rut-prod-ops/global/overlay/etc/puppet/cosmos-rules.yaml

# Note that the matching is done with re.match()
.+:
  sunet::server:
    unattended_upgrades: true
    install_scriptherder: true
  rut:
  sunet::nagios::nrpe:
    checks:
      - nrpe_check_memory
      - nrpe_check_entropy
      - nrpe_check_ntp_time
      - nrpe_check_scriptherder
      - nrpe_check_apt
      - nrpe_check_dynamic_disk
      - nrpe_check_users
      - nrpe_check_uptime
      - nrpe_check_reboot
      - nrpe_check_load
      - nrpe_check_zombie_procs
      - nrpe_check_total_procs_lax

'^internal-sto4-prod-k8sc-[0-9].rut.sunet.se$':
  rut::infra_ca_rp:
  sunet::microk8s::node: 
    channel: 1.31/stable
    drain_reboot_cron: true
  sunet::frontend::register_sites:
    sites:
      kubeprod.rut.sunet.se:
        frontends:
        - sthb-lb-1.sunet.se
        - tug-lb-1.sunet.se
        port: '30443'
  sunet::otel::alloy:
    otel_receiver: monitor-prod.rut.sunet.se
  sunet::fleetlock_client:

'^internal-sto4-prod-k8sw-[0-9].rut.sunet.se$':
  rut::infra_ca_rp:
  sunet::microk8s::node: 
    channel: 1.31/stable
  sunet::otel::alloy:
    otel_receiver: monitor-prod.rut.sunet.se
  sunet::fleetlock_client:

'^internal-sto4-prod-monitor-[0-9].rut.sunet.se$':
  sunet::dockerhost2:
  sunet::naemon_monitor:
    domain: monitor-prod.rut.sunet.se
    naemon_tag: latest
    thruk_tag: latest
    histou_tag: latest
    nagflux_tag: latest
    loki_tag: latest
    grafana_tag: latest
    receive_otel: true
    resolvers:
      - 89.46.20.75
      - 89.46.21.29
      - 89.32.32.32
    thruk_admins:
      - thorslund@sunet.se
      - mariah@sunet.se
      - jonas@sunet.se
      - pahol@sunet.se
    thruk_users:
      - mifr@sunet.se
      - riwe@vr.se
      - jofl@vr.se 
      - guce@vr.se
      - joma@vr.se
      - rila@vr.se
    nrpe_group: rut
    thruk_extra_volumes:
      - /opt/naemon_monitor/shibboleth2.xml:/etc/shibboleth/shibboleth2.xml
      - /opt/naemon_monitor/satosa.xml:/etc/shibboleth/satosa.xml
      - /opt/naemon_monitor/attribute-policy.xml:/etc/shibboleth/attribute-policy.xml
internal-sto4-prod-satosa-1.rut.sunet.se:
  sunet::dockerhost2:
  sunet::satosa:
    satosa_tag: 8.4.0
    dehydrated_name: idp-proxy-prod.rut.sunet.se

'^internal-sto4-prod-k8spg-[0-9].rut.sunet.se$':
  rut::infra_ca_rp:
  sunet::microk8s::node: 
    channel: 1.31/stable
  sunet::otel::alloy:
    otel_receiver: monitor-prod.rut.sunet.se
  sunet::fleetlock_client: