From 08f1960dc8a2807e908f0f6c9eb957fcb9bf4192 Mon Sep 17 00:00:00 2001
From: Rasmus Thorslund <thorslund@sunet.se>
Date: Wed, 23 Apr 2025 15:07:37 +0200
Subject: [PATCH] added fleetlock check and modified hostgroup names

---
 .../etc/puppet/modules/rut/manifests/rut_mon.pp | 12 +++++++++---
 .../puppet/modules/rut/manifests/rut_nrpe.pp    | 10 ++++++++++
 .../templates/check_fleetlock_disabled.sh.erb   | 17 +++++++++++++++++
 3 files changed, 36 insertions(+), 3 deletions(-)
 create mode 100644 global/overlay/etc/puppet/modules/rut/manifests/rut_nrpe.pp
 create mode 100644 global/overlay/etc/puppet/modules/rut/templates/check_fleetlock_disabled.sh.erb

diff --git a/global/overlay/etc/puppet/modules/rut/manifests/rut_mon.pp b/global/overlay/etc/puppet/modules/rut/manifests/rut_mon.pp
index 703fde8..87cb75d 100644
--- a/global/overlay/etc/puppet/modules/rut/manifests/rut_mon.pp
+++ b/global/overlay/etc/puppet/modules/rut/manifests/rut_mon.pp
@@ -1,19 +1,25 @@
 class rut::rut_mon {
     nagioscfg::service {'check_rut_pods':
-    host_name      => ['internal-sto4-prod-k8sc-0.rut.sunet.se', 'internal-sto4-prod-k8sc-1.rut.sunet.se', 'internal-sto4-prod-k8sc-2.rut.sunet.se'],
+    hostgroup_name => 'rut::controller_nrpe',
     check_command  => 'check_nrpe!check_rut_pods',
     description    => 'Microk8s cluster health',
     }
 
     nagioscfg::service {'check_rut_postgres':
-    host_name      => ['internal-sto4-prod-k8sc-0.rut.sunet.se', 'internal-sto4-prod-k8sc-1.rut.sunet.se', 'internal-sto4-prod-k8sc-2.rut.sunet.se'],
+    hostgroup_name => 'rut::controller_nrpe',
     check_command  => 'check_nrpe!check_rut_postgres',
     description    => 'Postgres cluster health',
     }
 
     nagioscfg::service {'check_rut_snapshots':
-    host_name      => ['internal-sto4-prod-monitor-1.rut.sunet.se'],
+    hostgroup_name => 'sunet::naemon_monitor',
     check_command  => 'check_nrpe!check_rut_snapshots',
     description    => 'Backup snapshots in sto4',
     }
+
+    nagioscfg::service {'check_fleetlock_disabled':
+    hostgroup_name => 'sunet::fleetlock_client',
+    check_command  => 'check_nrpe!check_fleetlock_disabled',
+    description    => 'Fleetlock',
+    }
 }
diff --git a/global/overlay/etc/puppet/modules/rut/manifests/rut_nrpe.pp b/global/overlay/etc/puppet/modules/rut/manifests/rut_nrpe.pp
new file mode 100644
index 0000000..3f9bb10
--- /dev/null
+++ b/global/overlay/etc/puppet/modules/rut/manifests/rut_nrpe.pp
@@ -0,0 +1,10 @@
+class rut::rut_nrpe {
+    sunet::nagios::nrpe_command {'check_fleetlock_disabled':
+      command_line => '/usr/lib/nagios/plugins/check_fleetlock_disabled.sh'
+    }
+    file { "/usr/lib/nagios/plugins/check_fleetlock_disabled.sh":
+       ensure  => "file",
+       content => template("rut/check_fleetlock_disabled.sh.erb"),
+       mode    => '0755',
+    }
+}
diff --git a/global/overlay/etc/puppet/modules/rut/templates/check_fleetlock_disabled.sh.erb b/global/overlay/etc/puppet/modules/rut/templates/check_fleetlock_disabled.sh.erb
new file mode 100644
index 0000000..976da11
--- /dev/null
+++ b/global/overlay/etc/puppet/modules/rut/templates/check_fleetlock_disabled.sh.erb
@@ -0,0 +1,17 @@
+#!/bin/bash
+# This file is managed by Puppet.
+# check_file_exists.sh — return WARNING if a file is absent.
+
+set -euo pipefail
+trap 'echo "UNKNOWN: script error" >&2; exit 3' ERR
+
+FILE_TO_CHECK=${1:-/etc/run-cosmos-fleetlock-disable}
+
+if [[ -e "$FILE_TO_CHECK" ]]; then
+    echo "WARNING: '$FILE_TO_CHECK' exists so fleetlock is disabled."
+    exit 0
+else
+    echo "OK: Fleetlock is not disabled"
+    exit 1
+fi
+