salt/ansible
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Move check_disk to those restricted checks, also exclude AppImage loopback mounts

Browse Source
This commit is contained in:
Salt 2021-12-15 19:57:20 -06:00
parent 54a4f1539b
commit 72697a3953
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
playbooks/prod_web.yml
View File

@ -170,8 +170,6 @@
command: check_by_ssh!/usr/lib/nagios/plugins/check_load -r -w 5,4,3 -c 7,6,5 command: check_by_ssh!/usr/lib/nagios/plugins/check_load -r -w 5,4,3 -c 7,6,5
- name: CPU Utilization - name: CPU Utilization
command: check_by_ssh!/usr/local/bin/monitoring-scripts/check_cpu_stats -w 75 -c 90 command: check_by_ssh!/usr/local/bin/monitoring-scripts/check_cpu_stats -w 75 -c 90
- name: Disk Usage
command: check_by_ssh!/usr/lib/nagios/plugins/check_disk -M -u GB -X nfs -X tracefs -X cgroup -X tmpfs -X overlay -X shm -w 15% -c 10% -W 15% -K 10% -A -I '^/run/' -I '^udev$' -I '^/var/lib/kubelet/'
- name: DNS Resolution - name: DNS Resolution
command: check_by_ssh!/usr/lib/nagios/plugins/check_etc_resolv command: check_by_ssh!/usr/lib/nagios/plugins/check_etc_resolv
- name: Last Ansible Play - name: Last Ansible Play
@ -209,6 +207,11 @@
hostgroup: "!role-hypervisor" hostgroup: "!role-hypervisor"
- name: Users - name: Users
command: check_by_ssh!/usr/lib/nagios/plugins/check_users -w 3 -c 5 command: check_by_ssh!/usr/lib/nagios/plugins/check_users -w 3 -c 5
# Privileged checks
# Required because check_disk may attempt to get the free space of
# restricted mountpoints
- name: Disk Usage
command: check_by_ssh!/usr/bin/sudo /usr/lib/nagios/plugins/check_disk -M -u GB -X nfs -X tracefs -X cgroup -X tmpfs -X overlay -X shm -w 15% -c 10% -W 15% -K 10% -A -I '^/run/' -I '^udev$' -I '^/var/lib/kubelet/' -I'^/tmp/.mount_'
# Device role checks # Device role checks
# hypervisor (which is assumed to be Proxmox) # hypervisor (which is assumed to be Proxmox)
- name: PVE Unit pve-firewall.service - name: PVE Unit pve-firewall.service