first test adding microk8s checks for thruk

2025-04-01 17:05:40 +02:00 · 2025-04-01 15:29:28 +02:00 · 2025-04-01 15:27:57 +02:00 · 2025-04-01 15:25:52 +02:00 · 2025-02-25 08:18:59 +01:00 · 2025-02-21 10:54:11 +01:00
6 changed files with 16 additions and 2 deletions
--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@ -30,7 +30,7 @@
        frontends:
        - sthb-lb-1.sunet.se
        - tug-lb-1.sunet.se
-        port: '30443'
+        port: '443'
  sunet::otel::alloy:
    otel_receiver: monitor-prod.rut.sunet.se
  sunet::fleetlock_client:
@ -39,12 +39,14 @@
  rut::infra_ca_rp:
  sunet::microk8s::node: 
    channel: 1.31/stable
+    drain_reboot_cron: true
  sunet::otel::alloy:
    otel_receiver: monitor-prod.rut.sunet.se
  sunet::fleetlock_client:

 '^internal-sto4-prod-monitor-[0-9].rut.sunet.se$':
  sunet::dockerhost2:
+  rut::controller_checks:
  sunet::naemon_monitor:
    domain: monitor-prod.rut.sunet.se
    naemon_tag: latest
@ -85,6 +87,7 @@ internal-sto4-prod-satosa-1.rut.sunet.se:
  rut::infra_ca_rp:
  sunet::microk8s::node: 
    channel: 1.31/stable
+    drain_reboot_cron: true
  sunet::otel::alloy:
    otel_receiver: monitor-prod.rut.sunet.se
  sunet::fleetlock_client:
--- a/global/overlay/etc/puppet/modules/rut/manifests/controller_checks.pp
+++ b/global/overlay/etc/puppet/modules/rut/manifests/controller_checks.pp
@ -0,0 +1,8 @@
+# Everything is awesome!
+class rut::controller_checks {
+    nagioscfg::service {'check_rut_pods':
+    host_name      => ['internal-sto4-prod-k8sc-0.rut.sunet.se'],
+    check_command  => 'check_nrpe!check_rut_pods',
+    description    => 'Microk8s cluster health',
+    }
+}
--- a/internal-sto4-prod-k8sc-0.rut.sunet.se/overlay/etc/nftables/conf.d/501.nft
+++ b/internal-sto4-prod-k8sc-0.rut.sunet.se/overlay/etc/nftables/conf.d/501.nft
@ -0,0 +1 @@
+add rule inet filter input tcp dport { 80, 443 , 30080, 30443 } counter accept comment "nft_public" 
--- a/internal-sto4-prod-k8sc-1.rut.sunet.se/overlay/etc/nftables/conf.d/501.nft
+++ b/internal-sto4-prod-k8sc-1.rut.sunet.se/overlay/etc/nftables/conf.d/501.nft
@ -0,0 +1 @@
+add rule inet filter input tcp dport { 80, 443 , 30080, 30443 } counter accept comment "nft_public" 
--- a/internal-sto4-prod-k8sc-2.rut.sunet.se/overlay/etc/nftables/conf.d/501.nft
+++ b/internal-sto4-prod-k8sc-2.rut.sunet.se/overlay/etc/nftables/conf.d/501.nft
@ -0,0 +1 @@
+add rule inet filter input tcp dport { 80, 443 , 30080, 30443 } counter accept comment "nft_public"
Author	SHA1	Message	Date
Rasmus Thorslund	8b88f929dc	first test adding microk8s checks for thruk	2025-04-01 17:05:40 +02:00
Rasmus Thorslund	e96d41c899	first test adding microk8s checks for thruk	2025-04-01 15:29:28 +02:00
Rasmus Thorslund	681c004a8a	first test adding microk8s checks for thruk	2025-04-01 15:27:57 +02:00
Rasmus Thorslund	c9709e1509	first test adding microk8s checks for thruk	2025-04-01 15:25:52 +02:00
Rasmus Thorslund	6ea773035e	changed port from 30443 to 443	2025-02-25 08:18:59 +01:00
Rasmus Thorslund	82a29b6abf	added missing space before bracket	2025-02-21 10:54:11 +01:00
Rasmus Thorslund	4f7a796383	added missing bracket	2025-02-21 10:49:19 +01:00
Mikael Andersson	5eaa1f6189	Add missing ingress fw rule.	2025-02-19 12:16:01 +01:00
Mikael Andersson	6dd96bafed	Adding drain_reboot_cron: true for missing nodes	2025-02-17 14:18:09 +01:00
				`@ -0,0 +1 @@`
				`add rule inet filter input tcp dport { 80, 443 , 30080, 30443 } counter accept comment "nft_public"`