parents: gw-ubcece
hostgroups: layer3-infrastructure
gw-cecsit:
- address: 150.203.164.38
+ address: 150.203.164.1
parents: gw-ubcece
hostgroups: layer3-infrastructure
gw-arm:
address: 82.195.75.126
parents: gw-ubcece
hostgroups: layer3-infrastructure
+ gw-man-da2:
+ address: 82.195.78.116
+ parents: gw-ubcece
+ hostgroups: layer3-infrastructure
gw-marist:
address: 148.100.88.1
parents: gw-ubcece
address: 206.12.19.254
hostgroups: layer3-infrastructure
contacts: lfilipoz
- gw-ugent:
- address: 193.191.17.50
- parents: gw-ubcece
- hostgroups: layer3-infrastructure
gw-umn:
address: 128.101.240.222
parents: gw-ubcece
address: 141.170.6.155
parents: gw-aql
hostgroups: computers, buildd, jessie, nfs-client
+ mips-aql-06:
+ address: 141.170.6.157
+ parents: gw-aql
+ hostgroups: computers, buildd, jessie, hassrvfs
minkus:
address: 141.170.6.151
parents: gw-aql
bm-bl9:
address: 5.153.231.249
parents: gw-bytemark
- hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
+ hostgroups: computers, bm-bl, service, jessie
bm-bl10:
address: 5.153.231.250
parents: gw-bytemark
- hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
+ hostgroups: computers, bm-bl, service, jessie
bm-bl11:
address: 5.153.231.251
parents: gw-bytemark
- hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
+ hostgroups: computers, bm-bl, service, jessie
bm-bl12:
address: 5.153.231.252
parents: gw-bytemark
- hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
+ hostgroups: computers, bm-bl, service, jessie
+ bm-bl13:
+ address: 5.153.231.253
+ parents: gw-bytemark
+ hostgroups: computers, bm-bl, service, jessie
+ bm-bl14:
+ address: 5.153.231.254
+ parents: gw-bytemark
+ hostgroups: computers, bm-bl, service, jessie
milanollo:
address: 5.153.231.2
parents: gw-bytemark
- hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, nfs-server, xinetd-hosts
+ hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, apache-https, nfs-server, xinetd-hosts
milanollo2:
address: 5.153.231.9
parents: milanollo
philp:
address: 5.153.231.13
parents: ganeti-bytemark
- hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts
+ hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts, apache-https
rainier:
address: 5.153.231.16
parents: ganeti-bytemark
delfin:
address: 5.153.231.17
parents: ganeti-bytemark
- hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts, nfs-client, autofs
+ hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts, apache-https, nfs-client, autofs
wuiet:
address: 5.153.231.18
parents: ganeti-bytemark
petrova:
address: 5.153.231.25
parents: ganeti-bytemark
- hostgroups: computers, kvmdomains, jessie, apache2-hosts
+ hostgroups: computers, kvmdomains, jessie, apache2-hosts, apache-https
oyens:
address: 5.153.231.26
parents: ganeti-bytemark
address: 5.153.231.28
parents: ganeti-bytemark
hostgroups: computers, service, kvmdomains, jessie, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https
- portman:
- address: 5.153.231.29
- parents: ganeti-bytemark
- hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts
paradis:
address: 5.153.231.30
parents: ganeti-bytemark
address: 5.153.231.32
parents: ganeti-bytemark
hostgroups: computers, kvmdomains, jessie, no-bacula
+ tate:
+ address: 5.153.231.33
+ parents: ganeti-bytemark
+ hostgroups: computers, service, kvmdomains, jessie, autofs, nfs-client, apache2-hosts, apache-https
gideon:
address: 5.153.231.34
parents: ganeti-bytemark
httpredir-bm-01:
address: 5.153.231.35
parents: ganeti-bytemark
- hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
+ hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, hassrvfs
lindsay:
address: 5.153.231.36
parents: ganeti-bytemark
address: 5.153.231.40
parents: ganeti-bytemark
hostgroups: computers, service, kvmdomains, jessie, hassrvfs, nfs-client, autofs
- pittar:
- address: 5.153.231.41
- parents: ganeti-bytemark
- hostgroups: computers, service, kvmdomains, jessie, hassrvfs, nfs-client, autofs #, apache2-hosts
pinel:
address: 5.153.231.42
parents: ganeti-bytemark
address: 5.153.231.43
parents: ganeti-bytemark
hostgroups: computers, service, kvmdomains, jessie, hassrvfs
+ manziarly:
+ address: 5.153.231.44
+ parents: ganeti-bytemark
+ hostgroups: computers, service, kvmdomains, jessie, autofs, nfs-client, apache2-hosts, apache-https
# }}}
# {{{ gw-c3sl
santoro:
address: 194.177.211.205
parents: ganeti-grnet
hostgroups: computers, service, hassrvfs, kvmdomains, jessie, postgres94-hosts, apache2-hosts, apache-https
+ boott:
+ address: 194.177.211.206
+ parents: ganeti-grnet
+ hostgroups: computers, service, hassrvfs, kvmdomains, jessie
+ porta:
+ address: 194.177.211.207
+ parents: ganeti-grnet
+ hostgroups: computers, service, hassrvfs, kvmdomains, jessie
# }}}
# {{{ gw-isc
schein:
mirror-isc:
address: 149.20.20.7
parents: gw-isc
- hostgroups: computers, service, apache2-hosts, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror
+ hostgroups: computers, service, apache2-hosts, apache-https, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror
mirror-isc2:
