jcline/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

Zabbix: port remaining SSL checks over from Nagios

Browse source 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
This commit is contained in:
Greg Sutcliffe 2026-05-21 11:07:10 +01:00
commit 5d331ca6e3
Signed by: gwmngilfen
SSH key fingerprint: SHA256:dNHcz65ApR68w2TkCIAXDBdt4oNL62Fyx48U7dXWuk0
2 changed files with 6 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

36
roles/nagios_server/files/nagios/services/ssl.cfg
View file

@ -1,36 +0,0 @@
define service {
hostgroup_name oneproxy
service_description https-admin.fedoraproject.org
check_command check_ssl_cert!admin.fedoraproject.org!60
use defaulttemplate
}
define service {
hostgroup_name oneproxy
service_description https-translate.fedoraproject.org-cert
check_command check_ssl_cert!translate.fedoraproject.org!60
use defaulttemplate
}
define service {
host_name pagure.io
service_description https-pagure-cert
check_command check_ssl_cert!pagure.io!25
use defaulttemplate
}
define service {
host_name stg.pagure.io
service_description https-pagure-stg-cert
check_command check_ssl_cert!stg.pagure.io!25
use defaulttemplate
}
# ocp4 cluster stg
define service {
host_name retrace.fedoraproject.org
service_description http-cert-retrace.fedoraproject.org
check_command check_ssl_cert!retrace.fedoraproject.org!25
use defaulttemplate
}

7
roles/zabbix/sslchecks/tasks/main.yml
View file

@ -2,13 +2,17 @@
- name: Create SSL checks for other hosts
include_tasks: sslcheck.yml
loop:
- { name: '*.apps.ocp.fedoraproject.org', cert: 'console-openshift-console.apps.ocp.fedoraproject.org', port: '443' }
- { name: '*.fedorapeople.org', cert: 'fedorapeople.org', port: '443' }
- { name: '*.fedoraproject.org', cert: 'fedoraproject.org', port: '443' }
- { name: '*.apps.ocp.fedoraproject.org', cert: 'console-openshift-console.apps.ocp.fedoraproject.org', port: '443' }
- { name: 'admin.fedoraproject.org', cert: 'admin.fedoraproject.org', port: '443' }
- { name: 'api.ocp.fedoraproject.org', cert: 'api.ocp.fedoraproject.org', port: '6443' }
- { name: 'pagure.io', cert: 'pagure.io', port: '443' }
- { name: 'raw-updates.coreos.fedoraproject.org', cert: 'raw-updates.coreos.fedoraproject.org', port: '443' }
- { name: 'retrace.fedoraproject.org', cert: 'retrace.fedoraproject.org', port: '443' }
- { name: 'status.raw-updates.coreos.fedoraproject.org', cert: 'status.raw-updates.coreos.fedoraproject.org', port: '443' }
- { name: 'status.updates.coreos.fedoraproject.org', cert: 'status.updates.coreos.fedoraproject.org', port: '443' }
- { name: 'translate.fedoraproject.org', cert: 'translate.fedoraproject.org', port: '443' }
- { name: 'updates.coreos.fedoraproject.org', cert: 'updates.coreos.fedoraproject.org', port: '443' }
- { name: 'whatcanidoforfedora.org', cert: 'whatcanidoforfedora.org', port: '443' }
tags:
@ -20,6 +24,7 @@
loop:
- { name: '*.apps.ocp.stg.fedoraproject.org', cert: 'console-openshift-console.apps.ocp.stg.fedoraproject.org', port: '443' }
- { name: 'api.ocp.stg.fedoraproject.org', cert: 'api.ocp.stg.fedoraproject.org', port: '6443' }
- { name: 'stg.pagure.io', cert: 'stg.pagure.io', port: '443' }
tags:
- zabbix_api
when: inventory_hostname == 'zabbix01.stg.rdu3.fedoraproject.org'