24 Commits

Author SHA1 Message Date
raucao 5cc6347e2b Remove decommissioned nodes 2026-07-05 17:13:20 +02:00
raucao fa6d288a70 Remove newline from all node files
Was actually added by manually editing the files, but Chef writes them
without newline, so our sanitization script also does it that way
2026-07-05 17:13:16 +02:00
raucao 6e617862dd Add pre-commit hook for sanitizing node configs 2026-07-05 17:12:21 +02:00
raucao 7529353753 Add util script for sanitizing nodes
Deletes the "override" and "default" properties, which may contain
sensitive data
2026-07-05 17:12:20 +02:00
raucao d7314b6af3 Add altermanager section to prometheus config 2026-07-05 17:12:20 +02:00
raucao 20e999f62b Set node name as prometheus instance name
And DRY up the recipe so it's easy and expressive to add more
metrics/targets
2026-07-05 17:12:20 +02:00
raucao 518acf5c39 Use full domain as fqdn for leo 2026-07-05 17:12:19 +02:00
raucao 16ff8faa85 Update node configs 2026-07-05 17:12:19 +02:00
raucao 08f0ba667f Scrape garage metrics 2026-07-05 17:12:19 +02:00
raucao 9df4c55684 Remove old garage nodes 2026-07-05 17:12:18 +02:00
raucao 0d856004a5 Add all nodes with base role as node exporter targets 2026-07-05 17:12:18 +02:00
raucao e99d10502f Add prometheus node exporter to base role 2026-07-05 17:12:18 +02:00
raucao 2f4aa1d790 Use base role instead of recipe in all runlists 2026-07-05 17:12:17 +02:00
raucao 4c770cc51f Remove upstream prometheus cookbook, migrate to our own 2026-07-05 17:12:17 +02:00
raucao fa5bc1610d Re-add global config, change values 2026-07-05 17:12:17 +02:00
raucao a9f4c1bd98 Apply changed configs to prometheus and alertmanager 2026-07-05 17:12:16 +02:00
raucao 58203d403a WIP Add node exporter 2026-07-05 17:12:16 +02:00
raucao 34e4bfd31c Remove obsolete CLI option
Was left over from trying to overwrite the defaults before
2026-07-05 17:12:16 +02:00
greg 1f42e693ac WIP Initial kosmos_prometheus wrapper cookbook 2026-07-05 17:12:15 +02:00
greg 71c2430b2f Add community prometheus cookbook 2026-07-05 17:12:15 +02:00
raucao f1fcd7681d Set Chef environment for node 2026-07-05 17:12:15 +02:00
raucao d6d9970b2e Add prometheus node 2026-07-05 17:12:14 +02:00
raucao 3e6faf34c4 Use private IP for ejabber Tor proxy targets 2026-07-04 13:28:25 +02:00
raucao 13b61a3639 Remove node 2026-07-04 12:45:16 +02:00
5 changed files with 4 additions and 140 deletions
-4
View File
@@ -1,4 +0,0 @@
{
"name": "rsk-testnet-5",
"public_key": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/UHlgcSeh9Do7CTCKXC\n/4/aO2OvT+ijDVmrMYCNtE4sMeuFqKPnV1zxJZmRm4VNhkSQDkdWYD+6XvuFYW60\nyjB/N6D5lLlyjG4HD6fTkfh0K6f7t5mOYV7o4T59OoA3cBZuSROjtWmJ8jEFJ+k9\nII2kcyhPQcFN01ckzvZKRSPbVRccMoc+AKTjB3ZUfs/ERtlVoDrK4jEHluXOxUJO\nBKCcLonjJuLlpRLh7QfKrKFcR4idn5Ir43R6aSUesI/ipKwKsXnR3Bu7vXp74VF3\nMJ3EkdSBG+qJzy51fbRfQiUPAr/vSoVQZwW7FkIhIqqLkMaYCymn7qKfTGujoNU7\nlwIDAQAB\n-----END PUBLIC KEY-----\n"
}
-4
View File
@@ -1,4 +0,0 @@
{
"name": "uploads-1",
"public_key": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJwWaz8TeGv3SFlKzLMx\nqN8GTL/c0N9ppBvv8xNSS/yF9Y40SbL418uxYzm9hIhOXgIygIgLT2EKIXX32t+R\neOJCdYycQFM3At2fhMkjhuUW0gmDRcYBcBJLC5hLh2EZ+A8V7k4qgrBpPLOjEv48\nhQY0vuAw2DGndWr4QLh5NLUmQiOrfuzcZSSNCBOTIgUZgNmRd9QcCHDq4WDH3poa\nosJo4a9JGEGUL1irOivvEdyJPwEd2f++nYAdWwj8pjCYgpRshQlLhxOlylMx7MxB\nQt2bgJC9sahfbfJCOqdlCU3DMJL0bRUiuxK77WeSsxWBJmrsiF3+Ljs2Ix+s7fnS\nywIDAQAB\n-----END PUBLIC KEY-----\n"
}
-61
View File
@@ -1,61 +0,0 @@
{
"name": "rsk-testnet-5",
"normal": {
"knife_zero": {
"host": "10.1.1.194"
}
},
"automatic": {
"fqdn": "rsk-testnet-5",
"os": "linux",
"os_version": "5.4.0-1103-kvm",
"hostname": "rsk-testnet-5",
"ipaddress": "192.168.122.171",
"roles": [
"base",
"kvm_guest",
"rskj_testnet"
],
"recipes": [
"kosmos-base",
"kosmos-base::default",
"kosmos_kvm::guest",
"kosmos_rsk::rskj",
"apt::default",
"timezone_iii::default",
"timezone_iii::debian",
"ntp::default",
"ntp::apparmor",
"kosmos-base::systemd_emails",
"apt::unattended-upgrades",
"kosmos-base::firewall",
"kosmos-postfix::default",
"postfix::default",
"postfix::_common",
"postfix::_attributes",
"postfix::sasl_auth",
"hostname::default",
"kosmos_rsk::firewall",
"firewall::default"
],
"platform": "ubuntu",
"platform_version": "20.04",
"cloud": null,
"chef_packages": {
"chef": {
"version": "18.3.0",
"chef_root": "/opt/chef/embedded/lib/ruby/gems/3.1.0/gems/chef-18.3.0/lib",
"chef_effortless": null
},
"ohai": {
"version": "18.1.4",
"ohai_root": "/opt/chef/embedded/lib/ruby/gems/3.1.0/gems/ohai-18.1.4/lib/ohai"
}
}
},
"run_list": [
"role[base]",
"role[kvm_guest]",
"role[rskj_testnet]"
]
}
-67
View File
@@ -1,67 +0,0 @@
{
"name": "uploads-1",
"normal": {
"knife_zero": {
"host": "10.1.1.98"
}
},
"automatic": {
"fqdn": "uploads-1",
"os": "linux",
"os_version": "5.4.0-128-generic",
"hostname": "uploads-1",
"ipaddress": "192.168.122.230",
"roles": [
"kvm_guest"
],
"recipes": [
"kosmos-base",
"kosmos-base::default",
"kosmos_kvm::guest",
"kosmos-ejabberd::upload_service",
"apt::default",
"timezone_iii::default",
"timezone_iii::debian",
"ntp::default",
"ntp::apparmor",
"kosmos-base::systemd_emails",
"apt::unattended-upgrades",
"kosmos-base::firewall",
"kosmos-postfix::default",
"postfix::default",
"postfix::_common",
"postfix::_attributes",
"postfix::sasl_auth",
"hostname::default",
"kosmos-nginx::with_perl",
"nginx::default",
"nginx::package",
"nginx::ohai_plugin",
"nginx::repo",
"nginx::commons",
"nginx::commons_dir",
"nginx::commons_script",
"nginx::commons_conf",
"kosmos-nginx::firewall",
"kosmos-base::letsencrypt"
],
"platform": "ubuntu",
"platform_version": "20.04",
"cloud": null,
"chef_packages": {
"chef": {
"version": "15.14.0",
"chef_root": "/opt/chef/embedded/lib/ruby/gems/2.6.0/gems/chef-15.14.0/lib"
},
"ohai": {
"version": "15.12.0",
"ohai_root": "/opt/chef/embedded/lib/ruby/gems/2.6.0/gems/ohai-15.12.0/lib/ohai"
}
}
},
"run_list": [
"role[base]",
"role[kvm_guest]",
"recipe[kosmos-ejabberd::upload_service]"
]
}
@@ -10,10 +10,10 @@ tor_service "ejabberd" do
public_key tor_services['ejabberd']['public_key']
secret_key tor_services['ejabberd']['secret_key']
# TODO configure IP from node attribute
# (This is hardcoded for draco atm)
ports [ "5222 148.251.237.73:5222",
"5223 148.251.237.73:5223",
"5269 148.251.237.73:5269" ]
# (This is hardcoded for ejabberd-4 atm)
ports [ "5222 10.1.1.113:5222",
"5223 10.1.1.113:5223",
"5269 10.1.1.113:5269" ]
end
tor_service "web" do