh_indexer::base::loglevel: info
# Contains a password: in private data
swh::deploy::worker::swh_indexer::base::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_indexer::base::config:
indexer_storage: "%{alias('swh::indexer::storage::config::uffizi')}"
storage: "%{alias('swh::remote_service::storage::config')}"
objstorage: "%{alias('swh::remote_service::objstorage::config')}"
swh::deploy::worker::swh_indexer::mimetype::config_file: "indexer/mimetype.yml"
swh::deploy::worker::swh_indexer::mimetype::concurrency: 1
swh::deploy::worker::swh_indexer::mimetype::loglevel: "%{hiera('swh::deploy::worker::swh_indexer::base::loglevel')}"
# Contains a password: in private data
swh::deploy::worker::swh_indexer::mimetype::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_indexer::mimetype::config:
scheduler: "%{alias('swh::remote_service::scheduler::config::saatchi')}"
indexer_storage: "%{alias('swh::indexer::storage::config::uffizi')}"
objstorage: "%{alias('swh::remote_service::objstorage::config')}"
storage: "%{alias('swh::remote_service::storage::config::azure')}"
swh::deploy::worker::swh_indexer::origin_intrinsic_metadata::config_file: "indexer/origin_intrinsic_metadata.yml"
swh::deploy::worker::swh_indexer::origin_intrinsic_metadata::concurrency: 1
swh::deploy::worker::swh_indexer::origin_intrinsic_metadata::loglevel: "%{hiera('swh::deploy::worker::swh_indexer::base::loglevel')}"
# Contains a password: in private data
swh::deploy::worker::swh_indexer::origin_intrinsic_metadata::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_indexer::origin_intrinsic_metadata::config:
scheduler: "%{alias('swh::remote_service::scheduler::config::saatchi')}"
indexer_storage: "%{alias('swh::indexer::storage::config::uffizi')}"
objstorage: "%{alias('swh::remote_service::objstorage::config')}"
storage: "%{alias('swh::remote_service::storage::config::azure')}"
swh::deploy::worker::swh_indexer::origin_head::config_file: "indexer/origin_head.yml"
swh::deploy::worker::swh_indexer::origin_head::concurrency: 1
swh::deploy::worker::swh_indexer::origin_head::loglevel: "%{hiera('swh::deploy::worker::swh_indexer::base::loglevel')}"
# Contains a password: in private data
swh::deploy::worker::swh_indexer::origin_head::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_indexer::origin_head::config:
scheduler: "%{alias('swh::remote_service::scheduler::config::saatchi')}"
indexer_storage: "%{alias('swh::indexer::storage::config::uffizi')}"
storage: "%{alias('swh::remote_service::storage::config::azure')}"
tasks:
revision_metadata: indexer_revision_metadata
origin_intrinsic_metadata: indexer_origin_metadata
swh::deploy::worker::swh_indexer::revision_metadata::config_file: "indexer/revision_metadata.yml"
swh::deploy::worker::swh_indexer::revision_metadata::concurrency: 1
swh::deploy::worker::swh_indexer::revision_metadata::loglevel: "%{hiera('swh::deploy::worker::swh_indexer::base::loglevel')}"
# Contains a password: in private data
swh::deploy::worker::swh_indexer::revision_metadata::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_indexer::revision_metadata::config:
scheduler: "%{alias('swh::remote_service::scheduler::config::saatchi')}"
indexer_storage: "%{alias('swh::indexer::storage::config::uffizi')}"
objstorage: "%{alias('swh::remote_service::objstorage::config')}"
storage: "%{alias('swh::remote_service::storage::config::azure')}"
swh::deploy::worker::swh_indexer::rehash::concurrency: 5
swh::deploy::worker::swh_indexer::rehash::loglevel: "%{hiera('swh::deploy::worker::swh_indexer::base::loglevel')}"
# Contains a password: in private data
swh::deploy::worker::swh_indexer::rehash::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_indexer::rehash::config:
# Needs write access: explicitly configured to use uffizi
storage: "%{alias('swh::remote_service::storage::config::uffizi')}"
objstorage: "%{alias('swh::remote_service::objstorage::config')}"
compute_checksums:
- blake2s256
batch_size_retrieve_content: 10000
batch_size_update: 5000
swh::deploy::worker::swh_indexer::fossology_license::config_file: "indexer/fossology_license.yml"
swh::deploy::worker::swh_indexer::fossology_license::concurrency: 1
swh::deploy::worker::swh_indexer::fossology_license::loglevel: "%{hiera('swh::deploy::worker::swh_indexer::base::loglevel')}"
# Contains a password: in private data
swh::deploy::worker::swh_indexer::fossology_license::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_indexer::fossology_license::config:
indexer_storage: "%{alias('swh::indexer::storage::config::uffizi')}"
objstorage: "%{alias('swh::remote_service::objstorage::config')}"
storage: "%{alias('swh::remote_service::storage::config::azure')}"
workdir: /tmp/swh/indexer.fossology.license/
tools:
name: 'nomos'
version: '3.1.0rc2-31-ga2cbb8c'
configuration:
command_line: "nomossa <filepath>"
swh::deploy::worker::swh_indexer::language::concurrency: 3
swh::deploy::worker::swh_indexer::language::loglevel: "%{hiera('swh::deploy::worker::swh_indexer::base::loglevel')}"
# Contains a password: in private data
swh::deploy::worker::swh_indexer::language::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_indexer::language::config:
indexer_storage: "%{alias('swh::indexer::storage::config::uffizi')}"
objstorage: "%{alias('swh::remote_service::objstorage::config')}"
tools:
name: 'pygments'
version: '2.0.1+dfsg-1.1+deb8u1'
configuration:
type: "library"
debian-package: "python3-pygments"
max_content_size: 10240
swh::deploy::worker::swh_indexer::ctags::concurrency: 2
swh::deploy::worker::swh_indexer::ctags::loglevel: "%{hiera('swh::deploy::worker::swh_indexer::base::loglevel')}"
# Contains a password: in private data
swh::deploy::worker::swh_indexer::ctags::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
# objstorage configuration from swh::azure_objstorage::config is merged in the manifest
swh::deploy::worker::swh_indexer::ctags::config:
indexer_storage: "%{alias('swh::indexer::storage::config::uffizi')}"
objstorage: "%{alias('swh::remote_service::objstorage::config')}"
workdir: /tmp/swh/indexer.ctags/
tools:
name: 'universal-ctags'
version: '~git7859817b'
configuration:
command_line: "ctags --fields=+lnz --sort=no --links=no --output-format=json <filepath>"
languages:
abap: ''
abnf: ''
actionscript: ''
actionscript-3: ''
ada: Ada
adl: ''
agda: ''
alloy: ''
ambienttalk: ''
antlr: ''
antlr-with-actionscript-target: ''
antlr-with-c#-target: ''
antlr-with-cpp-target: ''
antlr-with-java-target: ''
antlr-with-objectivec-target: ''
antlr-with-perl-target: ''
antlr-with-python-target: ''
antlr-with-ruby-target: ''
apacheconf: ''
apl: ''
applescript: ''
arduino: ''
aspectj: ''
aspx-cs: ''
aspx-vb: ''
asymptote: ''
autohotkey: ''
autoit: ''
awk: Awk
base-makefile: Make
bash: Sh
bash-session: Sh
batchfile: DosBatch
bbcode: ''
bc: ''
befunge: ''
blitzbasic: Basic
blitzmax: ''
bnf: ''
boo: ''
boogie: ''
brainfuck: ''
bro: ''
bugs: ''
c: C
c#: C#
c++: C++
c-objdump: asm
ca65-assembler: asm
cadl: ''
camkes: ''
cbm-basic-v2: ''
ceylon: Java
cfengine3: ''
cfstatement: ''
chaiscript: ''
chapel: ''
cheetah: ''
cirru: ''
clay: ''
clojure: Clojure
clojurescript: Clojure
cmake: Make
cobol: Cobol
cobolfree: Cobol
coffeescript: CoffeeScript
coldfusion-cfc: HTML
coldfusion-html: HTML
common-lisp: Lisp
component-pascal: Pascal
coq: ''
cpp-objdump: Asm
cpsa: ''
crmsh: Sh
croc: ''
cryptol: ''
csound-document: ''
csound-orchestra: ''
csound-score: ''
css: CSS
css+django/jinja: CSS
css+genshi-text: CSS
css+lasso: CSS
css+mako: CSS
css+mozpreproc: CSS
css+myghty: CSS
css+php: CSS
css+ruby: CSS
css+smarty: CSS
cuda: ''
cypher: ''
cython: Python
d: D
d-objdump: Asm
darcs-patch: Diff
dart: ''
debian-control-file: ''
debian-sourcelist: ''
delphi: ''
dg: ''
diff: Diff
django/jinja: Python
docker: Iniconf
dtd: ''
duel: ''
dylan: ''
dylan-session: ''
dylanlid: ''
earl-grey: ''
easytrieve: ''
ebnf: ''
ec: ''
ecl: ''
eiffel: Eiffel
elixir: ''
elixir-iex-session: ''
elm: ''
emacslisp: Lisp
embedded-ragel: ''
erb: Ruby
erlang: Erlang
erlang-erl-session: Erlang
evoque: ''
ezhil: ''
factor: ''
fancy: ''
fantom: ''
felix: ''
fish: ''
fortran: Fortran
fortranfixed: Fortran
nfoxpro: ''
fsharp: Ocaml
gap: ''
gas: ''
genshi: ''
genshi-text: ''
gettext-catalog: ''
gherkin: ''
glsl: ''
gnuplot: ''
go: Go
golo: ''
gooddata-cl: ''
gosu: ''
gosu-template: ''
groff: ''
groovy: ''
haml: ''
handlebars: ''
haskell: ''
haxe: ''
hexdump: ''
html: HTML
html+cheetah: HTML
html+django/jinja: HTML
html+evoque: HTML
html+genshi: HTML
html+handlebars: HTML
html+lasso: HTML
html+mako: HTML
html+myghty: HTML
html+php: HTML
html+smarty: HTML
html+twig: HTML
html+velocity: HTML
http: ''
hxml: ''
hy: Lisp
hybris: ''
idl: ''
idris: ''
igor: ''
inform-6: ''
inform-6-template: ''
inform-7: ''
ini: Iniconf
io: ''
ioke: ''
irc-logs: ''
isabelle: ''
j: ''
jade: ''
jags: ''
jasmin: ''
java: Java
java-server-page: Java
javascript: JavaScript
javascript+cheetah: JavaScript
javascript+django/jinja: JavaScript
javascript+genshi-text: JavaScript
javascript+lasso: JavaScript
javascript+mako: JavaScript
javascript+mozpreproc: JavaScript
javascript+myghty: JavaScript
javascript+php: JavaScript
javascript+ruby: JavaScript
javascript+smarty: JavaScript
jcl: ''
json: JSON
json-ld: JSON
julia: ''
julia-console: ''
kal: ''
kconfig: ''
koka: ''
kotlin: ''
lasso: ''
lean: ''
lesscss: CSS
lighttpd-configuration-file: Iniconf
limbo: ''
liquid: ''
literate-agda: ''
literate-cryptol: ''
literate-haskell: ''
literate-idris: ''
livescript: ''
llvm: ''
logos: ''
logtalk: ''
lsl: ''
lua: Lua
makefile: Make
mako: ''
maql: ''
mask: ''
mason: ''
mathematica: MatLab
matlab: MatLab
matlab-session: MatLab
minid: ''
modelica: ''
modula-2: ''
moinmoin/trac-wiki-markup: ''
monkey: ''
moocode: ''
moonscript: ''
mozhashpreproc: ''
mozpercentpreproc: ''
mql: ''
mscgen: ''
msdos-session: ''
mupad: ''
mxml: ''
myghty: ''
mysql: SQL
nasm: Asm
nemerle: ''
nesc: ''
newlisp: Lisp
newspeak: ''
nginx-configuration-file: ''
nimrod: ''
nit: ''
nix: ''
nsis: ''
numpy: ''
objdump: Asm
objdump-nasm: Asm
objective-c: ObjectiveC
objective-c++: Objective-C
objective-j: ''
ocaml: Ocaml
octave: ''
odin: ''
ooc: ''
opa: ''
openedge-abl: ''
pacmanconf: ''
pan: ''
parasail: ''
pawn: ''
perl: Perl
perl6: Perl6
php: PHP
pig: ''
pike: ''
pkgconfig: ''
pl/pgsql: SQL
postgresql-console-(psql): ''
postgresql-sql-dialect: SQL
postscript: ''
povray: ''
powershell: ''
powershell-session: ''
praat: ''
prolog: ''
properties: Iniconf
protocol-buffer: Protobuf
puppet: ''
pypy-log: ''
python: Python
python-3: Python
python-3.0-traceback: Python
python-console-session: Python
python-traceback: Python
qbasic: ''
qml: ''
qvto: ''
racket: LISP
ragel: ''
ragel-in-c-host: ''
ragel-in-cpp-host: ''
ragel-in-d-host: ''
ragel-in-java-host: ''
ragel-in-objective-c-host: ''
ragel-in-ruby-host: ''
raw-token-data: ''
rconsole: ''
rd: ''
rebol: ''
red: ''
redcode: ''
reg: ''
resourcebundle: ''
restructuredtext: reStructuredText
rexx: REXX
rhtml: ''
roboconf-graph: ''
roboconf-instances: ''
robotframework: ''
rpmspec: RpmSpec
rql: ''
rsl: ''
ruby: Ruby
ruby-irb-session: Sh
rust: Rust
s: ''
sass: ''
scala: Java
scalate-server-page: ''
scaml: SML
scheme: Lisp
scilab: ''
scss: ''
shen: ''
slim: ''
smali: ''
smalltalk: ''
smarty: ''
snobol: ''
sourcepawn: ''
sparql: ''
sql: SQL
sqlite3con: SQL
squidconf: ''
stan: ''
standard-ml: SML
supercollider: ''
swift: ''
swig: ''
systemverilog: SystemVerilog
tads-3: ''
tap: ''
tcl: ''
tcsh: Sh
tcsh-session: Sh
tea: ''
termcap: ''
terminfo: ''
terraform: ''
tex: Tex
text-only: ''
thrift: ''
todotxt: ''
trafficscript: ''
treetop: ''
turtle: ''
twig: ''
typescript: ''
urbiscript: ''
vala: ''
vb.net: Basic
vctreestatus: ''
velocity: ''
verilog: Verilog
vgl: ''
vhdl: VHDL
viml: Vim
x10: ''
xml: ''
xml+cheetah: ''
xml+django/jinja: ''
xml+evoque: ''
xml+lasso: ''
xml+mako: ''
xml+myghty: ''
xml+php: ''
xml+ruby: ''
xml+smarty: ''
xml+velocity: ''
xquery: ''
xslt: XSLT
xtend: ''
xul+mozpreproc: ''
yaml: ''
yaml+jinja: ''
zephir: Zephir
unknown: ''
swh::deploy::worker::swh_vault_cooker::concurrency: 20
swh::deploy::worker::swh_vault_cooker::loglevel: info
swh::deploy::worker::swh_vault_cooker::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_vault_cooker::conf_file: "%{hiera('swh::conf_directory')}/vault/cooker.yml"
swh::deploy::worker::swh_vault_cooker::config:
storage: "%{alias('swh::remote_service::storage::config')}"
vault_url: "http://orangerie:%{hiera('swh::remote_service::vault::port')}/"
desktop::printers:
MFP_C:
uri: lpd://print.paris.inria.fr/MFP_C-pro
description: Impression couleur
location: Partout
ppd: "%{hiera('desktop::printers::ppd_dir')}/MFP_Paris.ppd"
ppd_options:
ColorType: Color
MFP:
uri: lpd://print.paris.inria.fr/MFP-pro
description: Impression Noir et Blanc
location: Partout
ppd: "%{hiera('desktop::printers::ppd_dir')}/MFP_Paris.ppd"
ppd_options:
ColorType: Mono
desktop::printers::default: MFP
desktop::printers::ppd_dir: /usr/share/ppd/softwareheritage
desktop::printers::cups_usernames:
ardumont: andumont
morane: mgruenpe
olasd: ndandrim
seirl: apietri
zack: zacchiro
ssushant: ssushant
zookeeper::servers:
1: getty.internal.softwareheritage.org
zookeeper::datastore: /var/lib/zookeeper
zookeeper::client_port: 2181
zookeeper::election_port: 2888
zookeeper::leader_port: 3888
kafka::version: '1.0.1'
kafka::scala_version: '2.11'
kafka::mirror_url: https://mirrors.ircam.fr/pub/apache/
kafka::broker_config:
broker.id: "%{alias('kafka::broker_id')}"
log.dirs: /srv/kafka/logdir
kafka::zookeeper::chroot: '/kafka/softwareheritage'
kafka::brokers:
getty.internal.softwareheritage.org:
id: 1
stats_export::vhost::name: stats.export.softwareheritage.org
stats_export::vhost::docroot: "/var/www/%{hiera('stats_export::vhost::name')}"
stats_export::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
stats_export::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
stats_export::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
stats_export::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
postgresql::apt_config::pgdg::mirror: 'http://apt.postgresql.org/pub/repos/apt/'
postgresql::apt_config::pgdg::keyid: B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8
postgresql::apt_config::pgdg::key: |
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1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=s3DI
-----END PGP PUBLIC KEY BLOCK-----
postgresql::apt_config::pglogical::mirror: 'http://packages.2ndquadrant.com/pglogical/apt/'
postgresql::apt_config::pglogical::keyid: 855AF5C7B897656417FA73D65D941908AA7A6805
postgresql::apt_config::pglogical::key: |
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQENBFUQs34BCADT3W0Nnf0E0/2LGU4Afzg4dAViJqqhOLBwuWUS6Np+ZqCK6beY
E46KS/CowwBmca9stm5oJbcpz2WCNxnb6OGlgxQnYEaVl4z6bDRDJ3BdiIbcjdYM
cutJupmZbrlvfnf30AcQXc6RCZ/x/53CDuCXyrO7djkBkoolJFQbzfy0HcRnNRVp
x3LrsTkTaajDwsenRjq5NJDAnVaMvq+Jmsl0pJoIbiPNIUA2oNKptINlZWIvS7Ha
LYT6sLZxWwuUYhbrpb2EiF8Gx3D4WYf6Wm2h6GLYZkKIagfTsvN/tRPw+5SvIMAd
yVeVWbu77k0i8Om+RQ6wA1FOtZbAVfp8/YxrABEBAAG0P0JEUiBBcHQgU2lnbmlu
ZyBLZXkgZm9yIDJuZFF1YWRyYW50IDxwYWNrYWdlcnNAMm5kcXVhZHJhbnQuY29t
PokBPQQTAQoAJwIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAUCWNNnkQUJB4Ub
EQAKCRBdlBkIqnpoBR6ACACAaDLPvfknZT7+LrumSIuTM0VqJDPsJykCwWhvjoDb
k2EfLYcqMxVQKEKQtGueSN06DSlfARQmAcoNLw0J5OG6Aw+vv53NmIusvDkTVI28
TbsdwoWffpY5dcN39KovFsVsIgGROsBTsW1cL0MaeSuwMobaRGorGFKfOwH+xvMc
wjG0wzPoBP85nMulEmqXqPNjRq++NdWnutmc3uGTr8C0dViTlG5F/lYLQ7scsPDi
zBdDg+YPhehX0hG6RUtQsdYMUbzL5Bd51NgmI7gw5Xk61e3N2yDlSNMfdaY+G6tX
jP20hXMNuCRSc1ICNu3hKg/VDxVwYsSBRLJZJ/tlHTtiuQENBFUQs34BCAC8FxMX
v+UBEnLk1qcayhSsECnatkAoDDaKjuUWc7mPBhcwo6C3buFbPtHRKV88uAYy8MtY
291+zMeO+ZVD6bOVnmXvs/HD6Hn9XIq8DX4LBNu1kKycxQ8BghJCpb5qQgDaxgYI
tWMI66xdaHlPyIhyCZGuv9Dx6T4gR6PUdRLy9kVR1V603B0LHhBbYjSLb6aAmc8w
o7uJJuToN6L/FxKM2asV9L7uacmaq5JhY658LFBexhaTQuih6JYFW3DHxtW527+S
lwXEPtpDrQIvE5hJqrDQX22hF/oiS+gnIE2T22aCIr6+Cwdxys/l104qjcS5YV2T
DujsmHOsvCCL7/QFABEBAAGJASUEGAEKAA8CGwwFAljTZ5oFCQeFGxoACgkQXZQZ
CKp6aAX1+wf/dDQi/3/mv0kGg/5B8NazRIYQ01pmTqW5Czot+3iorssa6fycsLBi
Pd30EQF++26x2hFqxEpvCyBuN1YoU1XlSJJacv80Um8jzdRY10mLGrttcnNFE8TU
xeEXa1rOnoHx45rt5qY8IyOODFkhbHfyBzcxeNtFtvkqT/ZRubj0lzC3Yjvm2xOc
yfIBhvAX93diiaFkg/BKhSkCxognvJnb6KLBwPZ6f6czDvcICvuxWnaT8jfK1610
YwvZiujRAX8bedODRO+AkokOus7TLPgDx69e9i1SkFjlaaYag/FSLEDsCzKDqim8
2lBkSxP5ZrLrfAkji+bmAWtpWifTMgeP0Q==
=8MHy
-----END PGP PUBLIC KEY BLOCK-----
icinga2::apt_config::mirror: 'http://packages.icinga.com/debian'
icinga2::apt_config::keyid: F51A91A5EE001AA5D77D53C4C6E319C334410682
icinga2::apt_config::key: |
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.19 (GNU/Linux)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=icbY
-----END PGP PUBLIC KEY BLOCK-----
icinga2::role: agent
icinga2::master::zonename: master
icinga2::master::db::username: icinga2
# icinga2::master::db::password in private data
icinga2::master::db::database: icinga2
icinga2::icingaweb2::db::username: icingaweb2
# icinga2::icingaweb2::db::password in private data
icinga2::icingaweb2::db::database: icingaweb2
icinga2::icingaweb2::protected_customvars:
- "*pw*"
- "*pass*"
- community
- http_auth_pair
icinga2::icingaweb2::vhost::name: icinga.softwareheritage.org
icinga2::icingaweb2::vhost::aliases:
- icinga.internal.softwareheritage.org
icinga2::icingaweb2::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
icinga2::icingaweb2::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
icinga2::icingaweb2::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
icinga2::icingaweb2::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
icinga2::parent_zone: master
icinga2::parent_endpoints:
pergamon.softwareheritage.org:
host: 192.168.100.29
icinga2::network: "%{lookup('internal_network')}"
icinga2::features:
- checker
- mainlog
icinga2::service_configuration:
load:
default:
load_wload1: 30
load_wload5: 28
load_wload15: 26
load_cload1: 50
load_cload5: 45
load_cload15: 40
high:
load_wload1: 140
load_wload5: 120
load_wload15: 100
load_cload1: 240
load_cload5: 220
load_cload15: 200
icinga2::host::vars:
os: Linux
cores: "%{::processorcount}"
virtual_machine: "%{::is_virtual}"
distro: "%{::operatingsystem}"
disks:
'disk /':
disk_partitions: '/'
icinga2::apiusers:
root:
# password in private data
permissions:
- '*'
systemd_journal::logstash_hosts:
- 'logstash.internal.softwareheritage.org:5044'
memcached::server::bind: 127.0.0.1
memcached::server::port: 11211
memcached::server::max_memory: '5%'
mountpoints:
/srv/storage/space:
device: uffizi:/srv/storage/space
fstype: nfs
options:
- rw
- soft
- intr
- rsize=8192
- wsize=8192
- noauto
- x-systemd.automount
- x-systemd.device-timeout=10
/srv/softwareheritage/objects:
device: uffizi:/srv/softwareheritage/objects
fstype: nfs
options:
- rw
- soft
- intr
- rsize=8192
- wsize=8192
- noauto
- x-systemd.automount
- x-systemd.device-timeout=10
ceph::release: luminous
ceph::fsid: b3e34018-388e-499b-9579-d1c0d57e8c09
# needs to match the values of $::hostname on the ceph monitors
ceph::mon_initial_members:
- ceph-mon1
ceph::mon_host:
- 192.168.100.170
ceph::keys:
admin:
secret: "%{hiera('ceph::secrets::admin')}"
cap_mds: allow
cap_mgr: allow *
cap_mon: allow *
cap_osd: allow *
bootstrap-osd:
secret: "%{hiera('ceph::secrets::bootstrap_osd')}"
cap_mon: allow profile bootstrap-osd
proxmox-rbd:
secret: "%{hiera('ceph::secrets::proxmox_rbd')}"
cap_mon: profile rbd
cap_osd: profile rbd pool=rbd
swh-contents:
secret: "%{hiera('ceph::secrets::swh_contents')}"
cap_mon: allow r
cap_osd: allow r pool=swh_contents
swh-contents-rw:
secret: "%{hiera('ceph::secrets::swh_contents_rw')}"
cap_mon: allow r
cap_osd: allow rw pool=swh_contents
swh-contents-test:
secret: "%{hiera('ceph::secrets::swh_contents_test')}"
cap_mon: allow r
cap_osd: allow r pool=swh_contents_test
swh-contents-test-rw:
secret: "%{hiera('ceph::secrets::swh_contents_test_rw')}"
cap_mon: allow r
cap_osd: allow rw pool=swh_contents_test
ceph::default_client_keyring: /etc/softwareheritage/ceph-keyring
