Franziska Kunsmann
40a9ac4523
All checks were successful
kunsi/bundlewrap/pipeline/head This commit looks good
74 lines
1.9 KiB
Python
74 lines
1.9 KiB
Python
from os.path import join
|
|
|
|
check_commands = {}
|
|
|
|
for _, bundle_config in node.metadata.get('icinga2_api', {}).items():
|
|
for service, service_config in bundle_config.get('services', {}).items():
|
|
# The default for check_command is also set in metadata.py
|
|
# and in icinga2 bundle
|
|
if (
|
|
service_config.get('check_command', 'sshmon') == 'sshmon' and
|
|
'vars.sshmon_command' in service_config and
|
|
'command_on_monitored_host' in service_config
|
|
):
|
|
check_commands[service_config['vars.sshmon_command']] = service_config['command_on_monitored_host']
|
|
|
|
|
|
users = {
|
|
'sshmon': {
|
|
'password_hash': 'x',
|
|
'home': '/home/sshmon',
|
|
},
|
|
}
|
|
|
|
with open(join(repo.path, 'data', 'sshmon', 'sshmon.pub'), 'r') as fp:
|
|
pubkey = fp.read().strip()
|
|
|
|
files = {
|
|
'/etc/sshmon.cfg': {
|
|
'content_type': 'mako',
|
|
'context': {
|
|
'check_commands': check_commands,
|
|
},
|
|
},
|
|
'/etc/sudoers.d/sshmon': {
|
|
'source': 'sudoers',
|
|
'content_type': 'mako',
|
|
'context': {
|
|
'check_commands': check_commands,
|
|
},
|
|
},
|
|
'/usr/local/sbin/sshmon': {
|
|
'mode': '0755',
|
|
},
|
|
'/home/sshmon/.ssh/authorized_keys': {
|
|
'content': 'command="/usr/local/sbin/sshmon" {}\n'.format(pubkey),
|
|
'owner': 'sshmon',
|
|
'mode': '0400',
|
|
},
|
|
}
|
|
|
|
for check in {
|
|
'cpu_stats',
|
|
'github_for_new_release',
|
|
'http_url_for_string',
|
|
'http_wget',
|
|
'https_certificate_at_url',
|
|
'mounts',
|
|
'oom_killer',
|
|
'pypi_for_new_release',
|
|
'ram',
|
|
'systemd_unit',
|
|
}:
|
|
files["/usr/local/share/icinga/plugins/check_{}".format(check)] = {
|
|
'mode': "0755",
|
|
}
|
|
|
|
|
|
if node.has_bundle('pacman'):
|
|
symlinks['/usr/lib/nagios/plugins'] = {
|
|
'target': '/usr/lib/monitoring-plugins',
|
|
'needs': {
|
|
'pkg_pacman:monitoring-plugins',
|
|
},
|
|
}
|