rut-prod-ops/global/overlay/etc/puppet/cosmos-rules.yaml

90 lines
2.3 KiB
YAML

# Note that the matching is done with re.match()
.+:
sunet::server:
unattended_upgrades: true
install_scriptherder: true
rut:
sunet::nagios::nrpe:
checks:
- nrpe_check_memory
- nrpe_check_entropy
- nrpe_check_ntp_time
- nrpe_check_scriptherder
- nrpe_check_apt
- nrpe_check_dynamic_disk
- nrpe_check_users
- nrpe_check_uptime
- nrpe_check_reboot
- nrpe_check_load
- nrpe_check_zombie_procs
- nrpe_check_total_procs_lax
'^internal-sto4-prod-k8sc-[0-9].rut.sunet.se$':
rut::infra_ca_rp:
sunet::microk8s::node:
channel: 1.31/stable
drain_reboot_cron: true
sunet::frontend::register_sites:
sites:
kubeprod.rut.sunet.se:
frontends:
- sthb-lb-1.sunet.se
- tug-lb-1.sunet.se
port: '30443'
sunet::otel::alloy:
otel_receiver: monitor-prod.rut.sunet.se
sunet::fleetlock_client:
'^internal-sto4-prod-k8sw-[0-9].rut.sunet.se$':
rut::infra_ca_rp:
sunet::microk8s::node:
channel: 1.31/stable
sunet::otel::alloy:
otel_receiver: monitor-prod.rut.sunet.se
sunet::fleetlock_client:
'^internal-sto4-prod-monitor-[0-9].rut.sunet.se$':
sunet::dockerhost2:
sunet::naemon_monitor:
domain: monitor-prod.rut.sunet.se
naemon_tag: latest
thruk_tag: latest
histou_tag: latest
nagflux_tag: latest
loki_tag: latest
grafana_tag: latest
receive_otel: true
resolvers:
- 89.46.20.75
- 89.46.21.29
- 89.32.32.32
thruk_admins:
- thorslund@sunet.se
- mariah@sunet.se
- jonas@sunet.se
- pahol@sunet.se
thruk_users:
- mifr@sunet.se
- riwe@vr.se
- jofl@vr.se
- guce@vr.se
- joma@vr.se
- rila@vr.se
nrpe_group: rut
thruk_extra_volumes:
- /opt/naemon_monitor/shibboleth2.xml:/etc/shibboleth/shibboleth2.xml
- /opt/naemon_monitor/satosa.xml:/etc/shibboleth/satosa.xml
- /opt/naemon_monitor/attribute-policy.xml:/etc/shibboleth/attribute-policy.xml
internal-sto4-prod-satosa-1.rut.sunet.se:
sunet::dockerhost2:
sunet::satosa:
satosa_tag: 8.4.0
dehydrated_name: idp-proxy-prod.rut.sunet.se
'^internal-sto4-prod-k8spg-[0-9].rut.sunet.se$':
rut::infra_ca_rp:
sunet::microk8s::node:
channel: 1.31/stable
sunet::otel::alloy:
otel_receiver: monitor-prod.rut.sunet.se
sunet::fleetlock_client: