WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-04 09:21:08 +08:00
Code Issues Packages Projects Releases Wiki Activity
41,474 Commits 9 Branches 0 Tags
289bda56985f9cf20ff56b091e367a3e94de24ff
Commit Graph

97 Commits

Author SHA1 Message Date
Aurélien Bompard
d7fdbe58b9 Add one more perm for collecd's selinux package 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-02 08:30:16 +02:00
Aurélien Bompard
dc623ed962 Collectd improvements 
- Increase the service stop timeout to give collectd time to flush the
  values to RRD files on the disk. It currently takes ~1m30s, setting
  the timeout to 5m
- add the unix socket plugin and configure the CGI to make use of it to
  request a flush of the RRD values when a graph is generated
- add SELinux permissions to allow those two to talk to each other

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-02 08:15:12 +02:00
Aurélien Bompard
206873b92f Fix the collectd network plugin config 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-05-26 16:18:41 +02:00
Aurélien Bompard
e7d4e4e905 Collectd: add one more selinux permission 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-05-26 15:13:19 +02:00
Aurélien Bompard
45ad0573f3 Collectd: add one more selinux permission 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-05-26 14:54:32 +02:00
Aurélien Bompard
33d6594397 Nice try, but the modules must not be built on a host that's too recent 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-05-26 12:36:10 +02:00
Aurélien Bompard
3f8cd023f9 Syntax error 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-05-26 12:23:09 +02:00
Aurélien Bompard
7b2ab9e07f Improve the common collectd selinux module 
- Add a workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1731501
- Update the playbook to support module upgrades, not only fresh
  installs

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-05-26 12:21:59 +02:00
Kevin Fenzi
0aeb60adea collectd: add to selinux policy to prevent denied read for proc/net 
Should fix up these messages from all machines:
audit[865]: AVC avc:  denied  { read } for  pid=865 comm="reader#2" name="net" dev="proc" ino=4026531845 scontext=system_u:system_r:collectd_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=lnk_file permissive=0
audit[865]: AVC avc:  denied  { read } for  pid=865 comm="reader#2" name="net" dev="proc" ino=4026531845 scontext=system_u:system_r:collectd_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=lnk_file permissive=0

