Page MenuHomeDevCentral

Deploy Sensu on Dwellers
Needs ReviewPublic

Authored by dereckson on Mar 2 2022, 23:54.
Tags
None
Referenced Files
F3777583: D2565.id.diff
Mon, Nov 25, 01:51
F3777521: D2565.diff
Mon, Nov 25, 01:42
Unknown Object (File)
Fri, Nov 22, 23:22
Unknown Object (File)
Fri, Nov 22, 11:44
Unknown Object (File)
Fri, Nov 22, 10:42
Unknown Object (File)
Tue, Nov 19, 06:46
Unknown Object (File)
Mon, Nov 18, 15:42
Unknown Object (File)
Mon, Nov 18, 15:22
Subscribers
None

Details

Summary

Goal is to evaluate the monitoring platform to see if it's convenient
and if it fits as our Nagios-descendant observability component.

Ref T1693.

Test Plan

Run on Dwellers

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Errors
Unit
No Test Coverage
Branch
monitoring
Build Status
Buildable 4019
Build 4271: arc lint + arc unit

Event Timeline

dereckson created this revision.
Dwellers
$ sudo salt-call --local state.apply roles/paas-docker/docker/networks
[…]
----------                                                                                                                     
          ID: docker_network_sensu                                                                                             
    Function: docker_network.present                                                                                           
        Name: sensu          
      Result: True                  
     Comment: Network 'sensu' created
     Started: 00:02:33.888883   
    Duration: 305.458 ms                                                                
     Changes:                                                          
              ----------                                                                                                      
              created:                                                          
                  True
[…]

$ sudo salt-call --local state.apply roles/paas-docker/containers/sensu
local:                                                                                                                         
----------                                     
          ID: /srv/sensu/sensu-backend/lib
    Function: file.directory
      Result: True                                                                                                            
     Comment: The directory /srv/sensu/sensu-backend/lib is in the correct state
     Started: 00:03:27.607704
    Duration: 12.922 ms     
     Changes:                   
----------                      
          ID: selinux_context_sensu_data_sensu-backend
    Function: selinux.fcontext_policy_present
        Name: /srv/sensu/sensu-backend/lib
      Result: True                      
     Comment: SELinux policy for "/srv/sensu/sensu-backend/lib" already present with specified filetype "all files" and sel_ty$
e "container_file_t".                          
     Started: 00:03:27.623229           
    Duration: 1141.993 ms                  
     Changes:                           
----------                              
          ID: selinux_context_sensu_data_applied_sensu-backend                                                                
    Function: selinux.fcontext_policy_applied
        Name: /srv/sensu/sensu-backend/lib
      Result: True
     Comment: SElinux policies are already applied for filespec "/srv/sensu/sensu-backend/lib"
     Started: 00:03:28.765704
    Duration: 15.646 ms
     Changes:   
----------
          ID: sensu-backend
    Function: docker_container.running
      Result: True                                                                                                            
     Comment: Created container 'sensu-backend'
     Started: 00:03:29.064847
    Duration: 11942.446 ms
     Changes:                                                                                                                 
              ----------
              container:    
                  ----------
                  Networks:     
                      ----------
                      bridge:           
                          ----------    
                          IPConfiguration:
                              ----------
                              new:      
                                  not connected
                              old:      
                                  automatic
                      sensu:            
                          ----------    
                          Gateway:                                                                                            
                              ----------
                              new:
                                  172.21.4.1
                              old:
                                  None
                          IPAddress:
                              ----------
                              new:
                                  172.21.4.2
                              old:
                                 None
              container_id:
                  ----------
                  added:
                      38ba26085e7f5c419272be07bb7a5013cf3058571e35f4ce8d6957ce25cf00b9
              image:
                  ----------
                  Layers:
                      ----------
                      Pulled:
                          - 2ffab9f748ff
                          - […]
                  Status:
                      Downloaded newer image for sensu/sensu:6.6.6                                                            
                  Time_Elapsed:
                      1.612886905670166
                  retcode:
                      0
              state:
                  ----------
                  new:
                      running
                  old:
                      None

Summary for local
------------
Succeeded: 4 (changed=1)
Failed:    0
------------
Total states run:     4
Total run time:  13.113 s
PORTS
20

If an API is used, we can probably drop that port in favour of 46080 reservation below.

pillar/paas/docker.sls
135

Do we need a known Sensu port for the Web UI? If not we can move to a more specific port.

dereckson marked 2 inline comments as not done.
dereckson added inline comments.
roles/paas-docker/containers/sensu.sls
51

We can't expose publicly the API.

That would allow to reconfigure credentials, agents, code to run.

Private IPs are now correctly provisioned by change f9dbdab3b579.