X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=config%2Fnagios-master.cfg;h=9a2ba27caab25ad3bead154f0237b6fa03a246fe;hb=2230997e24a165f489edd89ae2f6ed760980b774;hp=4c455f2bc2cf5fc8fea7b41e9ebab5a91177d23a;hpb=b848b159d01d8797eb05004104213ada60d44099;p=mirror%2Fdsa-nagios.git diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg index 4c455f2..9a2ba27 100644 --- a/config/nagios-master.cfg +++ b/config/nagios-master.cfg @@ -46,7 +46,7 @@ servers: parents: gw-ubcece hostgroups: layer3-infrastructure gw-cecsit: - address: 150.203.164.38 + address: 150.203.164.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-arm: @@ -105,6 +105,10 @@ servers: address: 82.195.75.126 parents: gw-ubcece hostgroups: layer3-infrastructure + gw-man-da2: + address: 82.195.78.116 + parents: gw-ubcece + hostgroups: layer3-infrastructure gw-marist: address: 148.100.88.1 parents: gw-ubcece @@ -142,10 +146,6 @@ servers: address: 206.12.19.254 hostgroups: layer3-infrastructure contacts: lfilipoz - gw-ugent: - address: 193.191.17.50 - parents: gw-ubcece - hostgroups: layer3-infrastructure gw-umn: address: 128.101.240.222 parents: gw-ubcece @@ -230,6 +230,10 @@ servers: address: 141.170.6.155 parents: gw-aql hostgroups: computers, buildd, jessie, nfs-client + mips-aql-06: + address: 141.170.6.157 + parents: gw-aql + hostgroups: computers, buildd, jessie, hassrvfs minkus: address: 141.170.6.151 parents: gw-aql @@ -323,24 +327,32 @@ servers: bm-bl9: address: 5.153.231.249 parents: gw-bytemark - hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq + hostgroups: computers, bm-bl, service, jessie bm-bl10: address: 5.153.231.250 parents: gw-bytemark - hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq + hostgroups: computers, bm-bl, service, jessie bm-bl11: address: 5.153.231.251 parents: gw-bytemark - hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq + hostgroups: computers, bm-bl, service, jessie bm-bl12: address: 5.153.231.252 parents: gw-bytemark - hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq + hostgroups: computers, bm-bl, service, jessie + bm-bl13: + address: 5.153.231.253 + parents: gw-bytemark + hostgroups: computers, bm-bl, service, jessie + bm-bl14: + address: 5.153.231.254 + parents: gw-bytemark + hostgroups: computers, bm-bl, service, jessie milanollo: address: 5.153.231.2 parents: gw-bytemark - hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, nfs-server, xinetd-hosts + hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, apache-https, nfs-server, xinetd-hosts milanollo2: address: 5.153.231.9 parents: milanollo @@ -390,7 +402,7 @@ servers: philp: address: 5.153.231.13 parents: ganeti-bytemark - hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts + hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts, apache-https rainier: address: 5.153.231.16 parents: ganeti-bytemark @@ -402,7 +414,7 @@ servers: delfin: address: 5.153.231.17 parents: ganeti-bytemark - hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts, nfs-client, autofs + hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts, apache-https, nfs-client, autofs wuiet: address: 5.153.231.18 parents: ganeti-bytemark @@ -432,7 +444,7 @@ servers: petrova: address: 5.153.231.25 parents: ganeti-bytemark - hostgroups: computers, kvmdomains, jessie, apache2-hosts + hostgroups: computers, kvmdomains, jessie, apache2-hosts, apache-https oyens: address: 5.153.231.26 parents: ganeti-bytemark @@ -445,10 +457,6 @@ servers: address: 5.153.231.28 parents: ganeti-bytemark hostgroups: computers, service, kvmdomains, jessie, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https - portman: - address: 5.153.231.29 - parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts paradis: address: 5.153.231.30 parents: ganeti-bytemark @@ -457,6 +465,10 @@ servers: address: 5.153.231.32 parents: ganeti-bytemark hostgroups: computers, kvmdomains, jessie, no-bacula + tate: + address: 5.153.231.33 + parents: ganeti-bytemark + hostgroups: