Puppet Class: profile::wmcs::metricsinfra::alertmanager::api_rw_proxy

Defined in:
modules/profile/manifests/wmcs/metricsinfra/alertmanager/api_rw_proxy.pp

Summary

Configures an Apache vhost that lets trusted projects and other trusted hosts (for example cloudcumin) submit requests to the alertmanager api. (see T304716 and T362061)

Overview

SPDX-License-Identifier: Apache-2.0

Parameters:

  • $trusted_hosts —

    List of trusted Prometheus hosts per project

  • $htpasswd_entries —

    Content lines to add to the htpasswd file

  • trusted_hosts (Hash[String, Array[Stdlib::Fqdn]]) (defaults to: lookup('profile::wmcs::metricsinfra::alertmanager::api_rw_proxy::trusted_hosts'))
  • htpasswd_entries (Array[String[1]]) (defaults to: lookup('profile::wmcs::metricsinfra::alertmanager::api_rw_proxy::htpasswd_entries', {default_value => []})) 


6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
 
# File 'modules/profile/manifests/wmcs/metricsinfra/alertmanager/api_rw_proxy.pp', line 6

class profile::wmcs::metricsinfra::alertmanager::api_rw_proxy (
    Hash[String, Array[Stdlib::Fqdn]] $trusted_hosts    = lookup('profile::wmcs::metricsinfra::alertmanager::api_rw_proxy::trusted_hosts'),
    Array[String[1]]                  $htpasswd_entries = lookup('profile::wmcs::metricsinfra::alertmanager::api_rw_proxy::htpasswd_entries', {default_value => []}),
) {
    $trusted_ips = $trusted_hosts.values.flatten.map |Stdlib::Fqdn $fqdn| {
        ipresolve($fqdn, 4)
    }

    file { '/etc/apache2/alertmanager-api-rw.htpasswd':
        ensure    => file,
        owner     => 'root',
        group     => 'www-data',
        mode      => '0440',
        content   => $htpasswd_entries.join("\n"),
        show_diff => false,
    }

    httpd::site { 'alertmananger-api-rw-proxy':
        content => epp(
            'profile/wmcs/metricsinfra/alertmanager/api_rw_proxy/vhost.conf.epp',
            {
                'server_name' => $facts['fqdn'],
                'domain'      => $facts['domain'],
                'trusted_ips' => $trusted_ips,
            },
        ),
    }
}