puppet-prod/hieradata/roles/infra/metrics/vmagent.yaml
Ben Vincent 6c2bad9806
All checks were successful
Build / precommit (pull_request) Successful in 3m23s
feat: add vmcluster module
- manage vmstorage package, service and environment file
- manage vmselect package, service and environment file
- manage vminsert package, service and environment file
- manage vmagent package, service and environment file
- manage options for vmstorage, vmselect, vminsert, vmagent role
2025-07-26 18:04:49 +10:00

58 lines
1.5 KiB
YAML

---
hiera_include:
- vmcluster::vmagent
vmcluster::vmagent::enable: true
vmcluster::vmagent::options:
tls: 'true'
tlsCertFile: '/etc/pki/tls/vault/certificate.crt'
tlsKeyFile: '/etc/pki/tls/vault/private.key'
tlsMinVersion: 'TLS12'
remoteWrite.url:
- https://vminsert.service.consul:8480/insert/0/prometheus
remoteWrite.tlsCertFile: '/etc/pki/tls/vault/certificate.crt'
remoteWrite.tlsKeyFile: '/etc/pki/tls/vault/private.key'
remoteWrite.tlsCAFile: '/etc/pki/tls/certs/ca-bundle.crt'
promscrape.config: '/etc/vmagent/scrape.yaml'
memory.allowedBytes: '1GiB'
envflag.enable: 'true'
# additional altnames
profiles::pki::vault::alt_names:
- vmagent.main.unkin.net
- vmagent.service.consul
- vmagent.query.consul
- "vmagent.service.%{facts.country}-%{facts.region}.consul"
consul::services:
vmagent:
service_name: 'vmagent'
tags:
- 'metrics'
- 'metrics_scheme=https'
- 'metrics_job=vmagent'
address: "%{facts.networking.ip}"
port: 8429
checks:
- id: 'vmagent_http_check'
name: 'vmagent HTTP Check'
http: "https://%{facts.networking.fqdn}:8429/health"
method: 'GET'
tls_skip_verify: true
interval: '10s'
timeout: '1s'
profiles::consul::client::node_rules:
- resource: service
segment: vmagent
disposition: write
- resource: agent_prefix
segment: ''
disposition: read
- resource: node_prefix
segment: ''
disposition: read
- resource: service_prefix
segment: ''
disposition: read