X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=config%2Fnagios-master.cfg;h=ccf316da2fbafbb0e7831298f146216748d79202;hb=4963a8af1986d6bd62bbd8e8f12112ef36c06d80;hp=24dd4d4e07689db78d28984a8a3c606fb3169fc8;hpb=a9de6cbf1528ef291000ba76cdd12b020e338d1d;p=mirror%2Fdsa-nagios.git diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg index 24dd4d4..ccf316d 100644 --- a/config/nagios-master.cfg +++ b/config/nagios-master.cfg @@ -46,7 +46,7 @@ servers: parents: gw-ubcece hostgroups: layer3-infrastructure gw-cecsit: - address: 150.203.164.38 + address: 150.203.164.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-arm: @@ -105,6 +105,10 @@ servers: address: 82.195.75.126 parents: gw-ubcece hostgroups: layer3-infrastructure + gw-man-da2: + address: 82.195.78.116 + parents: gw-ubcece + hostgroups: layer3-infrastructure gw-marist: address: 148.100.88.1 parents: gw-ubcece @@ -142,16 +146,12 @@ servers: address: 206.12.19.254 hostgroups: layer3-infrastructure contacts: lfilipoz - gw-ugent: - address: 193.191.17.50 - parents: gw-ubcece - hostgroups: layer3-infrastructure gw-umn: address: 128.101.240.222 parents: gw-ubcece hostgroups: layer3-infrastructure gw-unicamp: - address: 177.220.10.65 + address: 177.220.10.129 parents: gw-ubcece hostgroups: layer3-infrastructure gw-utwente: @@ -230,6 +230,10 @@ servers: address: 141.170.6.155 parents: gw-aql hostgroups: computers, buildd, jessie, nfs-client + mips-aql-06: + address: 141.170.6.157 + parents: gw-aql + hostgroups: computers, buildd, jessie, hassrvfs minkus: address: 141.170.6.151 parents: gw-aql @@ -242,6 +246,10 @@ servers: address: 141.170.6.153 parents: gw-aql hostgroups: computers, buildd, jessie, hassrvfs, hasbootfs, sw-raid + mipsel-aql-03: + address: 141.170.6.158 + parents: gw-aql + hostgroups: computers, buildd, jessie, hassrvfs # }}} # {{{ gw-arm abel: @@ -323,24 +331,32 @@ servers: bm-bl9: address: 5.153.231.249 parents: gw-bytemark - hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq + hostgroups: computers, bm-bl, service, jessie bm-bl10: address: 5.153.231.250 parents: gw-bytemark - hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq + hostgroups: computers, bm-bl, service, jessie bm-bl11: address: 5.153.231.251 parents: gw-bytemark - hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq + hostgroups: computers, bm-bl, service, jessie bm-bl12: address: 5.153.231.252 parents: gw-bytemark - hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq + hostgroups: computers, bm-bl, service, jessie + bm-bl13: + address: 5.153.231.253 + parents: gw-bytemark + hostgroups: computers, bm-bl, service, jessie + bm-bl14: + address: 5.153.231.254 + parents: gw-bytemark + hostgroups: computers, bm-bl, service, jessie milanollo: address: 5.153.231.2 parents: gw-bytemark - hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, nfs-server, xinetd-hosts + hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, apache-https, nfs-server, xinetd-hosts milanollo2: address: 5.153.231.9 parents: milanollo @@ -390,7 +406,7 @@ servers: philp: address: 5.153.231.13 parents: ganeti-bytemark - hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts + hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts, apache-https rainier: address: 5.153.231.16 parents: ganeti-bytemark @@ -402,7 +418,7 @@ servers: delfin: address: 5.153.231.17 parents: ganeti-bytemark - hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts, nfs-client, autofs + hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts, apache-https, nfs-client, autofs wuiet: address: 5.153.231.18 parents: ganeti-bytemark @@ -432,7 +448,7 @@ servers: petrova: address: 5.153.231.25 parents: ganeti-bytemark - hostgroups: computers, kvmdomains, jessie, apache2-hosts + hostgroups: computers, kvmdomains, jessie, apache2-hosts, apache-https oyens: address: 5.153.231.26 parents: ganeti-bytemark @@ -445,10 +461,6 @@ servers: address: 5.153.231.28 parents: ganeti-bytemark hostgroups: computers, service, kvmdomains, jessie, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https - portman: - address: 5.153.231.29 - parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts paradis: address: 5.153.231.30 parents: ganeti-bytemark @@ -457,6 +469,10 @@ servers: address: 5.153.231.32 parents: ganeti-bytemark hostgroups: computers, kvmdomains, jessie, no-bacula + tate: + address: 5.153.231.33 + parents: ganeti-bytemark + hostgroups: computers, service, kvmdomains, jessie, autofs, nfs-client, apache2-hosts, apache-https gideon: address: 5.153.231.34 parents: ganeti-bytemark @@ -464,7 +480,7 @@ servers: httpredir-bm-01: address: 5.153.231.35 parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts + hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, hassrvfs lindsay: address: 5.153.231.36 parents: ganeti-bytemark @@ -484,10 +500,6 @@ servers: address: 