swedenconnect/eid-ops
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

expose port 444 (docker 8444) to local nagios monitor

Browse source
This commit is contained in:
Leif Johansson 2018-02-12 20:44:43 +01:00
parent 3a7926d395
commit ecee4fd955
1 changed files with 12 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
global/overlay/etc/puppet/manifests/cosmos-site.pp
View file

@ -88,6 +88,14 @@ class webserver {
} }
} }
class service_monitor {
$nagios_ip_v4 = hiera('nagios_ip_v4')
ufw::allow { "allow-servicemonitor-from-nagios":
ip => $nagios_ip_v4,
port => '444'
}
}
class https_server { class https_server {
} }
@ -277,7 +285,7 @@ class eidas_proxy($version='1.0.0',$country='se') {
sunet::docker_run {'eidas-proxy': sunet::docker_run {'eidas-proxy':
image => 'docker.sunet.se/eidas-proxy', image => 'docker.sunet.se/eidas-proxy',
imagetag => $_version, imagetag => $_version,
ports => ['443:8443'], ports => ['443:8443','444:8444'],
volumes => ['/var/log/eidas-proxy:/var/log/eidas-proxy', volumes => ['/var/log/eidas-proxy:/var/log/eidas-proxy',
'/etc/eidas-proxy:/etc/eidas-proxy', '/etc/eidas-proxy:/etc/eidas-proxy',
'/etc/ssl:/etc/ssl'], '/etc/ssl:/etc/ssl'],
@ -288,6 +296,7 @@ class eidas_proxy($version='1.0.0',$country='se') {
"PROXY_SERVICE_COOKIEENCRYPTPW=$proxy_service_cookie_encrypt_pw"] "PROXY_SERVICE_COOKIEENCRYPTPW=$proxy_service_cookie_encrypt_pw"]
} -> } ->
class {'webserver': } -> class {'webserver': } ->
class {'servicemonitor': } ->
class {'https_server': } class {'https_server': }
} }
@ -298,13 +307,14 @@ class prid($version="1.0.0") {
image => 'docker.sunet.se/prid-service', image => 'docker.sunet.se/prid-service',
imagetag => $_version, imagetag => $_version,
hostname => "$hostname", hostname => "$hostname",
ports => ['443:8443'], ports => ['443:8443','444:8444'],
volumes => ['/etc/prid-service:/etc/prid-service', volumes => ['/etc/prid-service:/etc/prid-service',
'/etc/ssl:/etc/ssl'], '/etc/ssl:/etc/ssl'],
env => ["PRID_SERVICE_POLICY_CONFIGURATION=file:///etc/prid-service/policy.properties", env => ["PRID_SERVICE_POLICY_CONFIGURATION=file:///etc/prid-service/policy.properties",
"CERTNAME=${hostname}_infra"] "CERTNAME=${hostname}_infra"]
} -> } ->
class {'webserver': } -> class {'webserver': } ->
class {'servicemonitor': } ->
class {'https_server': } class {'https_server': }
} }