summaryrefslogtreecommitdiff
path: root/inventory/host_vars/ch-apps
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2024-05-01 11:40:29 +0200
committerChristian Pointner <equinox@spreadspace.org>2024-05-01 11:40:29 +0200
commit19b085fe3928c888f1b6339a65c58dbd832af544 (patch)
treee3d0c8381e7a005fe1b9bdbfbb4a54d2c14b700c /inventory/host_vars/ch-apps
parentremove ssl exporter from some machines (diff)
add prometheus monitoring for some ssl certificates
Diffstat (limited to 'inventory/host_vars/ch-apps')
-rw-r--r--inventory/host_vars/ch-apps/vars.yml13
1 files changed, 13 insertions, 0 deletions
diff --git a/inventory/host_vars/ch-apps/vars.yml b/inventory/host_vars/ch-apps/vars.yml
index 2dc0877b..36ca183d 100644
--- a/inventory/host_vars/ch-apps/vars.yml
+++ b/inventory/host_vars/ch-apps/vars.yml
@@ -61,6 +61,7 @@ ssh_keys_root_extra:
prometheus_exporters_extra:
- standalone-kubelet
+ - ssl
prometheus_job_multitarget_blackbox__probe:
ch-mon:
@@ -68,6 +69,18 @@ prometheus_job_multitarget_blackbox__probe:
target: "{{ network_zones.svc.prefix | ansible.utils.ipaddr(network_zones.svc.offsets[inventory_hostname]) | ansible.utils.ipaddr('address') }}:{{ ansible_port | default(22) }}"
module: ssh_banner
+prometheus_job_multitarget_ssl__probe:
+ ch-apps:
+ - instance: "sslcert-standalone-kubelet-{{ inventory_hostname }}"
+ target: "/etc/ssl/standalone-kubelet/*.pem"
+ module: file
+ - instance: "sslcert-node-red-{{ inventory_hostname }}"
+ target: "/etc/ssl/node-red-*/*.pem"
+ module: file
+ - instance: "sslcert-whawty-auth-{{ inventory_hostname }}"
+ target: "/etc/ssl/whawty-auth-*/*.pem"
+ module: file
+
zfs_arc_size:
min: 512MB