5.153.231.40 parents: ganeti-bytemark hostgroups: computers, service, kvmdomains, jessie, hassrvfs, nfs-client, autofs - pittar: - address: 5.153.231.41 - parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, jessie, hassrvfs, nfs-client, autofs #, apache2-hosts pinel: address: 5.153.231.42 parents: ganeti-bytemark @@ -496,6 +508,10 @@ servers: address: 5.153.231.43 parents: ganeti-bytemark hostgroups: computers, service, kvmdomains, jessie, hassrvfs + manziarly: + address: 5.153.231.44 + parents: ganeti-bytemark + hostgroups: computers, service, kvmdomains, jessie, autofs, nfs-client, apache2-hosts, apache-https # }}} # {{{ gw-c3sl santoro: @@ -522,7 +538,19 @@ servers: mirror-anu: address: 150.203.164.39 parents: gw-cecsit - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hassrvfs, xinetd-hosts, jessie, security_mirror, apache-https + hostgroups: computers, service, apache2-hosts, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror, apache-https + mirror-anu2: + address: 150.203.164.60 + parents: mirror-anu + hostgroups: secondary-IPs + mirror-anu3: + address: 150.203.164.61 + parents: mirror-anu + hostgroups: secondary-IPs + mirror-anu4: + address: 150.203.164.62 + parents: mirror-anu + hostgroups: secondary-IPs # }}} # {{{ gw-conova sompek: @@ -635,6 +663,14 @@ servers: address: 194.177.211.205 parents: ganeti-grnet hostgroups: computers, service, hassrvfs, kvmdomains, jessie, postgres94-hosts, apache2-hosts, apache-https + boott: + address: 194.177.211.206 + parents: ganeti-grnet + hostgroups: computers, service, hassrvfs, kvmdomains, jessie + porta: + address: 194.177.211.207 + parents: ganeti-grnet + hostgroups: computers, service, hassrvfs, kvmdomains, jessie # }}} # {{{ gw-isc schein: @@ -644,13 +680,13 @@ servers: mirror-isc: address: 149.20.20.7 parents: gw-isc - hostgroups: computers, service, apache2-hosts, dl360, hassrvfs, xinetd-hosts, jessie, security_mirror + hostgroups: computers, service, apache2-hosts, apache-https, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror mirror-isc2: address: 149.20.20.19 parents: mirror-isc hostgroups: secondary-IPs mirror-isc3: - address: 149.20.20.19 + address: 149.20.20.22 parents: mirror-isc hostgroups: secondary-IPs mirror-isc-syncproxy: @@ -709,11 +745,11 @@ servers: czerny: address: 82.195.75.109 parents: gw-man-da - hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts + hostgroups: computers, service, dl380, acpid-hosts, jessie, drbd-hosts clementi: address: 82.195.75.103 parents: gw-man-da - hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts + hostgroups: computers, service, dl380, acpid-hosts, jessie, drbd-hosts bendel: address: 82.195.75.100 parents: ganeti3 @@ -755,7 +791,7 @@ servers: kaufmann: address: 82.195.75.107 parents: ganeti3 - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, jessie + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, jessie, apache-https stockhausen: address: 82.195.75.108 parents: ganeti3 @@ -783,7 +819,7 @@ servers: wolkenstein: address: 82.195.75.65 parents: ganeti3 - hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, jessie + hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, apache2-hosts, jessie, apache-https mipsel-manda-01: address: 82.195.75.72 parents: gw-man-da @@ -928,7 +964,7 @@ servers: ubc-bl4: address: 206.12.19.214 parents: sw-ubcece-kais - hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts + hostgroups: computers, bl460, acpid-hosts, service, jessie, drbd-hosts ubc-bl8: address: 206.12.19.218 parents: sw-ubcece-kais @@ -994,11 +1030,11 @@ servers: glinka: address: 206.12.19.126 parents: ganeti2 - hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts + hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, apache-https, nfs-client, autofs, xinetd-hosts tye: address: 206.12.19.129 parents: ganeti2 - hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs + hostgroups: computers, service, kvmdomains, jessie, heavy-exim, apache2-hosts, apache-https, nfs-client, autofs, hassrvfs elgar: address: 206.12.19.130 parents: ganeti2 @@ -1022,7 +1058,7 @@ servers: sonntag: address: 206.12.19.142 parents: ganeti2 - hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs + hostgroups: computers, service, kvmdomains, jessie, nfs-client, autofs menotti: address: 206.12.19.143 parents: ganeti2 @@ -1036,8 +1072,6 @@ servers: parents: ganeti2 hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, heavy-exim, postgres94-hosts, hasvarlogfs, apache-https, spamd, nfs-server # }}} - # {{{ gw-ugent - # }}} # {{{ gw-umn #saens: # address: 128.101.240.212 @@ -1046,7 +1080,7 @@ servers: mirror-umn: address: 128.101.240.212 parents: gw-umn - hostgroups: computers, service, apache2-hosts, dl360, hassrvfs, xinetd-hosts, jessie, security_mirror + hostgroups: computers, service, apache2-hosts, apache-https, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror mirror-umn2: address: 128.101.240.215 parents: mirror-umn @@ -1062,19 +1096,19 @@ servers: # }}} # {{{ gw-unicamp prokofiev: - address: 177.220.10.78 + address: 177.220.10.140 parents: gw-unicamp hostgroups: computers, jessie, service powerpc-unicamp-01: - address: 177.220.10.79 + address: 177.220.10.141 parents: prokofiev hostgroups: computers, hassrvfs, buildd, jessie ppc64el-unicamp-01: - address: 177.220.10.80 + address: 177.220.10.142 parents: prokofiev hostgroups: computers, hassrvfs, buildd, jessie plummer: - address: 177.220.10.81 + address: 177.220.10.143 parents: prokofiev hostgroups: computers, porterbox, hassrvfs, jessie # }}} @@ -1082,7 +1116,7 @@ servers: klecker: address: 130.89.148.10 parents: gw-utwente - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, xinetd-hosts, jessie, incomingmailrelayed2025, hassrvfs + hostgroups: computers, service, apache2-hosts, apache-https, rsyncd-hosts, dl380, xinetd-hosts, jessie, incomingmailrelayed2025, hassrvfs klecker-ftp: address: 130.89.148.12 parents: klecker @@ -1186,6 +1220,9 @@ hostgroups: general: alias: general purpose developer accessible machines + hpnewraid: + alias: new (2015+) machines where we need hpssacli instead of hpacucli + private: 1 dl380: alias: HP DL380 hosts private: 1 @@ -1345,9 +1382,9 @@ hostgroups: alioth: alias: machines that just are just awkward private: 1 - openstack-compute: - alias: nodes that run OpenStack compute - private: 1 + #openstack-compute: + # alias: nodes that run OpenStack compute + # private: 1 openstack-controller: alias: nodes that run OpenStack controller private: 1 @@ -1416,12 +1453,17 @@ services: servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -X nfs4 --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount|/proc/sys/fs/binfmt_misc'" hostgroups: computers - excludehosts: sibelius + excludehosts: sibelius, rietz - name: disk usage - all servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv/farm-snapshot/farm-misc 95 98" hosts: sibelius + - + name: disk usage - all + servicegroups: diskspace + nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv -x /home 95 98" + hosts: rietz - name: disk usage on / @@ -1648,6 +1690,11 @@ services: excludehostgroups: buildd, porterbox, no-bacula check_interval: 60 retry_check_interval: 15 + - + name: process - bacula-dir + servicegroups: backup + nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-dir -a '/usr/sbin/bacula-dir -c /etc/bacula/bacula-dir.conf'" + hosts: dinis - name: process - bacula-fd servicegroups: backup @@ -1938,6 +1985,11 @@ services: hostgroups: computers excludehostgroups: freebsd, alioth excludehosts: czerny, grnet-node01, storace, ubc-bl2 + ### + - + name: process - rngd + nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd -a '/usr/sbin/rngd -r /dev/hwrng'" + hostgroups: kvmdomains # }}} # {{{ anti-services - @@ -1989,6 +2041,16 @@ services: name: "sso CRL" nrpe: "if [ -e /var/lib/dsa/sso/ca.crl ]; then /usr/lib/nagios/plugins/dsa-check-crl-expire -w 129600 -c 86400 /var/lib/dsa/sso/ca.crl; else echo 'No sso/ca.crl on this host.'; fi" hostgroups: computers + - + name: SSL certs - puppet + hosts: global + remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/servicecerts" + runfrom: handel + - + name: SSL certs - LE + hosts: global + remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/from-letsencrypt" + runfrom: handel # }}} # {{{ HW health/raid - @@ -2021,7 +2083,8 @@ services: nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli" check_interval: 120 hostgroups: dl385, dl380, dl360, bl460, dl180 - excludehosts: schein, rietz, mirror-anu, mirror-isc, mirror-umn + excludehosts: schein, rietz + excludehostgroups: hpnewraid - name: HW - hpacucli status servicegroups: raid @@ -2051,7 +2114,7 @@ services: servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-hpssacli" check_interval: 120 - hosts: mirror-anu, mirror-isc, mirror-umn + hostgroups: hpnewraid ### # - # name: HW - edac status @@ -2683,10 +2746,10 @@ services: # name: process - openstack - nova-api # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'" # hostgroups: openstack-controller - - - name: process - openstack - nova-compute - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'" - hostgroups: openstack-compute +# - +# name: process - openstack - nova-compute +# nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'" +# hostgroups: openstack-compute # - # name: process - openstack - nova-cert # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'" @@ -2767,6 +2830,11 @@ services: check: check_tcp!873 hosts: mirror-umn2, mirror-umn3 depends: mirror-umn:process - xinetd + - + name: network service - rsync + check: check_tcp!873 + hosts: mirror-anu2, mirror-anu3 + depends: mirror-anu:process - xinetd ### - name: process - icinga