ceph::client_keyrings:
'/etc/softwareheritage/ceph-keyring':
owner: root
group: swhdev
mode: '0644'
keys:
- swh-contents
- swh-contents-test
swh::deploy::objstorage::ceph::keyring: "%{alias('ceph::default_client_keyring')}"
swh::deploy::objstorage::ceph::pool_name: swh_contents
swh::deploy::objstorage::ceph::rados_id: swh-contents
swh::deploy::objstorage::ceph::config:
cls: rados
args:
pool_name: "%{alias('swh::deploy::objstorage::ceph::pool_name')}"
rados_id: "%{alias('swh::deploy::objstorage::ceph::rados_id')}"
ceph_config:
keyring: "%{alias('swh::deploy::objstorage::ceph::keyring')}"
nginx::package_name: nginx-light
nginx::accept_mutex: 'off'
nginx::names_hash_bucket_size: 128
nginx::names_hash_max_size: 1024
nginx::worker_processes: "%{::processorcount}"
php::version: '7.1'
php::apt_config::mirror: https://packages.sury.org/php/
php::apt_config::keyid: DF3D585DB8F0EB658690A554AC0E47584A7A714D
php::apt_config::key: |
-----BEGIN PGP PUBLIC KEY BLOCK-----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=0VaR
-----END PGP PUBLIC KEY BLOCK-----
prometheus::server::defaults_config:
web:
enable_admin_api: true
storage:
tsdb:
retention: '1y'
prometheus::server::config::global:
scrape_interval: 1m
scrape_timeout: 45s
prometheus::server::listen_network: "%{lookup('internal_network')}"
prometheus::server::listen_port: 9090
prometheus::server::certname: pergamon.softwareheritage.org
prometheus::node::listen_network: "%{lookup('internal_network')}"
prometheus::node::listen_port: 9100
prometheus::node::textfile_directory: /var/lib/prometheus/node-exporter
prometheus::node::defaults_config:
collector:
diskstats:
ignored_devices: "^(ram|loop|fd|(h|s|v|xv)d[a-z]|nvme\\d+n\\d+p)\\d+$"
filesystem:
ignored_mount_points: "^/(sys|proc|dev|run|srv/softwareheritage/objects)($|/)"
systemd: true
logind: true
loadavg: true
ntp: true
netstat: true
netdev:
ignored_devices: "^lo$"
textfile:
directory: "%{lookup('prometheus::node::textfile_directory')}"
prometheus::node::scripts::directory: /var/lib/prometheus/node-exporter-scripts
prometheus::node::scripts:
puppet-classes:
mode: cron
cron:
user: root
specification:
minute: fqdn_rand
apt:
mode: cron
cron:
user: root
specification:
minute: fqdn_rand
prometheus::sql::listen_network: "%{lookup('internal_network')}"
prometheus::sql::listen_port: 9237
-
-# extra sql exporter configuration per host
-# (cf. somerset.internal.softwareheritage.org.yml)
-# prometheus::sql::exporter::extra_config: []
+prometheus::sql::config_snippets:
+ - activity
+ - queries
+ - replication
+ - wal
grafana::db::database: grafana
grafana::db::username: grafana
# grafana::db::password in private-data
grafana::backend::port: 3000
grafana::vhost::name: grafana.softwareheritage.org
grafana::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
grafana::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
grafana::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
grafana::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
grafana::config:
app_mode: production
server:
root_url: "https://%{lookup('grafana::vhost::name')}/"
http_port: "%{alias('grafana::backend::port')}"
users:
allow_sign_up: false
auth.anonymous:
enabled: true
org_name: Software Heritage
org_role: Viewer
smtp:
enabled: true
skip_verify: true
from_address: grafana@softwareheritage.org
grafana::objects::organizations:
- name: Software Heritage
id: 1
grafana::objects::users: []
grafana::objects::datasources:
- name: Prometheus (Pergamon)
url: "http://pergamon.internal.softwareheritage.org:%{hiera('prometheus::server::listen_port')}"
type: prometheus
organization: 1
access_mode: proxy
is_default: true
java::distribution: jre
jenkins::backend::url: http://thyssen.internal.softwareheritage.org:8080/
jenkins::vhost::name: jenkins.softwareheritage.org
jenkins::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
jenkins::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
jenkins::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
jenkins::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
jenkins::agent::jar_url: "https://%{hiera('jenkins::vhost::name')}/jnlpJars/agent.jar"
jenkins::agent::jnlp::url: "%{hiera('jenkins::backend::url')}computer/%{::swh_hostname.internal_fqdn}/slave-agent.jnlp"
# jenkins::agent::jnlp::token in private_data
weekly_report_bot::user: nobody
weekly_report_bot::cron::hour: 0
weekly_report_bot::cron::minute: 0
weekly_report_bot::cron::weekday: fri
# APT repository settings
jenkins::apt_config::mirror: https://pkg.jenkins.io/debian-stable
jenkins::apt_config::keyid: 150FDE3F7787E7D11EF4E12A9B7D32F2D50582E6
jenkins::apt_config::key: |
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1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=fBn8
-----END PGP PUBLIC KEY BLOCK-----
docker::apt_config::mirror: https://download.docker.com/linux/debian
docker::apt_config::keyid: 9DC858229FC7DD38854AE2D88D81803C0EBFCD88
docker::apt_config::key: |
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBFit2ioBEADhWpZ8/wvZ6hUTiXOwQHXMAlaFHcPH9hAtr4F1y2+OYdbtMuth
lqqwp028AqyY+PRfVMtSYMbjuQuu5byyKR01BbqYhuS3jtqQmljZ/bJvXqnmiVXh
38UuLa+z077PxyxQhu5BbqntTPQMfiyqEiU+BKbq2WmANUKQf+1AmZY/IruOXbnq
L4C1+gJ8vfmXQt99npCaxEjaNRVYfOS8QcixNzHUYnb6emjlANyEVlZzeqo7XKl7
UrwV5inawTSzWNvtjEjj4nJL8NsLwscpLPQUhTQ+7BbQXAwAmeHCUTQIvvWXqw0N
cmhh4HgeQscQHYgOJjjDVfoY5MucvglbIgCqfzAHW9jxmRL4qbMZj+b1XoePEtht
ku4bIQN1X5P07fNWzlgaRL5Z4POXDDZTlIQ/El58j9kp4bnWRCJW0lya+f8ocodo
vZZ+Doi+fy4D5ZGrL4XEcIQP/Lv5uFyf+kQtl/94VFYVJOleAv8W92KdgDkhTcTD
G7c0tIkVEKNUq48b3aQ64NOZQW7fVjfoKwEZdOqPE72Pa45jrZzvUFxSpdiNk2tZ
XYukHjlxxEgBdC/J3cMMNRE1F4NCA3ApfV1Y7/hTeOnmDuDYwr9/obA8t016Yljj
q5rdkywPf4JF8mXUW5eCN1vAFHxeg9ZWemhBtQmGxXnw9M+z6hWwc6ahmwARAQAB
tCtEb2NrZXIgUmVsZWFzZSAoQ0UgZGViKSA8ZG9ja2VyQGRvY2tlci5jb20+iQI3
BBMBCgAhBQJYrefAAhsvBQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJEI2BgDwO
v82IsskP/iQZo68flDQmNvn8X5XTd6RRaUH33kXYXquT6NkHJciS7E2gTJmqvMqd
tI4mNYHCSEYxI5qrcYV5YqX9P6+Ko+vozo4nseUQLPH/ATQ4qL0Zok+1jkag3Lgk
jonyUf9bwtWxFp05HC3GMHPhhcUSexCxQLQvnFWXD2sWLKivHp2fT8QbRGeZ+d3m
6fqcd5Fu7pxsqm0EUDK5NL+nPIgYhN+auTrhgzhK1CShfGccM/wfRlei9Utz6p9P
XRKIlWnXtT4qNGZNTN0tR+NLG/6Bqd8OYBaFAUcue/w1VW6JQ2VGYZHnZu9S8LMc
FYBa5Ig9PxwGQOgq6RDKDbV+PqTQT5EFMeR1mrjckk4DQJjbxeMZbiNMG5kGECA8
g383P3elhn03WGbEEa4MNc3Z4+7c236QI3xWJfNPdUbXRaAwhy/6rTSFbzwKB0Jm
ebwzQfwjQY6f55MiI/RqDCyuPj3r3jyVRkK86pQKBAJwFHyqj9KaKXMZjfVnowLh
9svIGfNbGHpucATqREvUHuQbNnqkCx8VVhtYkhDb9fEP2xBu5VvHbR+3nfVhMut5
G34Ct5RS7Jt6LIfFdtcn8CaSas/l1HbiGeRgc70X/9aYx/V/CEJv0lIe8gP6uDoW
FPIZ7d6vH+Vro6xuWEGiuMaiznap2KhZmpkgfupyFmplh0s6knymuQINBFit2ioB
EADneL9S9m4vhU3blaRjVUUyJ7b/qTjcSylvCH5XUE6R2k+ckEZjfAMZPLpO+/tF
M2JIJMD4SifKuS3xck9KtZGCufGmcwiLQRzeHF7vJUKrLD5RTkNi23ydvWZgPjtx
Q+DTT1Zcn7BrQFY6FgnRoUVIxwtdw1bMY/89rsFgS5wwuMESd3Q2RYgb7EOFOpnu
w6da7WakWf4IhnF5nsNYGDVaIHzpiqCl+uTbf1epCjrOlIzkZ3Z3Yk5CM/TiFzPk
z2lLz89cpD8U+NtCsfagWWfjd2U3jDapgH+7nQnCEWpROtzaKHG6lA3pXdix5zG8
eRc6/0IbUSWvfjKxLLPfNeCS2pCL3IeEI5nothEEYdQH6szpLog79xB9dVnJyKJb
VfxXnseoYqVrRz2VVbUI5Blwm6B40E3eGVfUQWiux54DspyVMMk41Mx7QJ3iynIa
1N4ZAqVMAEruyXTRTxc9XW0tYhDMA/1GYvz0EmFpm8LzTHA6sFVtPm/ZlNCX6P1X
zJwrv7DSQKD6GGlBQUX+OeEJ8tTkkf8QTJSPUdh8P8YxDFS5EOGAvhhpMBYD42kQ
pqXjEC+XcycTvGI7impgv9PDY1RCC1zkBjKPa120rNhv/hkVk/YhuGoajoHyy4h7
ZQopdcMtpN2dgmhEegny9JCSwxfQmQ0zK0g7m6SHiKMwjwARAQABiQQ+BBgBCAAJ
BQJYrdoqAhsCAikJEI2BgDwOv82IwV0gBBkBCAAGBQJYrdoqAAoJEH6gqcPyc/zY
1WAP/2wJ+R0gE6qsce3rjaIz58PJmc8goKrir5hnElWhPgbq7cYIsW5qiFyLhkdp
YcMmhD9mRiPpQn6Ya2w3e3B8zfIVKipbMBnke/ytZ9M7qHmDCcjoiSmwEXN3wKYI
mD9VHONsl/CG1rU9Isw1jtB5g1YxuBA7M/m36XN6x2u+NtNMDB9P56yc4gfsZVES
KA9v+yY2/l45L8d/WUkUi0YXomn6hyBGI7JrBLq0CX37GEYP6O9rrKipfz73XfO7
JIGzOKZlljb/D9RX/g7nRbCn+3EtH7xnk+TK/50euEKw8SMUg147sJTcpQmv6UzZ
cM4JgL0HbHVCojV4C/plELwMddALOFeYQzTif6sMRPf+3DSj8frbInjChC3yOLy0
6br92KFom17EIj2CAcoeq7UPhi2oouYBwPxh5ytdehJkoo+sN7RIWua6P2WSmon5
U888cSylXC0+ADFdgLX9K2zrDVYUG1vo8CX0vzxFBaHwN6Px26fhIT1/hYUHQR1z
VfNDcyQmXqkOnZvvoMfz/Q0s9BhFJ/zU6AgQbIZE/hm1spsfgvtsD1frZfygXJ9f
irP+MSAI80xHSf91qSRZOj4Pl3ZJNbq4yYxv0b1pkMqeGdjdCYhLU+LZ4wbQmpCk
SVe2prlLureigXtmZfkqevRz7FrIZiu9ky8wnCAPwC7/zmS18rgP/17bOtL4/iIz
QhxAAoAMWVrGyJivSkjhSGx1uCojsWfsTAm11P7jsruIL61ZzMUVE2aM3Pmj5G+W
9AcZ58Em+1WsVnAXdUR//bMmhyr8wL/G1YO1V3JEJTRdxsSxdYa4deGBBY/Adpsw
24jxhOJR+lsJpqIUeb999+R8euDhRHG9eFO7DRu6weatUJ6suupoDTRWtr/4yGqe
dKxV3qQhNLSnaAzqW/1nA3iUB4k7kCaKZxhdhDbClf9P37qaRW467BLCVO/coL3y
Vm50dwdrNtKpMBh3ZpbB1uJvgi9mXtyBOMJ3v8RZeDzFiG8HdCtg9RvIt/AIFoHR
H3S+U79NT6i0KPzLImDfs8T7RlpyuMc4Ufs8ggyg9v3Ae6cN3eQyxcK3w0cbBwsh
/nQNfsA6uu+9H7NhbehBMhYnpNZyrHzCmzyXkauwRAqoCbGCNykTRwsur9gS41TQ
M8ssD1jFheOJf3hODnkKU+HKjvMROl1DK7zdmLdNzA1cvtZH/nCC9KPj1z8QC47S
xx+dTZSx4ONAhwbS/LN3PoKtn8LPjY9NP9uDWI+TWYquS2U+KHDrBDlsgozDbs/O
jCxcpDzNmXpWQHEtHU7649OXHP7UeNST1mCUCH5qdank0V1iejF6/CfTFU4MfcrG
YT90qFF93M3v01BbxP+EIY2/9tiIPbrd
=0YYh
-----END PGP PUBLIC KEY BLOCK-----
elastic::apt_config::keyid: 46095ACC8548582C1A2699A9D27D666CD88E42B4
elastic::apt_config::key: |
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.14 (GNU/Linux)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=92oX
-----END PGP PUBLIC KEY BLOCK-----
elastic::elk_version: '6.4.2'
hwraid_levert::apt_config::keyid: 0073C11919A641464163F7116005210E23B3D3B4
hwraid_levert::apt_config::key: |
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.12 (GNU/Linux)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=Yv6D
-----END PGP PUBLIC KEY BLOCK-----
diff --git a/data/hostname/prado.softwareheritage.org.yaml b/data/hostname/prado.softwareheritage.org.yaml
index d37272dc..a6df36de 100644
--- a/data/hostname/prado.softwareheritage.org.yaml
+++ b/data/hostname/prado.softwareheritage.org.yaml
@@ -1,33 +1,9 @@
dar::backup::exclude:
- srv/softwareheritage/postgres
- srv/softwareheritage/postgres-hdd
icinga2::host::vars:
load: high
-prometheus::sql::exporter::extra_config:
- - name: "SoftwareHeritageScheduler"
- interval: '1h'
- connections:
- - 'postgres://postgres@:5434/softwareheritage-scheduler?sslmode=disable'
- queries:
- - name: "swh_scheduler_oneshot"
