unkinben
c5d321efac
ci/woodpecker/pr/ruby-validate Pipeline was successful
ci/woodpecker/pr/puppet-lint Pipeline was successful
ci/woodpecker/pr/yamllint Pipeline was successful
ci/woodpecker/pr/bolt-validate Pipeline was successful
ci/woodpecker/pr/erb-validate Pipeline was successful
ci/woodpecker/pr/epp-validate Pipeline was successful
ci/woodpecker/pr/puppet-validate Pipeline was successful
ci/woodpecker/pr/ruby-check Pipeline was successful
Pin grafana package version to 13.0.2 via a new version parameter on profiles::metrics::grafana, wired through to the puppet-grafana class.
60 lines
2.0 KiB
YAML
60 lines
2.0 KiB
YAML
---
|
|
hiera_include:
|
|
- profiles::nginx::simpleproxy
|
|
|
|
profiles::sql::postgresdb::cluster_name: "patroni-shared-%{facts.environment}"
|
|
profiles::sql::postgresdb::dbname: grafana
|
|
profiles::sql::postgresdb::dbuser: grafana
|
|
profiles::metrics::grafana::db_host: "master.%{hiera('profiles::sql::postgresdb::cluster_name')}.service.%{facts.country}-%{facts.region}.consul"
|
|
profiles::metrics::grafana::db_port: 5432
|
|
profiles::metrics::grafana::db_name: "%{hiera('profiles::sql::postgresdb::dbname')}"
|
|
profiles::metrics::grafana::db_user: "%{hiera('profiles::sql::postgresdb::dbuser')}"
|
|
profiles::metrics::grafana::db_pass: "%{hiera('profiles::sql::postgresdb::dbpass')}"
|
|
profiles::metrics::grafana::pgsql_backend: true
|
|
profiles::metrics::grafana::version: '13.0.2'
|
|
profiles::metrics::grafana::plugins:
|
|
victoriametrics-logs-datasource:
|
|
ensure: present
|
|
|
|
# additional altnames
|
|
profiles::pki::vault::alt_names:
|
|
- grafana.unkin.net
|
|
- grafana.service.consul
|
|
- grafana.query.consul
|
|
- "grafana.service.%{facts.country}-%{facts.region}.consul"
|
|
|
|
profiles::ssh::sign::principals:
|
|
- grafana.unkin.net
|
|
- grafana.service.consul
|
|
- grafana.query.consul
|
|
|
|
consul::services:
|
|
grafana:
|
|
service_name: 'grafana'
|
|
tags:
|
|
- 'grafana'
|
|
address: "%{facts.networking.ip}"
|
|
port: 443
|
|
checks:
|
|
- id: 'Grafana_https_check'
|
|
name: 'Grafana HTTPS Check'
|
|
http: "https://%{facts.networking.fqdn}:443"
|
|
method: 'GET'
|
|
tls_skip_verify: true
|
|
interval: '10s'
|
|
timeout: '1s'
|
|
profiles::consul::client::node_rules:
|
|
- resource: service
|
|
segment: grafana
|
|
disposition: write
|
|
|
|
# manage a simple nginx reverse proxy
|
|
profiles::nginx::simpleproxy::nginx_vhost: 'grafana.query.consul'
|
|
profiles::nginx::simpleproxy::nginx_aliases:
|
|
- grafana.unkin.net
|
|
- grafana.service.consul
|
|
- grafana.query.consul
|
|
- "grafana.service.%{facts.country}-%{facts.region}.consul"
|
|
profiles::nginx::simpleproxy::proxy_port: 8080
|
|
profiles::nginx::simpleproxy::proxy_path: '/'
|