From 979021f5c40c812d7a9edf22bf8945f691badeed Mon Sep 17 00:00:00 2001
From: Georg Pfuetzenreuter
Date: Wed, 15 Feb 2023 20:23:49 +0100
Subject: Import Prometheus server configuration

* add new roles:
  - monitoring.prometheus
  - monitoring.prometheus-alertmanager
  - monitoring.prometheus-exporter-blackbox
* add common Prometheus and Prometheus Alertmanager pillar data
* add moni.lysergic.dev specific Prometheus pillar data

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
---
 .../monitoring/prometheus-exporter-blackbox.sls    | 41 ++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 pillar/role/monitoring/prometheus-exporter-blackbox.sls

(limited to 'pillar/role/monitoring/prometheus-exporter-blackbox.sls')

diff --git a/pillar/role/monitoring/prometheus-exporter-blackbox.sls b/pillar/role/monitoring/prometheus-exporter-blackbox.sls
new file mode 100644
index 0000000..59b9945
--- /dev/null
+++ b/pillar/role/monitoring/prometheus-exporter-blackbox.sls
@@ -0,0 +1,41 @@
+prometheus:
+  wanted:
+    component:
+      - blackbox_exporter
+  pkg:
+    component:
+      blackbox_exporter:
+        config:
+          modules:
+            http_2xx:
+              prober: http
+              timeout: 15s
+            http_post_2xx:
+              prober: http
+              http:
+                method: POST
+            http_3xx:
+              prober: http
+              timeout: 5s
+              http:
+                method: HEAD
+                no_follow_redirects: true
+                valid_status_codes: [301, 302]
+            tcp_connect:
+              prober: tcp
+            ssh_banner:
+              prober: tcp
+              tcp:
+                query_response:
+                - expect: "^SSH-2.0-"
+            irc_banner:
+              prober: tcp
+              tcp:
+                query_response:
+                - send: "NICK prober"
+                - send: "USER prober prober prober :prober"
+                - expect: "PING :([^ ]+)"
+                  send: "PONG ${1}"
+                - expect: "^:[^ ]+ 001"
+            icmp:
+              prober: icmp
-- 
cgit v1.2.3


From 0730cbb4c20c5d3e32cc2217530d4e27574bc7c7 Mon Sep 17 00:00:00 2001
From: Georg Pfuetzenreuter
Date: Thu, 16 Feb 2023 01:31:57 +0100
Subject: Manage Prometheus firewall rules

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
---
 pillar/role/monitoring/prometheus-exporter-blackbox.sls | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'pillar/role/monitoring/prometheus-exporter-blackbox.sls')

diff --git a/pillar/role/monitoring/prometheus-exporter-blackbox.sls b/pillar/role/monitoring/prometheus-exporter-blackbox.sls
index 59b9945..3e9ab08 100644
--- a/pillar/role/monitoring/prometheus-exporter-blackbox.sls
+++ b/pillar/role/monitoring/prometheus-exporter-blackbox.sls
@@ -39,3 +39,12 @@ prometheus:
                 - expect: "^:[^ ]+ 001"
             icmp:
               prober: icmp
+
+firewalld:
+  zones:
+    internal:
+      ports:
+        - comment: 'Prometheus Blackbox Exporter'
+          port: 9115
+          protocol: tcp
+
-- 
cgit v1.2.3