- help: "Software Heritage Scheduled Oneshot Tasks"
- labels:
- - "type_policy_status"
- values:
- - "count"
- query: |
- select type ||' '|| status as type_policy_status, count(*) as count
- from task
- where policy='oneshot' group by 1 order by 1
- - name: "swh_scheduler_recurring"
- help: "Software Heritage Scheduled Recurring Tasks"
- labels:
- - "type_policy_status"
- values:
- - "count"
- query: |
- select type ||' '|| status as type_policy_status, count(*) as count
- from task
- where policy='recurring' group by 1 order by 1
+prometheus::sql::config_snippets:
+ - swh-scheduler
diff --git a/data/hostname/somerset.internal.softwareheritage.org.yaml b/data/hostname/somerset.internal.softwareheritage.org.yaml
index 60cda95a..8fd61eb1 100644
--- a/data/hostname/somerset.internal.softwareheritage.org.yaml
+++ b/data/hostname/somerset.internal.softwareheritage.org.yaml
@@ -1,37 +1,9 @@
dar::backup::exclude:
- srv/softwareheritage/postgres
# that's a mirror of the load on the host...
icinga2::host::vars:
load: high
-prometheus::sql::exporter::extra_config:
- - name: "SoftwareHeritageIndexerCounters"
- interval: '1h'
- connections:
- - 'postgres://postgres@:5434/softwareheritage-indexer?sslmode=disable'
- queries:
- - name: "swh_indexer_count"
- help: "Indexer count per type"
- labels:
- - "mimetype"
- - "fossology_license"
- values:
- - "count_mimetype"
- - "count_fossology_license"
- query: |
- select 'mimetype',
- (select reltuples
- from pg_class C
- left join pg_namespace N on (N.oid = C.relnamespace)
- where nspname not in ('pg_catalog', 'information_schema') and
- relkind='r' and
- relname='content_mimetype'
- ) as count_mimetype,
- 'fossology_license',
- (select reltuples
- from pg_class C
- left join pg_namespace N on (N.oid = C.relnamespace)
- where nspname not in ('pg_catalog', 'information_schema') and
- relkind='r' and
- relname='content_fossology_license') as count_fossology_license;
+prometheus::sql::config_snippets:
+ - swh-indexer
diff --git a/site-modules/profile/files/prometheus/sql/README.md b/site-modules/profile/files/prometheus/sql/README.md
new file mode 100644
index 00000000..df061633
--- /dev/null
+++ b/site-modules/profile/files/prometheus/sql/README.md
@@ -0,0 +1,10 @@
+Elephant Shed is an open source project, developed and maintained by credativ.
+The Elephant Shed itself is licensed under the [GPLv3](https://www.gnu.org/licenses/gpl-3.0.html).
+
+The following files have been pulled from commit c2951bad8cbcb58cd8377e5057b1d69bc2d9928b of https://github.com/credativ/elephant-shed/
+
+ - update-prometheus-sql-exporter-config
+ - config/activity.yml
+ - config/queries.yml
+ - config/replication.yml
+ - config/wal.yml
diff --git a/site-modules/profile/files/prometheus/sql/config/activity.yml b/site-modules/profile/files/prometheus/sql/config/activity.yml
new file mode 100644
index 00000000..dcd56e01
--- /dev/null
+++ b/site-modules/profile/files/prometheus/sql/config/activity.yml
@@ -0,0 +1,88 @@
+# queries run once per cluster (via the 'postgres' database)
+
+- name: "running_queries"
+ help: "number of running queries"
+ scope: cluster
+ labels:
+ - "datname"
+ - "usename"
+ values:
+ - "count"
+ query: >-
+ SELECT datname::text, usename::text, COUNT(*)::float AS count
+ FROM pg_stat_activity
+ WHERE NOT datname ~ '^template(0|1)$'
+ GROUP BY datname, usename
+
+- name: "pg_stat_activity"
+ help: "running backends by database and state"
+ scope: cluster
+ min_version: 9.2
+ max_version: 9.5
+ labels:
+ - "datname"
+ - "state"
+ values:
+ - "count"
+ - "max_tx_duration"
+ query: >-
+ SELECT
+ pg_database.datname::text,
+ states.state::text,
+ COALESCE(count, 0) as count,
+ COALESCE(max_tx_duration, 0) as max_tx_duration
+ FROM
+ (VALUES ('active'),
+ ('waiting'),
+ ('idle'),
+ ('idle in transaction'),
+ ('idle in transaction (aborted)'),
+ ('fastpath function call'),
+ ('disabled')) AS states(state)
+ CROSS JOIN pg_database
+ LEFT JOIN
+ (SELECT
+ datname,
+ CASE WHEN waiting THEN 'waiting' ELSE state END AS state,
+ count(*) AS count,
+ MAX(EXTRACT(EPOCH FROM now() - xact_start))::float AS max_tx_duration
+ FROM pg_stat_activity
+ GROUP BY 1, 2) AS act
+ ON states.state = act.state AND pg_database.datname = act.datname
+ WHERE NOT pg_database.datname ~ '^template(0|1)$'
+
+- name: "pg_stat_activity"
+ help: "running backends by database and state"
+ scope: cluster
+ min_version: 9.6
+ labels:
+ - "datname"
+ - "state"
+ values:
+ - "count"
+ - "max_tx_duration"
+ query: >-
+ SELECT
+ pg_database.datname::text,
+ states.state::text,
+ COALESCE(count, 0) as count,
+ COALESCE(max_tx_duration, 0) as max_tx_duration
+ FROM
+ (VALUES ('active'),
+ ('waiting'),
+ ('idle'),
+ ('idle in transaction'),
+ ('idle in transaction (aborted)'),
+ ('fastpath function call'),
+ ('disabled')) AS states(state)
+ CROSS JOIN pg_database
+ LEFT JOIN
+ (SELECT
+ datname,
+ CASE WHEN state = 'active' AND wait_event_type IS NOT NULL THEN 'waiting' ELSE state END AS state,
+ count(*) AS count,
+ MAX(EXTRACT(EPOCH FROM now() - xact_start))::float AS max_tx_duration
+ FROM pg_stat_activity
+ GROUP BY 1, 2) AS act
+ ON states.state = act.state AND pg_database.datname = act.datname
+ WHERE NOT pg_database.datname ~ '^template(0|1)$'
diff --git a/site-modules/profile/files/prometheus/sql/config/queries.yml b/site-modules/profile/files/prometheus/sql/config/queries.yml
new file mode 100644
index 00000000..3650d1e7
--- /dev/null
+++ b/site-modules/profile/files/prometheus/sql/config/queries.yml
@@ -0,0 +1,291 @@
+# queries run once per cluster (via the 'postgres' database)
+
+- name: "settings"
+ help: "PostgreSQL settings"
+ scope: cluster
+ labels:
+ - "settings"
+ values:
+ - "max_connections"
+ - "autovacuum_freeze_max_age"
+ - "superuser_reserved_connections"
+ - "max_wal_senders"
+ - "max_prepared_transactions"
+ query: >-
+ SELECT
+ current_setting('max_connections')::float AS max_connections,
+ current_setting('autovacuum_freeze_max_age')::float AS autovacuum_freeze_max_age,
+ current_setting('superuser_reserved_connections')::float AS superuser_reserved_connections,
+ current_setting('max_wal_senders')::float AS max_wal_senders,
+ current_setting('max_prepared_transactions')::float AS max_prepared_transactions
+
+- name: "pg_locks"
+ help: "locks held"
+ scope: cluster
+ labels:
+ - "datname"
+ - "mode"
+ values:
+ - "count"
+ query: >-
+ SELECT datname, t.mode, count(l.mode) FROM pg_database d CROSS JOIN
+ (VALUES ('AccessShareLock'), ('RowShareLock'), ('RowExclusiveLock'), ('ShareUpdateExclusiveLock'), ('ShareLock'), ('ShareRowExclusiveLock'), ('ExclusiveLock'), ('AccessExclusiveLock')) t(mode)
+ LEFT JOIN pg_locks l ON d.oid = l.database AND t.mode = l.mode AND l.pid <> pg_backend_pid()
+ WHERE datname !~ '^template(0|1)$' GROUP BY 1, 2
+
+- name: "pg_stat_database"
+ help: "database statistics"
+ scope: cluster
+ min_version: 9.2
+ type: "counter"
+ labels:
+ - "datname"
+ values:
+ - "numbackends:count"
+ - "xact_commit"
+ - "xact_rollback"
+ - "blks_read"
+ - "blks_hit"
+ - "tup_returned"
+ - "tup_fetched"
+ - "tup_inserted"
+ - "tup_updated"
+ - "tup_deleted"
+ - "conflicts"
+ - "temp_files"
+ - "temp_bytes"
+ - "deadlocks"
+ - "blk_read_time"
+ - "blk_write_time"
+ - "freeze_age"
+ - "dbsize"
+ query: >-
+ SELECT
+ s.datname::text,
+ numbackends::float,
+ xact_commit::float,
+ xact_rollback::float,
+ blks_read::float,
+ blks_hit::float,
+ tup_returned::float,
+ tup_fetched::float,
+ tup_inserted::float,
+ tup_updated::float,
+ tup_deleted::float,
+ conflicts::float,
+ temp_files::float,
+ temp_bytes::float,
+ deadlocks::float,
+ blk_read_time,
+ blk_write_time,
+ age(d.datfrozenxid) AS freeze_age,
+ pg_database_size(s.datname)::float AS dbsize
+ FROM pg_stat_database s
+ LEFT JOIN pg_database d ON d.datname = s.datname
+ WHERE NOT s.datname ~ '^template(0|1)$'
+
+- name: "pg_stat_statements"
+ help: "statement statistics"
+ scope: cluster
+ min_version: 9.2
+ labels:
+ - "usename"
+ - "datname"
+ - "queryid"
+ - "query"
+ values:
+ - "calls"
+ - "total_time"
+ - "rows"
+ - "shared_blks_hit"
+ - "shared_blks_read"
+ - "shared_blks_dirtied"
+ - "shared_blks_writte"
+ - "local_blks_hit"
+ - "local_blks_read"
+ - "local_blks_dirtied"
+ - "local_blks_writte"
+ - "temp_blks_read"
+ - "temp_blks_written"
+ query: >-
+ WITH w_pg_stat_statements AS ( SELECT * FROM pg_stat_statements)
+ (SELECT
+ usename::text,
+ datname::text,
+ queryid::text,
+ substr(regexp_replace(query, E'[\\n\\r]+', ' ', 'g' ), 1, 1024) AS query,
+ calls,
+ total_time,
+ rows,
+ shared_blks_hit,
+ shared_blks_read,
+ shared_blks_dirtied,
+ shared_blks_written,
+ local_blks_hit,
+ local_blks_read,
+ local_blks_dirtied,
+ local_blks_written,
+ temp_blks_read,
+ temp_blks_written
+ FROM w_pg_stat_statements pss JOIN pg_database pd ON pss.dbid = pd.oid
+ JOIN pg_user pu ON pss.userid = pu.usesysid
+ ORDER BY pss.total_time DESC
+ LIMIT 25)
+ UNION
+ SELECT
+ usename::text,
+ datname::text,
+ queryid::text,
+ substr(regexp_replace(query, E'[\\n\\r]+', ' ', 'g' ), 1, 1024) AS query,
+ calls,
+ total_time,
+ rows,
+ shared_blks_hit,
+ shared_blks_read,
+ shared_blks_dirtied,
+ shared_blks_written,
+ local_blks_hit,
+ local_blks_read,
+ local_blks_dirtied,
+ local_blks_written,
+ temp_blks_read,
+ temp_blks_written
+ FROM w_pg_stat_statements pss2 JOIN pg_database pd2 ON pss2.dbid = pd2.oid
+ JOIN pg_user pu2 ON pss2.userid = pu2.usesysid
+ ORDER BY calls DESC
+ LIMIT 25
+
+- name: "txid"
+ help: "current txid"
+ scope: cluster
+ values:
+ - "txid_current"
+ query: SELECT CASE WHEN pg_is_in_recovery() THEN 0 ELSE txid_current() END
+
+- name: "prepared_transactions"
+ help: "prepared transactions"
+ scope: cluster
+ labels:
+ - "datname"
+ values:
+ - "count"
+ query: >-
+ SELECT
+ datname::text,
+ COUNT(transaction) AS count
+ FROM pg_database d
+ LEFT JOIN pg_prepared_xacts x ON d.datname = x.database
+ WHERE NOT d.datname ~ '^template(0|1)$'
+ GROUP BY datname
+
+# queries run for each database (except template0/template1)