computers, service, kvmdomains, jessie, autofs, nfs-client, apache2-hosts, apache-https gideon: address: 5.153.231.34 parents: ganeti-bytemark @@ -464,7 +476,7 @@ servers: httpredir-bm-01: address: 5.153.231.35 parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts + hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, hassrvfs lindsay: address: 5.153.231.36 parents: ganeti-bytemark @@ -484,10 +496,6 @@ servers: address: 5.153.231.40 parents: ganeti-bytemark hostgroups: computers, service, kvmdomains, jessie, hassrvfs, nfs-client, autofs - pittar: - address: 5.153.231.41 - parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, jessie, hassrvfs, nfs-client, autofs #, apache2-hosts pinel: address: 5.153.231.42 parents: ganeti-bytemark @@ -496,6 +504,10 @@ servers: address: 5.153.231.43 parents: ganeti-bytemark hostgroups: computers, service, kvmdomains, jessie, hassrvfs + manziarly: + address: 5.153.231.44 + parents: ganeti-bytemark + hostgroups: computers, service, kvmdomains, jessie, autofs, nfs-client, apache2-hosts, apache-https # }}} # {{{ gw-c3sl santoro: @@ -522,16 +534,16 @@ servers: mirror-anu: address: 150.203.164.39 parents: gw-cecsit - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror, apache-https - mirror-umn2: + hostgroups: computers, service, apache2-hosts, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror, apache-https + mirror-anu2: address: 150.203.164.60 parents: mirror-anu hostgroups: secondary-IPs - mirror-umn3: + mirror-anu3: address: 150.203.164.61 parents: mirror-anu hostgroups: secondary-IPs - mirror-umn4: + mirror-anu4: address: 150.203.164.62 parents: mirror-anu hostgroups: secondary-IPs @@ -647,6 +659,14 @@ servers: address: 194.177.211.205 parents: ganeti-grnet hostgroups: computers, service, hassrvfs, kvmdomains, jessie, postgres94-hosts, apache2-hosts, apache-https + boott: + address: 194.177.211.206 + parents: ganeti-grnet + hostgroups: computers, service, hassrvfs, kvmdomains, jessie + porta: + address: 194.177.211.207 + parents: ganeti-grnet + hostgroups: computers, service, hassrvfs, kvmdomains, jessie # }}} # {{{ gw-isc schein: @@ -656,13 +676,13 @@ servers: mirror-isc: address: 149.20.20.7 parents: gw-isc - hostgroups: computers, service, apache2-hosts, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror + hostgroups: computers, service, apache2-hosts, apache-https, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror mirror-isc2: address: 149.20.20.19 parents: mirror-isc hostgroups: secondary-IPs mirror-isc3: - address: 149.20.20.19 + address: 149.20.20.22 parents: mirror-isc hostgroups: secondary-IPs mirror-isc-syncproxy: @@ -721,11 +741,11 @@ servers: czerny: address: 82.195.75.109 parents: gw-man-da - hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts + hostgroups: computers, service, dl380, acpid-hosts, jessie, drbd-hosts clementi: address: 82.195.75.103 parents: gw-man-da - hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts + hostgroups: computers, service, dl380, acpid-hosts, jessie, drbd-hosts bendel: address: 82.195.75.100 parents: ganeti3 @@ -795,7 +815,7 @@ servers: wolkenstein: address: 82.195.75.65 parents: ganeti3 - hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, jessie + hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, apache2-hosts, jessie, apache-https mipsel-manda-01: address: 82.195.75.72 parents: gw-man-da @@ -1006,11 +1026,11 @@ servers: glinka: address: 206.12.19.126 parents: ganeti2 - hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts + hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, apache-https, nfs-client, autofs, xinetd-hosts tye: address: 206.12.19.129 parents: ganeti2 - hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs + hostgroups: computers, service, kvmdomains, jessie, heavy-exim, apache2-hosts, apache-https, nfs-client, autofs, hassrvfs elgar: address: 206.12.19.130 parents: ganeti2 @@ -1034,7 +1054,7 @@ servers: sonntag: address: 206.12.19.142 parents: ganeti2 - hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs + hostgroups: computers, service, kvmdomains, jessie, nfs-client, autofs menotti: address: 206.12.19.143 parents: ganeti2 @@ -1048,8 +1068,6 @@ servers: parents: ganeti2 hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, heavy-exim, postgres94-hosts, hasvarlogfs, apache-https, spamd, nfs-server # }}} - # {{{ gw-ugent - # }}} # {{{ gw-umn #saens: # address: 128.101.240.212 @@ -1058,7 +1076,7 @@ servers: mirror-umn: address: 128.101.240.212 parents: gw-umn - hostgroups: computers, service, apache2-hosts, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror + hostgroups: computers, service, apache2-hosts, apache-https, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror mirror-umn2: address: 128.101.240.215 parents: mirror-umn @@ -1094,7 +1112,7 @@ servers: klecker: address: 130.89.148.10 parents: gw-utwente - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, xinetd-hosts, jessie, incomingmailrelayed2025, hassrvfs + hostgroups: computers, service, apache2-hosts, apache-https, rsyncd-hosts, dl380, xinetd-hosts, jessie, incomingmailrelayed2025, hassrvfs klecker-ftp: address: 130.89.148.12 parents: klecker @@ -1360,9 +1378,9 @@ hostgroups: alioth: alias: machines that just are just awkward private: 1 - openstack-compute: - alias: nodes that run OpenStack compute - private: 1 + #openstack-compute: + # alias: nodes that run OpenStack compute + # private: 1 openstack-controller: alias: nodes that run OpenStack controller private: 1 @@ -1431,12 +1449,17 @@ services: servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -X nfs4 --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount|/proc/sys/fs/binfmt_misc'" hostgroups: computers - excludehosts: sibelius + excludehosts: sibelius, rietz - name: disk usage - all servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv/farm-snapshot/farm-misc 95 98" hosts: sibelius + - + name: disk usage - all + servicegroups: diskspace + nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv -x /home 95 98" + hosts: rietz - name: disk usage on / @@ -1663,6 +1686,11 @@ services: excludehostgroups: buildd, porterbox, no-bacula check_interval: 60 retry_check_interval: 15 + - + name: process - bacula-dir + servicegroups: backup + nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-dir -a '/usr/sbin/bacula-dir -c /etc/bacula/bacula-dir.conf'" + hosts: dinis - name: process - bacula-fd servicegroups: backup @@ -1953,6 +1981,11 @@ services: hostgroups: computers excludehostgroups: freebsd, alioth excludehosts: czerny, grnet-node01, storace, ubc-bl2 + ### + - + name: process - rngd + nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd -a '/usr/sbin/rngd -r /dev/hwrng'" + hostgroups: kvmdomains # }}} # {{{ anti-services - @@ -2004,6 +2037,16 @@ services: name: "sso CRL" nrpe: "if [ -e /var/lib/dsa/sso/ca.crl ]; then /usr/lib/nagios/plugins/dsa-check-crl-expire -w 129600 -c 86400 /var/lib/dsa/sso/ca.crl; else echo 'No sso/ca.crl on this host.'; fi" hostgroups: computers + - + name: SSL certs - puppet + hosts: global + remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/servicecerts" + runfrom: handel + - + name: SSL certs - LE + hosts: global + remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/from-letsencrypt" + runfrom: handel # }}} # {{{ HW health/raid - @@ -2067,7 +2110,7 @@ services: servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-hpssacli" check_interval: 120 - hostsgroups: hpnewraid + hostgroups: hpnewraid ### # - # name: HW - edac status @@ -2699,10 +2742,10 @@ services: # name: process - openstack - nova-api # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'" # hostgroups: openstack-controller - - - name: process - openstack - nova-compute - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'" - hostgroups: openstack-compute +# - +# name: process - openstack - nova-compute +# nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'" +# hostgroups: openstack-compute # - # name: process - openstack - nova-cert # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"