address: 149.20.20.19
parents: mirror-isc
hostgroups: secondary-IPs
mirror-isc3:
- address: 149.20.20.19
+ address: 149.20.20.22
parents: mirror-isc
hostgroups: secondary-IPs
mirror-isc-syncproxy:
czerny:
address: 82.195.75.109
parents: gw-man-da
- hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
+ hostgroups: computers, service, dl380, acpid-hosts, jessie, drbd-hosts
clementi:
address: 82.195.75.103
parents: gw-man-da
- hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
+ hostgroups: computers, service, dl380, acpid-hosts, jessie, drbd-hosts
bendel:
address: 82.195.75.100
parents: ganeti3
wolkenstein:
address: 82.195.75.65
parents: ganeti3
- hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, jessie
+ hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, apache2-hosts, jessie, apache-https
mipsel-manda-01:
address: 82.195.75.72
parents: gw-man-da
glinka:
address: 206.12.19.126
parents: ganeti2
- hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts
+ hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, apache-https, nfs-client, autofs, xinetd-hosts
tye:
address: 206.12.19.129
parents: ganeti2
- hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs
+ hostgroups: computers, service, kvmdomains, jessie, heavy-exim, apache2-hosts, apache-https, nfs-client, autofs, hassrvfs
elgar:
address: 206.12.19.130
parents: ganeti2
sonntag:
address: 206.12.19.142
parents: ganeti2
- hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
+ hostgroups: computers, service, kvmdomains, jessie, nfs-client, autofs
menotti:
address: 206.12.19.143
parents: ganeti2
parents: ganeti2
hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, heavy-exim, postgres94-hosts, hasvarlogfs, apache-https, spamd, nfs-server
# }}}
- # {{{ gw-ugent
- # }}}
# {{{ gw-umn
#saens:
# address: 128.101.240.212
mirror-umn:
address: 128.101.240.212
parents: gw-umn
- hostgroups: computers, service, apache2-hosts, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror
+ hostgroups: computers, service, apache2-hosts, apache-https, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror
mirror-umn2:
address: 128.101.240.215
parents: mirror-umn
klecker:
address: 130.89.148.10
parents: gw-utwente
- hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, xinetd-hosts, jessie, incomingmailrelayed2025, hassrvfs
+ hostgroups: computers, service, apache2-hosts, apache-https, rsyncd-hosts, dl380, xinetd-hosts, jessie, incomingmailrelayed2025, hassrvfs
klecker-ftp:
address: 130.89.148.12
parents: klecker
alioth:
alias: machines that just are just awkward
private: 1
- openstack-compute:
- alias: nodes that run OpenStack compute
- private: 1
+ #openstack-compute:
+ # alias: nodes that run OpenStack compute
+ # private: 1
openstack-controller:
alias: nodes that run OpenStack controller
private: 1
servicegroups: diskspace
nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -X nfs4 --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount|/proc/sys/fs/binfmt_misc'"
hostgroups: computers
- excludehosts: sibelius
+ excludehosts: sibelius, rietz
-
name: disk usage - all
servicegroups: diskspace
nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv/farm-snapshot/farm-misc 95 98"
hosts: sibelius
+ -
+ name: disk usage - all
+ servicegroups: diskspace
+ nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv -x /home 95 98"
+ hosts: rietz
-
name: disk usage on /
excludehostgroups: buildd, porterbox, no-bacula
check_interval: 60
retry_check_interval: 15
+ -
+ name: process - bacula-dir
+ servicegroups: backup
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-dir -a '/usr/sbin/bacula-dir -c /etc/bacula/bacula-dir.conf'"
+ hosts: dinis
-
name: process - bacula-fd
servicegroups: backup
hostgroups: computers
excludehostgroups: freebsd, alioth
excludehosts: czerny, grnet-node01, storace, ubc-bl2
+ ###
+ -
+ name: process - rngd
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd -a '/usr/sbin/rngd -r /dev/hwrng'"
+ hostgroups: kvmdomains
# }}}
# {{{ anti-services
-
name: "sso CRL"
nrpe: "if [ -e /var/lib/dsa/sso/ca.crl ]; then /usr/lib/nagios/plugins/dsa-check-crl-expire -w 129600 -c 86400 /var/lib/dsa/sso/ca.crl; else echo 'No sso/ca.crl on this host.'; fi"
hostgroups: computers
+ -
+ name: SSL certs - puppet
+ hosts: global
+ remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/servicecerts"
+ runfrom: handel
+ -
+ name: SSL certs - LE
+ hosts: global
+ remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/from-letsencrypt"
+ runfrom: handel
# }}}
# {{{ HW health/raid
-
# name: process - openstack - nova-api
# nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
# hostgroups: openstack-controller
- -
- name: process - openstack - nova-compute
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
- hostgroups: openstack-compute
+# -
+# name: process - openstack - nova-compute
+# nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
+# hostgroups: openstack-compute
# -
# name: process - openstack - nova-cert
# nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"