only monitor ssh on jumphosts

global/overlay/etc/puppet/cosmos-rules.yaml

@@ -14,11 +14,13 @@ jmp.komreg.net:
    sunet_iaas_cloud:
    autoupdate:
    sunet::auditd:
+   jumphosts:
 
 '^jump-.+\.komreg\.net$':
    konsulter:
    metadatamgrs:
    autoupdate:
+   jumphosts:
 
 kvmfe-tug-3.komreg.net:
    eid::kvmhost:

global/overlay/etc/puppet/manifests/cosmos-site.pp

@@ -14,6 +14,8 @@ class autoupdate {
    class { 'sunet::updater': cron => true, cosmos_automatic_reboot => true }
 }
 
+class jumphosts {}
+
 class infra_ca_rp {
    sunet::ici_ca::rp { 'infra': }
 }
@@ -683,7 +685,7 @@ class nagios_monitor {
       contact_groups => ['alerts']
    }
    nagioscfg::service {'service_ssh':
-      hostgroup_name => ['all'],
+      hostgroup_name => ['jumphost'],
       description    => 'SSH',
       check_command  => 'check_ssh_4_hostname',
       contact_groups => ['alerts']