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-01-10 14:35:18 -08:00
Stephen Smoogen
bbf19c899d try to get collectd from using 50+GB for random things which will not live for verylong 2021-07-22 16:40:09 -04:00
Stephen Smoogen
a5ddc65d13 try to get collectd from using 50+GB for random things which will not live for verylong 2021-07-22 16:38:25 -04:00
Stephen Smoogen
dc0df6a285 try to fix collectd to not log all virtaul interfaces. ^vnet does not always work 2021-07-05 08:27:41 -04:00
Stephen Smoogen
3e91f8fdf4 Fix a regex for collectd which was not capturing the correct lines in os-nodes 2021-06-19 12:30:57 -04:00
Stephen Smoogen
a3738ba83c remember that this is a regex and not a shell regex so .* is needed versus * 2021-06-19 12:23:29 -04:00
Stephen Smoogen
3f895444a7 The names of mounted directories under /var/lib/origin seem to have changed again and this is generating multiple gigabytes of directories we would have ignored. Changing the regex to grab it all. 2021-06-19 12:21:22 -04:00
Stephen Smoogen
7620c64c0d Some systems have interface-veth which we ignore. Others have interface-vnet which were not.. however that is 100GB of directories. Adding to the ignore list. 2021-06-19 12:07:05 -04:00
Aurélien Bompard
9e69aa3087 Remove redundant rabbitmq plugin for collectd 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-07-02 23:20:23 +02:00
Stephen Smoogen
62b318d084 try to get collectd to really ignore things taking up a lot of space not needed. *FIXME* 2020-06-06 12:56:33 -04:00
Stephen Smoogen
960bd93c15 this is an attempt to shutdown the amount of celery queue logging collectd does. *FIXME* 2020-06-06 12:42:00 -04:00
Adam Williamson
f5522d3fa6 collectd: drop hddtemp config section except on RHEL 6 
It is unnecessary since collectd 4, and breaks with 5.9.0 or
later.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-04-24 21:34:14 +02:00
Kevin Fenzi
81fb4582e7 ansible: change when conditions to use == instead of is when checking strings. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Karsten Hopp
c9ed62ac32 update ansible_distribution_major_version conditionals 
Signed-off-by: Karsten Hopp <karsten@redhat.com>
 2020-04-24 21:34:10 +02:00
Aurélien Bompard
f6378303ca Fix the collectd rabbitmq plugin and data collection 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:07 +02:00
Stephen Smoogen
a9d012bd61 make collectd skip even more crap on servers 2019-04-12 14:17:22 +00:00
Stephen Smoogen
292e3a0b4c [collectd] We collect a lot of data on directories which are transient. Drop it 2019-04-11 21:56:37 +00:00
Kevin Fenzi
a8714caab3 first cut at changing all the old |changed to is changed per ansible deprecations 2018-05-07 23:51:48 +00:00
Stephen Smoogen
00b7f0b8dc and to make sure we dont watch netapp stuff in the future 2018-04-24 18:06:24 +00:00
Stephen Smoogen
dfa0191633 and this will just ignore tmpfs overlay no matter the name 2018-04-24 17:17:11 +00:00
Stephen Smoogen
c3ce541909 so it looks like df uses directory trees and not patterns 2018-04-24 16:40:09 +00:00
Stephen Smoogen
bf9c8d4dba the syntax assumes df- already 2018-04-24 16:21:45 +00:00
Stephen Smoogen
1011d0eeed add filters to stop over collection 2018-04-24 16:05:51 +00:00
Kevin Fenzi
a3d3003eb6 remove graphite config entirely 2018-03-05 18:59:18 +00:00
Kevin Fenzi
2cce3883a3 drop collectd graphite plugin 2018-03-05 17:59:38 +00:00
Patrick Uiterwijk
adcbf72f03 Packageize this, packageize that, packageize the world 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-10-08 22:25:52 +00:00
Kevin Fenzi
8a6e51a9a6 change state=running to start=started as the old one is going away in ansible 2.7 2017-04-13 01:37:21 +00:00
Peter Robinson
89fb80cac1 collectd: don't exclude aarch64 for collectd-apache 2017-01-19 12:22:53 +00:00
Kevin Fenzi
2f2108a0d5 No collectd for epel7/aarch64 yet, so don't try and install it here. 2016-12-03 03:39:19 +00:00
Tim Flink
4de5fadfa8 making collectd-apache work for fedora 2016-12-01 18:34:57 +00:00
Kevin Fenzi
067d1da6f6 how about this 2016-12-01 04:01:10 +00:00
Kevin Fenzi
7d7f9ccf76 move enable to end of the tasks 2016-12-01 03:52:21 +00:00
Kevin Fenzi
8562a31119 try this 2016-12-01 03:48:25 +00:00
Adam Williamson
a34ed59a8c roles/collectd: install collectd-disk on F25+ 
Plugin was split into a subpackage in F25.
 2016-11-28 19:05:14 -08:00
Kevin Fenzi
b1a2d105c9 In ansible 2.2 always_run is depreciated. Switch to check_mode. 2016-11-01 16:29:49 +00:00
Kevin Fenzi
1c6e9a11f4 Another pile of trailing whitespace fixes 2016-08-08 19:42:36 +00:00
Ricky Elrod
80ccef429e Fix a todo in the collectd role for bind stats 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2016-06-30 09:05:34 +00:00
Ricky Elrod
6ba2f45314 use new hostname here too 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2016-06-29 13:27:42 +00:00
Kevin Fenzi
c4483d8dc4 Another try to exclude beaker hosts 2016-06-25 19:03:51 +00:00
Kevin Fenzi
c011dc8376 Fix copy pasta 2015-11-09 17:51:30 +00:00
Kevin Fenzi
f89ce31b91 And some more 2015-11-09 17:49:49 +00:00
Ricky Elrod
5f5d52c85b Allow collectd to access tcp when collectd_graphite is defined too 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2015-06-14 00:16:39 +00:00