+
+- name: "pg_stat_user_tables"
+ help: "table statistics"
+ scope: database
+ labels:
+ - "datname"
+ - "schemaname"
+ - "relname"
+ values:
+ - "seq_scan"
+ - "seq_tup_read"
+ - "idx_scan"
+ - "idx_tup_fetch"
+ - "n_tup_ins"
+ - "n_tup_upd"
+ - "n_tup_del"
+ - "n_tup_hot_upd"
+ - "n_live_tup"
+ - "n_dead_tup"
+ - "vacuum_count"
+ - "autovacuum_count"
+ - "analyze_count"
+ - "autoanalyze_count"
+ query: >-
+ SELECT
+ current_database()::text AS datname,
+ COALESCE(schemaname::text, 'null') AS schemaname,
+ COALESCE(relname::text, 'null') AS relname,
+ COALESCE(seq_scan, 0)::float AS seq_scan,
+ COALESCE(seq_tup_read, 0)::float AS seq_tup_read,
+ COALESCE(idx_scan, 0)::float AS idx_scan,
+ COALESCE(idx_tup_fetch, 0)::float AS idx_tup_fetch,
+ COALESCE(n_tup_ins, 0)::float AS n_tup_ins,
+ COALESCE(n_tup_upd, 0)::float AS n_tup_upd,
+ COALESCE(n_tup_del, 0)::float AS n_tup_del,
+ COALESCE(n_tup_hot_upd, 0)::float AS n_tup_hot_upd,
+ COALESCE(n_live_tup, 0)::float AS n_live_tup,
+ COALESCE(n_dead_tup, 0)::float AS n_dead_tup,
+ COALESCE(vacuum_count, 0)::float AS vacuum_count,
+ COALESCE(autovacuum_count, 0)::float AS autovacuum_count,
+ COALESCE(analyze_count, 0)::float AS analyze_count,
+ COALESCE(autoanalyze_count, 0)::float AS autoanalyze_count
+ FROM pg_stat_user_tables FULL JOIN (VALUES(0)) filler(i) ON TRUE
+
+- name: "pg_statio_user_tables"
+ help: "IO statistics"
+ scope: database
+ labels:
+ - "datname"
+ - "schemaname"
+ - "relname"
+ values:
+ - "heap_blks_read"
+ - "heap_blks_hit"
+ - "idx_blks_read"
+ - "idx_blks_hit"
+ query: >-
+ SELECT
+ current_database()::text AS datname,
+ COALESCE(schemaname::text, 'null') AS schemaname,
+ COALESCE(relname::text, 'null') AS relname,
+ COALESCE(heap_blks_read::float, 0) AS heap_blks_read,
+ COALESCE(heap_blks_hit::float, 0) AS heap_blks_hit,
+ COALESCE(idx_blks_read::float, 0) AS idx_blks_read,
+ COALESCE(idx_blks_hit::float, 0) AS idx_blks_hit
+ FROM pg_statio_user_tables FULL JOIN (VALUES(0)) filler(i) ON TRUE
+
+- name: "BufferAccess"
+ help: "buffer access statistics"
+ scope: database
+ labels:
+ - "datname"
+ - "schemaname"
+ - "relname"
+ values:
+ - "reads"
+ query: >-
+ SELECT
+ current_database()::text AS datname,
+ COALESCE(schemaname::text, 'null') AS schemaname,
+ COALESCE(relname::text, 'null') AS relname,
+ SUM(COALESCE(heap_blks_read, 0)
+ + COALESCE(heap_blks_hit, 0)
+ + COALESCE(idx_blks_hit, 0)
+ + COALESCE(idx_blks_read, 0)
+ + COALESCE(toast_blks_hit, 0)
+ + COALESCE(toast_blks_read, 0)
+ + COALESCE(tidx_blks_hit, 0)
+ + COALESCE(tidx_blks_read, 0)) * 8192::bigint as reads
+ FROM pg_statio_user_tables FULL JOIN (VALUES(0)) filler(i) ON TRUE
+ GROUP BY 1, 2, 3
+
+- name: "Maintenancecounters"
+ help: "table maintenance job counters"
+ scope: database
+ labels:
+ - "datname"
+ values:
+ - "vacuum_count"
+ - "autovacuum_count"
+ - "analyze_count"
+ - "autoanalyze_count"
+ query: >-
+ SELECT
+ current_database()::text AS datname,
+ COALESCE(SUM(vacuum_count), 0) vacuum_count,
+ COALESCE(SUM(autovacuum_count), 0) autovacuum_count,
+ COALESCE(SUM(analyze_count), 0) analyze_count,
+ COALESCE(SUM(autoanalyze_count), 0) autoanalyze_count
+ FROM pg_stat_user_tables
diff --git a/site-modules/profile/files/prometheus/sql/config/replication.yml b/site-modules/profile/files/prometheus/sql/config/replication.yml
new file mode 100644
index 00000000..1c84bceb
--- /dev/null
+++ b/site-modules/profile/files/prometheus/sql/config/replication.yml
@@ -0,0 +1,66 @@
+# queries run once per cluster (via the 'postgres' database)
+
+- name: "archive_ready"
+ help: "number of WAL files waiting to be archived"
+ scope: cluster
+ max_version: 9.6
+ values:
+ - "archive_ready"
+ query: SELECT COUNT(*) AS archive_ready FROM pg_ls_dir('pg_xlog/archive_status') WHERE pg_ls_dir ~ '^[0-9a-fA-F]{24}\.ready$'
+
+- name: "archive_ready"
+ help: "number of WAL files waiting to be archived"
+ scope: cluster
+ min_version: 10
+ values:
+ - "archive_ready"
+ query: SELECT COUNT(*) AS archive_ready FROM pg_ls_dir('pg_wal/archive_status') WHERE pg_ls_dir ~ '^[0-9a-fA-F]{24}\.ready$'
+
+- name: "pg_stat_archiver"
+ help: "archiver statistics"
+ scope: cluster
+ min_version: 9.4
+ values:
+ - "archived_count"
+ - "last_archived_time"
+ - "failed_count"
+ - "last_failed_time"
+ - "stats_reset"
+ query: SELECT archived_count, failed_count FROM pg_stat_archiver
+
+- name: "pg_stat_replication"
+ help: "replication statistics"
+ scope: cluster
+ min_version: 9.2
+ max_version: 9.6
+ labels:
+ - "application_name"
+ values:
+ - "send_lag_bytes"
+ - "flush_lag_bytes"
+ - "replay_lag_bytes"
+ query: >-
+ SELECT
+ COALESCE(application_name, '')::text AS application_name,
+ COALESCE(pg_xlog_location_diff(CASE WHEN pg_is_in_recovery() THEN pg_last_xlog_receive_location() ELSE pg_current_xlog_location() END, sent_location), 0) AS send_lag_bytes,
+ COALESCE(pg_xlog_location_diff(CASE WHEN pg_is_in_recovery() THEN pg_last_xlog_receive_location() ELSE pg_current_xlog_location() END, flush_location), 0) AS flush_lag_bytes,
+ COALESCE(pg_xlog_location_diff(CASE WHEN pg_is_in_recovery() THEN pg_last_xlog_receive_location() ELSE pg_current_xlog_location() END, replay_location), 0) AS replay_lag_bytes
+ FROM pg_stat_replication FULL JOIN (VALUES(0)) filler(i) ON TRUE
+
+- name: "pg_stat_replication"
+ help: "replication statistics"
+ scope: cluster
+ min_version: 10
+ labels:
+ - "application_name"
+ values:
+ - "send_lag_bytes"
+ - "flush_lag_bytes"
+ - "replay_lag_bytes"
+ query: >-
+ SELECT
+ COALESCE(application_name, '')::text AS application_name,
+ COALESCE(pg_wal_lsn_diff(CASE WHEN pg_is_in_recovery() THEN pg_last_wal_receive_lsn() ELSE pg_current_wal_lsn() END, sent_lsn), 0) AS send_lag_bytes,
+ COALESCE(pg_wal_lsn_diff(CASE WHEN pg_is_in_recovery() THEN pg_last_wal_receive_lsn() ELSE pg_current_wal_lsn() END, flush_lsn), 0) AS flush_lag_bytes,
+ COALESCE(pg_wal_lsn_diff(CASE WHEN pg_is_in_recovery() THEN pg_last_wal_receive_lsn() ELSE pg_current_wal_lsn() END, replay_lsn), 0) AS replay_lag_bytes
+ FROM pg_stat_replication FULL JOIN (VALUES(0)) filler(i) ON TRUE
diff --git a/site-modules/profile/files/prometheus/sql/config/swh-indexer.yml b/site-modules/profile/files/prometheus/sql/config/swh-indexer.yml
new file mode 100644
index 00000000..4afd244a
--- /dev/null
+++ b/site-modules/profile/files/prometheus/sql/config/swh-indexer.yml
@@ -0,0 +1,28 @@
+- name: "swh_indexer_count"
+ help: "Indexer count per type"
+ scope: database
+ cluster: indexer
+ database: softwareheritage-indexer
+ interval: '1h'
+ labels:
+ - "mimetype"
+ - "fossology_license"
+ values:
+ - "count_mimetype"
+ - "count_fossology_license"
+ query: >-
+ select 'mimetype',
+ (select reltuples
+ from pg_class C
+ left join pg_namespace N on (N.oid = C.relnamespace)
+ where nspname not in ('pg_catalog', 'information_schema') and
+ relkind='r' and
+ relname='content_mimetype'
+ ) as count_mimetype,
+ 'fossology_license',
+ (select reltuples
+ from pg_class C
+ left join pg_namespace N on (N.oid = C.relnamespace)
+ where nspname not in ('pg_catalog', 'information_schema') and
+ relkind='r' and
+ relname='content_fossology_license') as count_fossology_license;
diff --git a/site-modules/profile/files/prometheus/sql/config/swh-scheduler.yml b/site-modules/profile/files/prometheus/sql/config/swh-scheduler.yml
new file mode 100644
index 00000000..916a6f9c
--- /dev/null
+++ b/site-modules/profile/files/prometheus/sql/config/swh-scheduler.yml
@@ -0,0 +1,29 @@
+- name: "swh_scheduler_oneshot"
+ scope: database
+ cluster: secondary
+ database: softwareheritage-scheduler
+ interval: '1h'
+ help: "Software Heritage Scheduled Oneshot Tasks"
+ labels:
+ - "type_policy_status"
+ values:
+ - "count"
+ query: |
+ select type ||' '|| status as type_policy_status, count(*) as count
+ from task
+ where policy='oneshot' group by 1 order by 1
+
+- name: "swh_scheduler_recurring"
+ scope: database
+ cluster: secondary
+ database: softwareheritage-scheduler
+ interval: '1h'
+ help: "Software Heritage Scheduled Recurring Tasks"
+ labels:
+ - "type_policy_status"
+ values:
+ - "count"
+ query: |
+ select type ||' '|| status as type_policy_status, count(*) as count
+ from task
+ where policy='recurring' group by 1 order by 1
diff --git a/site-modules/profile/files/prometheus/sql/config/wal.yml b/site-modules/profile/files/prometheus/sql/config/wal.yml
new file mode 100644
index 00000000..dbb2dd91
--- /dev/null
+++ b/site-modules/profile/files/prometheus/sql/config/wal.yml
@@ -0,0 +1,45 @@
+# queries run once per cluster (via the 'postgres' database)
+
+- name: "checkpoints"
+ help: "requested and timed checkpoints"
+ scope: cluster
+ values:
+ - "timed"
+ - "requested"
+ query: >-
+ SELECT
+ pg_stat_get_bgwriter_timed_checkpoints() timed,
+ pg_stat_get_bgwriter_requested_checkpoints() requested
+
+- name: "LastCheckpointDistance"
+ help: "distance to the last checkpoint"
+ scope: cluster
+ version: 9.6
+ values:
+ - "distance"
+ query: SELECT pg_xlog_location_diff(CASE WHEN pg_is_in_recovery() THEN pg_last_xlog_receive_location() ELSE pg_current_xlog_location() END, checkpoint_location) "distance" FROM pg_control_checkpoint()
+
+- name: "LastCheckpointDistance"
+ help: "distance to the last checkpoint"
+ scope: cluster
+ min_version: 10
+ values:
+ - "distance"
+ query: SELECT pg_wal_lsn_diff(CASE WHEN pg_is_in_recovery() THEN pg_last_wal_receive_lsn() ELSE pg_current_wal_lsn() END, checkpoint_lsn) "distance" FROM pg_control_checkpoint()
+
+- name: "waldistance"
+ help: "amount of WAL written"
+ scope: cluster
+ min_version: 9.2
+ max_version: 9.6
+ values:
+ - "location"
+ query: SELECT pg_xlog_location_diff(CASE WHEN pg_is_in_recovery() THEN pg_last_xlog_receive_location() ELSE pg_current_xlog_location() END, '0/0') "location"
+
+- name: "waldistance"
+ help: "amount of WAL written"
+ scope: cluster
+ min_version: 10
+ values:
+ - "location"
+ query: SELECT pg_wal_lsn_diff(CASE WHEN pg_is_in_recovery() THEN pg_last_wal_receive_lsn() ELSE pg_current_wal_lsn() END, '0/0') "location"
diff --git a/site-modules/profile/files/prometheus/sql/update-prometheus-sql-exporter-config b/site-modules/profile/files/prometheus/sql/update-prometheus-sql-exporter-config
old mode 100755
new mode 100644
index e1a51f58..5744afac
--- a/site-modules/profile/files/prometheus/sql/update-prometheus-sql-exporter-config
+++ b/site-modules/profile/files/prometheus/sql/update-prometheus-sql-exporter-config
@@ -1,164 +1,84 @@
-#!/usr/bin/python3
-#
-# Originally part of Credativ's Elephant Shed
-# https://github.com/credativ/elephant-shed
-# prometheus/sql_exporter/update-prometheus-sql-exporter-config
-# Licensed under the GPLv3.
-#
-# Adapted to run on Python 3.5
-
-import sys
-import yaml
-import subprocess
-import traceback
-from pkg_resources import parse_version
-
-"""
-Returns a list of clusters (dict) containing the following attributes:
- - name
- - version
- - port
- - status
- - owner
- - databases (dict)
-
-Calls get_databases for each cluster.
-"""
-def get_clusters(min_version=None, max_version=None):
- clusters = list()
-
- proc = subprocess.Popen(["pg_lsclusters"], stdout=subprocess.PIPE, stderr=subprocess.PIPE, shell=True, universal_newlines=True)
- (out, err) = proc.communicate()
-
- out = out.rstrip("\n")
- out_lines = out.splitlines()
-
- for i in range(1,len(out_lines)):
- cluster = dict()
- version, name, port, status, owner = out_lines[i].split()[:5]
- cluster["version"] = version
- cluster["name"] = name
- cluster["port"] = port
- cluster["status"] = status
- cluster["owner"] = owner
- cluster["databases"] = get_databases(cluster)
- clusters.append(cluster)
-
- return clusters
-
-"""
-Returns a list of databases for the given cluster.
-"""
-def get_databases(cluster):
- databases = list()
- command = "sudo -u %s psql -p %s -tXA -c \"SELECT datname FROM pg_database WHERE NOT datname ~ '^template(0|1)$';\""
- command = command % (cluster["owner"], cluster["port"])
- proc = subprocess.Popen([command], stdout=subprocess.PIPE, stderr=subprocess.PIPE, shell=True, universal_newlines=True)
- (out, err) = proc.communicate()
- out_lines = out.splitlines()
- for line in out_lines:
- databases.append(line.split("|")[0])
-
- return databases
-
-"""
-Returns the a config element (dict).
-"""
-def read_config_template():
- config_filename = "/etc/prometheus-sql-exporter.yml.in"
- with open(config_filename, "r") as f:
- yaml_conf = yaml.load(f)
-
- return yaml_conf
-
-"""
-Writes the given config to file.
-"""
-def write_config(conf):
- config_filename = "/etc/prometheus-sql-exporter.yml"
- with open(config_filename, "w") as f:
- yaml.dump(conf, f)
-
- return True
-
-"""
-Takes a given config and appends connection strings to it.
-"""
-def append_conn_strings_to_template(conf):
- clusters = get_clusters()
-
- for job in conf["jobs"]:
- min_version = parse_version("0")
- max_version = parse_version("99999999999")
- used_clusters = list()
- conn_strings = list()
-
- if "min_version" in job:
- min_version = parse_version(job["min_version"])
-
- if "max_version" in job:
- max_version = parse_version(job["max_version"])
-
- for cluster in clusters:
- cluster_version = parse_version(cluster["version"])
- if cluster_version >= min_version and cluster_version <= max_version:
- used_clusters.append(cluster)
-
- if job['name'].startswith('cluster'):
- for cluster in used_clusters:
- conn_strings.extend(build_conn_strings(cluster, False))
- elif job['name'].startswith('database'):
- for cluster in used_clusters:
- conn_strings.extend(build_conn_strings(cluster, True))
- else:
- conn_strings.extend(job['connections'])
-
- job["connections"] = conn_strings
-
- return conf
-
-"""
-Returns a list of connection strings for all clusters/databases.
-
-If per_db is True a list of all databases is returned. Otherwise a list of all
-clusters (using template1) is returned.
-"""
-def build_conn_strings(cluster, per_db=True):
- conn_strings = list()
-
- if per_db:
- for db in cluster["databases"]:
- conn_string = 'postgres://%s@:%s/%s?sslmode=disable'
- conn_string = conn_string % (cluster["owner"], cluster["port"], db)
- conn_strings.append(conn_string)
- else:
- conn_string = 'postgres://%s@:%s/postgres?sslmode=disable'
- conn_string = conn_string % (cluster["owner"], cluster["port"])
- conn_strings.append(conn_string)
-
- return conn_strings
-
-if __name__ == "__main__":
- clusters = get_clusters()
-
- try:
- yaml_conf = read_config_template()
- except:
- sys.stderr.write("Could not read config template.\n")
- print('-'*60)
- traceback.print_exc(file=sys.stdout)
- print('-'*60)
- exit(1)
-
- try:
- yaml_conf = append_conn_strings_to_template(yaml_conf)
- except:
- sys.stderr.write("Could not write new config.\n")
- print('-'*60)
- traceback.print_exc(file=sys.stdout)
- print('-'*60)
- exit(1)
-
- write_config(yaml_conf)
-
- exit(0)
+#!/usr/bin/perl
+
+use strict;
+use warnings;
+use PgCommon;
+use Storable qw(dclone);
+use YAML;
+
+# from list of queries, remove all that do not satisfy the scope/version/cluster/database constraints
+sub filter_queries($$$$;$)
+{
+ my ($queries, $scope, $version, $cluster, $database) = @_;
+ my @result;
+ foreach my $query (@$queries) {
+ $query->{scope} //= 'database';
+ die "scope '$query->{scope}' must be either 'cluster' or 'database'"
+ unless ($query->{scope} =~ /^(cluster|database)$/);
+ next if $query->{scope} ne $scope;
+ next if $query->{min_version} and $version < $query->{min_version};
+ next if $query->{max_version} and $version > $query->{max_version};
+ next if $query->{version} and $version !~ /$query->{version}/;
+ next if $query->{cluster} and $cluster !~ /$query->{cluster}/;
+ next if $query->{database} and $database !~ /$query->{database}/;
+
+ my $q = dclone($query);
+ delete $q->{scope}; delete $q->{min_version}; delete $q->{max_version};
+ delete $q->{version}; delete $q->{cluster}; delete $q->{database};
+ push @result, $q;
+ }
+ return \@result;
+}
+
+my $queries_directory = $ARGV[0] // die "No directory for *.yml query files specified";
+my $output_yaml = $ARGV[1] // die "No output yaml file specified";
+
+# load all *.yml files from input directory and collect the contained query lists
+my $queries;
+foreach my $yml (glob "$queries_directory/*.yml") {
+ my $q;
+ eval { $q = YAML::LoadFile($yml); };
+ die "Error loading $yml: $@" if ($@);
+ next if (ref($q) eq ''); # file is empty
+ die "$yml is not a yaml list:" . ref($q) unless (ref($q) eq 'ARRAY');
+ push @$queries, @$q;
+}
+
+# walk all clusters and databases and produce jobs for them
+my $jobs = [];
+foreach my $version (get_versions()) {
+ foreach my $cluster (get_version_clusters($version)) {
+ my %info = cluster_info($version, $cluster);
+ next unless $info{running}; # cluster is down, skip it
+ my $owner = (getpwuid $info{owneruid})[0] // die "Could not determine owner name of cluster $version $cluster";
+ my $socket = get_cluster_socketdir($version, $cluster);
+
+ # job for cluster-wide queries
+ push @$jobs, {
+ connections => [ "postgres://$owner\@:$info{port}/postgres?sslmode=disable&host=$socket" ],
+ interval => 0,
+ name => "$version/$cluster",
+ queries => filter_queries($queries, 'cluster', $version, $cluster),
+ };
+
+ # jobs for per-database queries
+ my @cluster_databases = get_cluster_databases($version, $cluster);
+ foreach my $database (grep { $_ and $_ !~ /^template[01]$/ } @cluster_databases) {
+ push @$jobs, {
+ connections => [ "postgres://$owner\@:$info{port}/$database?sslmode=disable&host=$socket" ],
+ interval => 0,
+ name => "$version/$cluster/$database",
+ queries => filter_queries($queries, 'database', $version, $cluster, $database),
+ };
+ }
+
+ # create pg_stat_statements in "postgres" database if missing
+ next if $info{recovery}; # cluster is in recovery mode, skip it
+ open PSQL, "|-", "su -c 'psql -q -h $socket -p $info{port} postgres' $owner";
+ print PSQL "DO \$\$DECLARE ext name; BEGIN SELECT INTO ext extname FROM pg_extension WHERE extname = 'pg_stat_statements'; IF NOT FOUND THEN RAISE NOTICE 'Creating pg_stat_statements extension in cluster $version/$cluster'; CREATE EXTENSION pg_stat_statements; END IF; END\$\$ LANGUAGE plpgsql;\n";
+ close PSQL;
+ }
+}
+
+# write output yml
+YAML::DumpFile($output_yaml, { jobs => $jobs });
diff --git a/site-modules/profile/manifests/prometheus/sql.pp b/site-modules/profile/manifests/prometheus/sql.pp
index 9cc99c03..2be00669 100644
--- a/site-modules/profile/manifests/prometheus/sql.pp
+++ b/site-modules/profile/manifests/prometheus/sql.pp
@@ -1,96 +1,92 @@
# Deployment of prometheus SQL exporter
class profile::prometheus::sql {
$exporter_name = 'sql'
$package_name = "prometheus-${exporter_name}-exporter"
$service_name = $package_name
$defaults_file = "/etc/default/${package_name}"
- $config_file = "/etc/${package_name}.yml"
- $config_template = "${config_file}.in"
+ $config_snippet_dir = "/etc/${package_name}"
+ $config_file = "/var/run/postgresql/${package_name}.yml"
$config_updater = "/usr/bin/update-${package_name}-config"
package {$package_name:
- ensure => latest,
+ ensure => installed,
}
service {$service_name:
ensure => 'running',
enable => true,
require => [
Package[$package_name],
- Exec[$config_updater],
]
}
::systemd::dropin_file {"${service_name}/restart.conf":
ensure => present,
unit => "${service_name}.service",
filename => 'restart.conf',
content => "[Service]\nRestart=always\nRestartSec=5\n",
}
- file {$config_updater:
- ensure => present,
- owner => 'root',
- group => 'root',
- mode => '0755',
- source => 'puppet:///modules/profile/prometheus/sql/update-prometheus-sql-exporter-config',
+ ::systemd::dropin_file {"${service_name}/update_config.conf":
+ ensure => present,
+ unit => "${service_name}.service",
+ filename => 'update_config.conf',
+ content => template('profile/prometheus/sql/systemd/update_config.conf.erb'),
}
- # needed for the the configuration generation
