summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGeorg Pfuetzenreuter2023-02-16 01:31:57 +0100
committerGeorg Pfuetzenreuter2023-02-21 19:06:04 +0100
commit0730cbb4c20c5d3e32cc2217530d4e27574bc7c7 (patch)
treef4a9ec71c16492e13b6bfc09c0f557c0dc6232f3
parentcade9c0aca9db3b938ff7343a29756083b252147 (diff)
downloadsalt-0730cbb4c20c5d3e32cc2217530d4e27574bc7c7.tar.gz
salt-0730cbb4c20c5d3e32cc2217530d4e27574bc7c7.tar.bz2
salt-0730cbb4c20c5d3e32cc2217530d4e27574bc7c7.zip
Manage Prometheus firewall rules
Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
-rw-r--r--pillar/role/monitoring/prometheus-exporter-blackbox.sls9
-rw-r--r--pillar/role/monitoring/prometheus.sls6
2 files changed, 15 insertions, 0 deletions
diff --git a/pillar/role/monitoring/prometheus-exporter-blackbox.sls b/pillar/role/monitoring/prometheus-exporter-blackbox.sls
index 59b9945..3e9ab08 100644
--- a/pillar/role/monitoring/prometheus-exporter-blackbox.sls
+++ b/pillar/role/monitoring/prometheus-exporter-blackbox.sls
@@ -39,3 +39,12 @@ prometheus:
- expect: "^:[^ ]+ 001"
icmp:
prober: icmp
+
+firewalld:
+ zones:
+ internal:
+ ports:
+ - comment: 'Prometheus Blackbox Exporter'
+ port: 9115
+ protocol: tcp
+
diff --git a/pillar/role/monitoring/prometheus.sls b/pillar/role/monitoring/prometheus.sls
index 6cd2235..c9c2b01 100644
--- a/pillar/role/monitoring/prometheus.sls
+++ b/pillar/role/monitoring/prometheus.sls
@@ -9,3 +9,9 @@ prometheus:
global:
scrape_interval: 15s
evaluation_interval: 1m
+
+firewalld:
+ zones:
+ internal:
+ services:
+ - prometheus