kosmos/chef
8
3
Fork 0
Code Issues 38 Pull Requests Projects 2 Activity

Sanitize node configs via script, and do it automatically in a Git hook #633

Closed
raucao wants to merge 24 commits from dev/sanitize_nodes into feature/prometheus_cookbook
pull from: dev/sanitize_nodes
merge into: kosmos:feature/prometheus_cookbook
Conversation 0 Commits 24 Files Changed 56
+788 -400
raucao commented 2026-07-05 12:32:28 +00:00
Owner
Copy Link
Copy Source

Adds a new util script for sanitizing node config JSON files (requires jq), and a pre-commit hook that runs it on staged files in nodes/ and asks to re-stage the files in case they have been sanitized by the hook.

Check the README change for adding the hook on your machine(s).

Adds a new util script for sanitizing node config JSON files (requires `jq`), and a pre-commit hook that runs it on staged files in `nodes/` and asks to re-stage the files in case they have been sanitized by the hook. Check the README change for adding the hook on your machine(s).
raucao added the dev environmentsecurity labels 2026-07-05 12:32:28 +00:00
raucao requested review from greg 2026-07-05 12:32:33 +00:00
raucao added the kredits-2 label 2026-07-05 12:32:37 +00:00
raucao changed title from Sanitize nodes to Sanitize node configs via script, and do it automatically in a Git hook 2026-07-05 12:33:52 +00:00
raucao added 24 commits 2026-07-05 15:13:51 +00:00
Remove node 13b61a3639
Use private IP for ejabber Tor proxy targets 3e6faf34c4
Add prometheus node d6d9970b2e
Set Chef environment for node f1fcd7681d
Add community prometheus cookbook 71c2430b2f
WIP Initial kosmos_prometheus wrapper cookbook 1f42e693ac
Remove obsolete CLI option 34e4bfd31c 
Was left over from trying to overwrite the defaults before
WIP Add node exporter 58203d403a
Apply changed configs to prometheus and alertmanager a9f4c1bd98
Re-add global config, change values fa5bc1610d
Remove upstream prometheus cookbook, migrate to our own 4c770cc51f
Use base role instead of recipe in all runlists 2f4aa1d790
Add prometheus node exporter to base role e99d10502f
Add all nodes with base role as node exporter targets 0d856004a5
Remove old garage nodes 9df4c55684
Scrape garage metrics 08f0ba667f
Update node configs 16ff8faa85
Use full domain as fqdn for leo 518acf5c39
Set node name as prometheus instance name 20e999f62b 
And DRY up the recipe so it's easy and expressive to add more
metrics/targets
Add altermanager section to prometheus config d7314b6af3
Add util script for sanitizing nodes 7529353753 
Deletes the "override" and "default" properties, which may contain
sensitive data
Add pre-commit hook for sanitizing node configs 6e617862dd
Remove newline from all node files fa6d288a70 
Was actually added by manually editing the files, but Chef writes them
without newline, so our sanitization script also does it that way
Remove decommissioned nodes 5cc6347e2b
raucao force-pushed dev/sanitize_nodes from 4bcbeaf1a8 to 5cc6347e2b 2026-07-05 15:13:51 +00:00 Compare
raucao closed this pull request 2026-07-05 15:14:42 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
greg
Labels
Clear labels
service
discourse
Kosmos Community Forums
monitoring
Infrastructure metrics, alerts, notifications, etc.
service
accounts
Kosmos Accounts
service
drone-ci
Kosmos Drone CI
service
email
mail.kosmos.org
service
garage
S3-compatible object storage
service
gitea
Kosmos Gitea
service
ipfs
Kosmos IPFS
service
mastodon
kosmos.social
service
nostr
Relays, Blossom server, etc.
service
postgres
Database cluster
service
remotestorage
Portable data storage for the Web
service
wiki
Kosmos Wiki
service
xmpp
Kosmos Chat
bug
Something is not working
 design
Graphic/visual design
 dev environment
Config, builds, CI, deployment, etc.
 docs
Documentation
 duplicate
This issue or pull request already exists
 enhancement
Improving existing functionality
 feature
New functionality
 good first issue
Dive in, and start contributing
 idea
Something to consider
 invalid
Not a bug
 kredits-1
Small contribution
 kredits-2
Medium contribution
 kredits-3
Large contribution
 on hold
Currently not actionable
 ops
Manual IT ops activities
 question
Looking for an answer
release
major
release
minor
release
patch
security
All your base are belong to us
 ui/ux
User interface, process design, etc.
 wontfix
This won't be fixed
No Label dev environment kredits-2 security
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
bkero (bkero) bumi (bumi) fsmanuel (fsmanuel) galfert (galfert) greg (Greg) hueso (hueso) raucao (Râu Cao) slvrbckt (Nick Jennings)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: kosmos/chef#633
Delete Branch "dev/sanitize_nodes"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?