- # optional extra configuration per host
- $extra_config = lookup('prometheus::sql::exporter::extra_config', Data, 'first', undef)
+ $update_deps = ['postgresql-client-common', 'libyaml-perl']
+ ensure_packages(
+ $update_deps, {
+ ensure => present
+ },
+ )
- file {$config_template:
+ file {$config_updater:
ensure => present,
owner => 'root',
group => 'root',
- mode => '0644',
- content => template('profile/prometheus/sql/prometheus-sql-exporter.yml.in.erb'),
- notify => Exec[$config_updater],
+ mode => '0755',
+ source => 'puppet:///modules/profile/prometheus/sql/update-prometheus-sql-exporter-config',
+ require => Package[$update_deps],
}
- $update_deps = ['python3-pkg-resources', 'python3-yaml']
- ensure_packages(
- $update_deps, {
- ensure => present
- },
- )
+ file {$config_snippet_dir:
+ ensure => directory,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ }
+
+ $config_snippets = lookup('prometheus::sql::config_snippets', Array[String], 'unique')
- exec {$config_updater:
- refreshonly => true,
- creates => $config_file,
- require => [
- Package[$update_deps],
- File[$config_template],
- File[$config_updater],
- ],
- notify => Service[$service_name],
+ each($config_snippets) |$snippet| {
+ file {"${config_snippet_dir}/${snippet}.yml":
+ ensure => present,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ source => "puppet:///modules/profile/prometheus/sql/config/${snippet}.yml",
+ }
}
$listen_network = lookup('prometheus::sql::listen_network', Optional[String], 'first', undef)
- $listen_address = lookup('prometheus::sql::listen_address', Optional[String], 'first', undef)
- $actual_listen_address = pick($listen_address, ip_for_network($listen_network))
+ $listen_ip = lookup('prometheus::sql::listen_address', Optional[String], 'first', undef)
+ $actual_listen_ip = pick($listen_ip, ip_for_network($listen_network))
$listen_port = lookup('prometheus::sql::listen_port')
- $target = "${actual_listen_address}:${listen_port}"
-
- $defaults_config = {
- web => {
- listen_address => $target,
- },
- }
+ $listen_address = "${actual_listen_ip}:${listen_port}"
file {$defaults_file:
ensure => present,
owner => 'root',
group => 'root',
mode => '0644',
content => template('profile/prometheus/sql/prometheus-sql-exporter.defaults.erb'),
require => Package[$package_name],
notify => Service[$service_name],
}
profile::prometheus::export_scrape_config {'sql':
- target => $target,
+ target => $listen_address,
}
}
diff --git a/site-modules/profile/templates/prometheus/sql/prometheus-sql-exporter.defaults.erb b/site-modules/profile/templates/prometheus/sql/prometheus-sql-exporter.defaults.erb
index c5cddbec..78430c41 100644
--- a/site-modules/profile/templates/prometheus/sql/prometheus-sql-exporter.defaults.erb
+++ b/site-modules/profile/templates/prometheus/sql/prometheus-sql-exporter.defaults.erb
@@ -1,12 +1,10 @@
+# File managed by puppet (module profile::prometheus::sql)
+# Changes will be overwritten.
-CONFIG=/etc/prometheus-sql-exporter.yml
+CONFIG=<%= @config_file %>
PGHOST=/var/run/postgresql
PGAPPNAME=prometheus-sql-exporter
GOGC=40
-GOMAXPROCS=4
+GOMAXPROCS=1
LOGLEVEL=WARN
-ARGS="\
-<%- scope.call_function('flatten_to_argument_list', [@defaults_config]).each do |argument| -%>
- <%= argument %> \
-<%- end -%>
-"
+ARGS="-config.file <%= @config_file %> -web.listen_address <%= @listen_address %>"
diff --git a/site-modules/profile/templates/prometheus/sql/prometheus-sql-exporter.yml.in.erb b/site-modules/profile/templates/prometheus/sql/prometheus-sql-exporter.yml.in.erb
deleted file mode 100644
index 75c3f445..00000000
--- a/site-modules/profile/templates/prometheus/sql/prometheus-sql-exporter.yml.in.erb
+++ /dev/null
@@ -1,515 +0,0 @@
----
-jobs:
-# These checks are done for every cluster
-- name: "cluster"
- interval: '0'
- connections:
- # We have to omit the hostname, we use PGHOST as environment variable.
- # See /etc/default/prometheus-sql-exporter
- - 'postgres://postgres@/postgres?sslmode=disable'
- queries:
- - name: "running_queries"
- help: "Number of running queries"
- labels:
- - "datname"
- - "usename"
- values:
- - "count"
- query: |
- SELECT datname::text, usename::text, COUNT(*)::float AS count
- FROM pg_stat_activity
- WHERE NOT datname ~ '^template(0|1)$'
- GROUP BY datname, usename;
- - name: "pg_stat_activity"
- help: "Running Backends by Database and state"
- labels:
- - "datname"
- - "state"
- values:
- - "count"
- - "max_tx_duration"
- query: |
- SELECT
- pg_database.datname::text,
- tmp.state::text,
- COALESCE(count,0) as count,
- COALESCE(max_tx_duration,0) as max_tx_duration
- FROM
- (
- VALUES ('active'),
- ('idle'),
- ('idle in transaction'),
- ('idle in transaction (aborted)'),
- ('fastpath function call'),
- ('disabled')
- ) AS tmp(state) CROSS JOIN pg_database
- LEFT JOIN
- (
- SELECT
- datname,
- state,
- count(*) AS count,
- MAX(EXTRACT(EPOCH FROM now() - xact_start))::float AS max_tx_duration
- FROM pg_stat_activity
- GROUP BY datname,state) AS tmp2
- ON tmp.state = tmp2.state AND pg_database.datname = tmp2.datname
- WHERE NOT pg_database.datname ~ '^template(0|1)$'
- - name: "settings"
- help: "PostgreSQL settings"
- labels:
- - "settings"
- values:
- - "max_connections"
- - "autovacuum_freeze_max_age"
- - "superuser_reserved_connections"
- - "max_wal_senders"
- - "max_prepared_transactions"
- query: |
- SELECT
- current_setting('max_connections')::float AS max_connections,
- current_setting('autovacuum_freeze_max_age')::float AS autovacuum_freeze_max_age,
- current_setting('superuser_reserved_connections')::float AS superuser_reserved_connections,
- current_setting('max_wal_senders')::float AS max_wal_senders,
- current_setting('max_prepared_transactions')::float AS max_prepared_transactions;
- - name: "pg_locks_sum"
- help: "number of current locks"
- labels:
- - "mode"
- values:
- - "count"
- query: |
- SELECT t.mode, count(*)
- FROM
- (VALUES
- ('AccessShareLock'),
- ('RowShareLock'),
- ('RowExclusiveLock'),
- ('ShareUpdateExclusiveLock'),
- ('ShareLock'),
- ('ShareRowExclusiveLock'),
- ('ExclusiveLock'),
- ('AccessExclusiveLock')
- ) t(mode)
- FULL JOIN pg_locks l ON t.mode = l.mode GROUP BY 1;
- - name: "pg_stat_database"
- help: "Database statistics"
- type: "counter"
- labels:
- - "datname"
- values:
- - "numbackends:count"
- - "xact_commit"
- - "xact_rollback"
- - "blks_read"
- - "blks_hit"
- - "tup_returned"
- - "tup_fetched"
- - "tup_inserted"
- - "tup_updated"
- - "tup_deleted"
- - "conflicts"
- - "temp_files"
- - "temp_bytes"
- - "deadlocks"
- - "blk_read_time"
- - "blk_write_time"
- - "freeze_age"
- - "dbsize"
- query: |
- SELECT
- s.datname::text,
- numbackends::float,
- xact_commit::float,
- xact_rollback::float,
- blks_read::float,
- blks_hit::float,
- tup_returned::float,
- tup_fetched::float,
- tup_inserted::float,
- tup_updated::float,
- tup_deleted::float,
- conflicts::float,
- temp_files::float,
- temp_bytes::float,
- deadlocks::float,
- blk_read_time,
- blk_write_time,
- age(d.datfrozenxid) AS freeze_age,
- pg_database_size(s.datname)::float AS dbsize
- FROM pg_stat_database s
- LEFT JOIN pg_database d ON d.datname = s.datname
- WHERE NOT s.datname ~ '^template(0|1)$'
- - name: "pg_stat_archiver"
- help: "pg_stat_archiver"
- values:
- - "archived_count"
- - "last_archived_time"
- - "failed_count"
- - "last_failed_time"
- - "stats_reset"
- query: |
- SELECT
- archived_count,
- EXTRACT(EPOCH FROM last_archived_time),
- failed_count,
- EXTRACT(EPOCH FROM last_failed_time),
- EXTRACT(EPOCH FROM stats_reset)
- FROM pg_stat_archiver
- - name: "checkpoints"
- help: "Requested and timed Checkpoints"
- values:
- - "timed"
- - "requested"
- query: |
- SELECT
- pg_stat_get_bgwriter_timed_checkpoints() timed,
- pg_stat_get_bgwriter_requested_checkpoints() requested;
- - name: "txid"
- help: "current txid"
- values:
- - "txid_current"
- query: |
- SELECT
- txid_current();
- - name: "pg_stat_statements"
- help: "pg_stat_statements"
- labels:
- - "usename"
- - "datname"
- - "queryid"
- - "query"
- values:
- - "calls"
- - "total_time"
- - "rows"
- - "shared_blks_hit"
- - "shared_blks_read"
- - "shared_blks_dirtied"
- - "shared_blks_writte"
- - "local_blks_hit"
- - "local_blks_read"
- - "local_blks_dirtied"
- - "local_blks_writte"
- - "temp_blks_read"
- - "temp_blks_written"
- query: |
- WITH w_pg_stat_statements AS (
- SELECT * FROM pg_stat_statements
- )
- (SELECT
- usename::text
- , datname::text
- , queryid::text
- , substr(regexp_replace(query, E'[\\n\\r]+', ' ', 'g' ),1,1024) AS query
- , calls
- , total_time
- , rows
- , shared_blks_hit
- , shared_blks_read
- , shared_blks_dirtied
- , shared_blks_written
- , local_blks_hit
- , local_blks_read
- , local_blks_dirtied
- , local_blks_written
- , temp_blks_read
- , temp_blks_written
- FROM w_pg_stat_statements pss
- JOIN pg_database pd
- ON pss.dbid = pd.oid
- JOIN pg_user pu
- ON pss.userid = pu.usesysid
- ORDER BY pss.total_time DESC
- LIMIT 25)
- UNION
- SELECT
- usename::text
- , datname::text
- , queryid::text
- , substr(regexp_replace(query, E'[\\n\\r]+', ' ', 'g' ),1,1024) AS query
- , calls
- , total_time
- , rows
- , shared_blks_hit
- , shared_blks_read
- , shared_blks_dirtied
- , shared_blks_written
- , local_blks_hit
- , local_blks_read
- , local_blks_dirtied
- , local_blks_written
- , temp_blks_read
- , temp_blks_written
- FROM w_pg_stat_statements pss2
- JOIN pg_database pd2
- ON pss2.dbid = pd2.oid
- JOIN pg_user pu2
- ON pss2.userid = pu2.usesysid
- ORDER BY calls DESC
- LIMIT 25;
- - name: "prepared_transactions"
- help: "Prepared Transactions"
- labels:
- - "datname"
- values:
- - "count"
- query: |
- SELECT
- datname::text,
- COUNT(transaction) AS count
- FROM pg_database d
- LEFT JOIN pg_prepared_xacts x ON d.datname = x.database
- WHERE NOT d.datname ~ '^template(0|1)$'
- GROUP BY datname
-
-- name: "cluster_9"
- interval: '0'
- min_version: "9.0"
- max_version: "9.6"
- connections:
- # We have to omit the hostname, we use PGHOST as environment variable.
