Puppet Class: profile::mediabackup::storage

Defined in:
modules/profile/manifests/mediabackup/storage.pp

Overview

SPDX-License-Identifier: Apache-2.0 mediabackup storage hosts expose the api and store the files generated from the media backup workers.

Parameters:

  • mediabackup_config (Hash) (defaults to: lookup('mediabackup'))


4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
# File 'modules/profile/manifests/mediabackup/storage.pp', line 4

class profile::mediabackup::storage (
    Hash $mediabackup_config              = lookup('mediabackup'),
){
    $tls_paths = profile::pki::get_cert('discovery', $facts['fqdn'], {
        'ensure'  => 'present',
        'owner'   => 'minio-user',
        'outdir'  => '/etc/minio/ssl',
        'hosts'   => [$facts['hostname'], $facts['fqdn'], '127.0.0.1', '::1', 'localhost'],
        'notify'  => Service['minio'],
        'require' => [ User['minio-user'], File['/etc/minio/ssl']],
    })

    class { 'mediabackup::storage':
        storage_path  => $mediabackup_config['storage_path'],
        port          => $mediabackup_config['storage_port'],
        console_port  => $mediabackup_config['console_port'],
        root_user     => $mediabackup_config['storage_root_user'],
        root_password => $mediabackup_config['storage_root_password'],
        cert_path     => $tls_paths['chained'],
        key_path      => $tls_paths['key'],
        ca_path       => $tls_paths['ca'],
    }
    nrpe::monitor_service { 'minio_server':
        description   => 'MinIO server processes',
        nrpe_command  => '/usr/lib/nagios/plugins/check_procs -c 1:1 -C minio -a server',
        critical      => false,
        contact_group => 'admins',
        notes_url     => 'https://wikitech.wikimedia.org/wiki/Media_storage/Backups',
    }

    # Do not open the firewall to everyone if there are no available storage hosts
    if length($mediabackup_config['worker_hosts']) > 0 {
        firewall::service { 'minio-mediabackup-workers':
            proto   => 'tcp',
            port    => $mediabackup_config['storage_port'],
            notrack => true,
            srange  => $mediabackup_config['worker_hosts'],
        }
        # console port
        firewall::service { 'minio-console-mediabackup-workers':
            proto  => 'tcp',
            port   => $mediabackup_config['console_port'],
            srange => $mediabackup_config['worker_hosts'],
        }
    }
}