diff options
| author | Christian Pointner <equinox@spreadspace.org> | 2022-12-07 19:16:39 +0100 |
|---|---|---|
| committer | Christian Pointner <equinox@spreadspace.org> | 2022-12-07 19:33:32 +0100 |
| commit | f294c367c70d04d3de1c10fa87c2be4ea6cc3012 (patch) | |
| tree | e9accdbd8bb877f02543a3425fc394517cac4007 /roles/monitoring/prometheus/exporter | |
| parent | alerta: allow to force alerm severity for heartbeats (diff) | |
prometheus/node-exporter: make certificate SANs configurable
promethues/server: add support for federation
Diffstat (limited to 'roles/monitoring/prometheus/exporter')
| -rw-r--r-- | roles/monitoring/prometheus/exporter/base/defaults/main.yml | 4 | ||||
| -rw-r--r-- | roles/monitoring/prometheus/exporter/base/tasks/tls.yml | 4 |
2 files changed, 5 insertions, 3 deletions
diff --git a/roles/monitoring/prometheus/exporter/base/defaults/main.yml b/roles/monitoring/prometheus/exporter/base/defaults/main.yml index 2eef79fe..f6c8567f 100644 --- a/roles/monitoring/prometheus/exporter/base/defaults/main.yml +++ b/roles/monitoring/prometheus/exporter/base/defaults/main.yml @@ -1,3 +1,7 @@ --- #prometheus_exporter_listen_addr: prometheus_exporter_listen_port: 9999 + +prometheus_exporter_certificate_san: + - "DNS:{{ host_name }}.{{ host_domain }}" + - "IP:{{ (inventory_hostname == prometheus_server) | ternary('127.0.0.1', (prometheus_exporter_listen_addr | default(ansible_default_ipv4.address))) }}" diff --git a/roles/monitoring/prometheus/exporter/base/tasks/tls.yml b/roles/monitoring/prometheus/exporter/base/tasks/tls.yml index 35f410e8..a2d2f4a9 100644 --- a/roles/monitoring/prometheus/exporter/base/tasks/tls.yml +++ b/roles/monitoring/prometheus/exporter/base/tasks/tls.yml @@ -32,9 +32,7 @@ path: /etc/ssl/prometheus/exporter/csr.pem privatekey_path: /etc/ssl/prometheus/exporter/key.pem CN: "{{ inventory_hostname }}" - subject_alt_name: - - "DNS:{{ host_name }}.{{ host_domain }}" - - "IP:{{ (inventory_hostname == prometheus_server) | ternary('127.0.0.1', (prometheus_exporter_listen_addr | default(ansible_default_ipv4.address))) }}" + subject_alt_name: "{{ prometheus_exporter_certificate_san }}" key_usage: - digitalSignature key_usage_critical: yes |