- # See /etc/default/prometheus-sql-exporter
- queries:
- - name: "pg_stat_replication"
- help: "pg_stat_replication"
- labels:
- - "application_name"
- - "usename"
- - "client_addr"
- - "client_port"
- values:
- - "pid"
- - "current_xlog_location_bytes"
- - "sent_location_bytes"
- - "flush_location_bytes"
- - "replay_location_bytes"
- - "send_lag_bytes"
- - "flush_lag_bytes"
- - "replay_lag_bytes"
- query: |
- SELECT
- COALESCE(pid, 0) AS pid,
- COALESCE(application_name, ' ')::text AS application_name,
- COALESCE(usename, ' ')::text AS usename,
- COALESCE(client_addr::text, 'local')::text AS client_addr,
- COALESCE(client_port::text, ' ') AS client_port,
- COALESCE(pg_xlog_location_diff(pg_current_xlog_location(), '0/0'), 0) AS current_xlog_location_bytes,
- COALESCE(pg_xlog_location_diff(sent_location, '0/0'), 0) AS sent_location_bytes,
- COALESCE(pg_xlog_location_diff(flush_location, '0/0'), 0) AS flush_location_bytes,
- COALESCE(pg_xlog_location_diff(replay_location, '0/0'), 0) AS replay_location_bytes,
- COALESCE(pg_xlog_location_diff(pg_current_xlog_location(), sent_location), 0) AS send_lag_bytes,
- COALESCE(pg_xlog_location_diff(pg_current_xlog_location(), flush_location), 0) AS flush_lag_bytes,
- COALESCE(pg_xlog_location_diff(pg_current_xlog_location(), replay_location), 0) AS replay_lag_bytes
- FROM pg_stat_replication LEFT JOIN (VALUES(0)) filler(i) ON TRUE
- - name: "waldistance"
- help: "amount of wal written since creation"
- values:
- - "location"
- query: |
- SELECT
- pg_xlog_location_diff(pg_current_xlog_location(),'0/0000') "location";
- - name: "LastCheckpointDistance"
- help: "Distance to the last checkpoint"
- values:
- - "distance"
- query: |
- SELECT
- pg_xlog_location_diff( pg_current_xlog_location(), checkpoint_location) "distance" FROM pg_control_checkpoint();
- - name: "archive_ready"
- help: "archive_ready"
- values:
- - "archive_ready"
- query: |
- SELECT COUNT(1) AS archive_ready FROM pg_ls_dir('./pg_xlog/archive_status') WHERE pg_ls_dir ~ '^[0-9a-fA-F]{24}\.ready$';
-
-
-- name: "cluster_10"
- interval: '0'
- min_version: "10"
- max_version: "999999"
- connections:
- # We have to omit the hostname, we use PGHOST as environment variable.
- # See /etc/default/prometheus-sql-exporter
- queries:
- - name: "pg_stat_replication"
- help: "pg_stat_replication"
- labels:
- - "application_name"
- - "usename"
- - "client_addr"
- - "client_port"
- values:
- - "pid"
- - "current_xlog_lsn_bytes"
- - "sent_lsn_bytes"
- - "flush_lsn_bytes"
- - "replay_lsn_bytes"
- - "send_lag_bytes"
- - "flush_lag_bytes"
- - "replay_lag_bytes"
- query: |
- SELECT
- COALESCE(pid, 0) AS pid,
- COALESCE(application_name, ' ')::text AS application_name,
- COALESCE(usename, ' ')::text AS usename,
- COALESCE(client_addr::text, 'local')::text AS client_addr,
- COALESCE(client_port::text, ' ') AS client_port,
- COALESCE(pg_wal_lsn_diff(pg_current_wal_lsn(), '0/0'), 0) AS current_xlog_lsn_bytes,
- COALESCE(pg_wal_lsn_diff(sent_lsn, '0/0'), 0) AS sent_location_bytes,
- COALESCE(pg_wal_lsn_diff(flush_lsn, '0/0'), 0) AS flush_location_bytes,
- COALESCE(pg_wal_lsn_diff(replay_lsn, '0/0'), 0) AS replay_location_bytes,
- COALESCE(pg_wal_lsn_diff(pg_current_wal_lsn(), sent_lsn), 0) AS send_lag_bytes,
- COALESCE(pg_wal_lsn_diff(pg_current_wal_lsn(), flush_lsn), 0) AS flush_lag_bytes,
- COALESCE(pg_wal_lsn_diff(pg_current_wal_lsn(), replay_lsn), 0) AS replay_lag_bytes
- FROM pg_stat_replication FULL JOIN (VALUES(0)) filler(i) ON TRUE
- - name: "waldistance"
- help: "amount of wal written since creation"
- values:
- - "location"
- query: |
- SELECT
- pg_wal_lsn_diff(pg_current_wal_lsn(),'0/0000') "location";
- - name: "LastCheckpointDistance"
- help: "Distance to the last checkpoint"
- values:
- - "distance"
- query: |
- SELECT
- pg_wal_lsn_diff( pg_current_wal_lsn(), checkpoint_lsn) "distance" FROM pg_control_checkpoint();
- - name: "archive_ready"
- help: "archive_ready"
- values:
- - "archive_ready"
- query: |
- SELECT COUNT(1) AS archive_ready FROM pg_ls_dir('./pg_wal/archive_status') WHERE pg_ls_dir ~ '^[0-9a-fA-F]{24}\.ready$';
-
-# This checks are done for every database
-- name: "database"
- interval: '24h'
- connections:
- # We have to omit the hostname, we use PGHOST as environment variable.
- # See /etc/default/prometheus-sql-exporter
- - 'postgres://postgres@/postgres?sslmode=disable'
- queries:
- - name: "CREATE EXTENSION pg_stat_statements"
- help: "Creates the needed extension pg_stat_statements and does not produce errors."
- query: |
- DO $$
- BEGIN
- EXECUTE 'CREATE EXTENSION pg_stat_statements';
- EXCEPTION WHEN OTHERS THEN
- RETURN;
- END;
- $$;
-- name: "database"
- interval: '0'
- connections:
- # We have to omit the hostname, we use PGHOST as environment variable.
- # See /etc/default/prometheus-sql-exporter
- - 'postgres://postgres@/postgres?sslmode=disable'
- queries:
- - name: "pg_stat_user_tables"
- help: "Table stats"
- labels:
- - "datname"
- - "schemaname"
- - "relname"
- values:
- - "seq_scan"
- - "seq_tup_read"
- - "idx_scan"
- - "idx_tup_fetch"
- - "n_tup_ins"
- - "n_tup_upd"
- - "n_tup_del"
- - "n_tup_hot_upd"
- - "n_live_tup"
- - "n_dead_tup"
- - "vacuum_count"
- - "autovacuum_count"
- - "analyze_count"
- - "autoanalyze_count"
- query: |
- SELECT
- current_database()::text AS datname
- , coalesce(schemaname::text, 'null') AS schemaname
- , coalesce(relname::text, 'null') AS relname
- , coalesce(seq_scan,0)::float AS seq_scan
- , coalesce(seq_tup_read,0)::float AS seq_tup_read
- , coalesce(idx_scan,0)::float AS idx_scan
- , coalesce(idx_tup_fetch,0)::float AS idx_tup_fetch
- , coalesce(n_tup_ins,0)::float AS n_tup_ins
- , coalesce(n_tup_upd,0)::float AS n_tup_upd
- , coalesce(n_tup_del,0)::float AS n_tup_del
- , coalesce(n_tup_hot_upd,0)::float AS n_tup_hot_upd
- , coalesce(n_live_tup,0)::float AS n_live_tup
- , coalesce(n_dead_tup,0)::float AS n_dead_tup
- , coalesce(vacuum_count,0)::float AS vacuum_count
- , coalesce(autovacuum_count,0)::float AS autovacuum_count
- , coalesce(analyze_count,0)::float AS analyze_count
- , coalesce(autoanalyze_count,0)::float AS autoanalyze_count
- FROM pg_stat_user_tables FULL JOIN (VALUES(0)) filler(i) ON TRUE;
- - name: "pg_statio_user_tables"
- help: "IO Stats"
- labels:
- - "datname"
- - "schemaname"
- - "relname"
- values:
- - "heap_blks_read"
- - "heap_blks_hit"
- - "idx_blks_read"
- - "idx_blks_hit"
- query: |
- SELECT
- current_database()::text AS datname
- , COALESCE(schemaname::text, 'null') AS schemaname
- , COALESCE(relname::text, 'null') AS relname
- , COALESCE(heap_blks_read::float,0) AS heap_blks_read
- , COALESCE(heap_blks_hit::float,0) AS heap_blks_hit
- , COALESCE(idx_blks_read::float,0) AS idx_blks_read
- , COALESCE(idx_blks_hit::float,0) AS idx_blks_hit
- FROM pg_statio_user_tables FULL JOIN (VALUES(0)) filler(i) ON TRUE;
- - name: "BufferAccess"
- help: "Buffers Accessed"
- labels:
- - "datname"
- - "schemaname"
- - "relname"
- values:
- - "reads"
- query: |
- SELECT
- current_database()::text AS datname,
- COALESCE(schemaname::text, 'null') AS schemaname,
- COALESCE(relname::text, 'null') AS relname,
- sum( coalesce( heap_blks_read,0)
- + coalesce(heap_blks_hit,0)
- + coalesce(idx_blks_hit,0)
- + coalesce(idx_blks_read,0)
- + coalesce(toast_blks_hit,0)
- + coalesce(toast_blks_read,0)
- + coalesce(tidx_blks_hit,0)
- + coalesce(tidx_blks_read,0))*8196::bigint as reads
- FROM pg_statio_user_tables FULL JOIN (VALUES(0)) filler(i) ON TRUE
- GROUP BY 1,2,3;
- - name: "Maintenancecounters"
- help: "Counters for maintenance jobs on user tables"
- labels:
- - "datname"
- values:
- - "vacuum_count"
- - "autovacuum_count"
- - "analyze_count"
- - "autoanalyze_count"
- query: |
- SELECT
- current_database()::text AS datname,
- sum( vacuum_count) vacuum_count,
- sum( autovacuum_count) autovacuum_count,
- sum( analyze_count) analyze_count,
- sum( autoanalyze_count) autoanalyze_count
- FROM pg_stat_all_tables;
-<% if @extra_config -%>
-<%= @extra_config.to_yaml().gsub(/^---\n/, '') %>
-<%- end -%>
diff --git a/site-modules/profile/templates/prometheus/sql/systemd/update_config.conf.erb b/site-modules/profile/templates/prometheus/sql/systemd/update_config.conf.erb
new file mode 100644
index 00000000..bfc84a8b
--- /dev/null
+++ b/site-modules/profile/templates/prometheus/sql/systemd/update_config.conf.erb
@@ -0,0 +1,15 @@
+# File managed by puppet (module profile::prometheus::sql)
+# Changes will be overwritten.
+
+[Unit]
+# forget default config file location
+ConditionPathExists=
+# wait for PostgreSQL to start up
+After=postgresql.service
+# If no PostgreSQL cluster exist, we dont't start.
+ConditionPathExistsGlob=/etc/postgresql/*/*/postgresql.conf
+
+[Service]
+# before starting the sql exporter, generate config (as root)
+PermissionsStartOnly=true
+ExecStartPre=<%= @config_updater %> <%= @config_snippet_dir %> <%= @config_file %>

File Metadata

Mime Type
text/x-diff
Expires
Fri, Jul 4, 11:25 AM (3 w, 2 d ago)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
3266633

Event Timeline

About · Developer information · Legal