1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
# File 'modules/varnish/manifests/common.pp', line 1
class varnish::common(
Float $log_slow_request_threshold = 60.0,
Optional[Stdlib::Host] $logstash_host = undef,
Optional[Stdlib::Port] $logstash_json_lines_port = undef,
) {
# Frontend memory cache sizing
$mem_gb = $::memorysize_mb / 1024.0
if ($mem_gb < 90.0) {
# virtuals, test hosts, etc...
$fe_mem_gb = 1
} else {
# Removing a constant factor before scaling helps with
# low-memory hosts, as they need more relative space to
# handle all the non-cache basics.
$fe_mem_gb = ceiling(0.7 * ($mem_gb - 80.0))
}
# Python version
# TODO: use case for python_version fact
$python_version = debian::codename::eq('stretch') ? {
true => '3.5',
default => '3.7',
}
file { '/usr/local/sbin/reload-vcl':
source => 'puppet:///modules/varnish/reload-vcl.py',
owner => 'root',
group => 'root',
mode => '0555',
}
# Scripts to depool, restart and repool varnish frontends
file { '/usr/local/sbin/varnish-frontend-restart':
owner => 'root',
group => 'root',
mode => '0555',
source => 'puppet:///modules/varnish/varnish-frontend-restart.sh',
}
file { '/usr/local/share/dstat':
ensure => directory,
owner => 'root',
group => 'root',
mode => '0755',
}
file { '/usr/local/share/dstat/dstat_varnishstat.py':
owner => 'root',
group => 'root',
mode => '0444',
source => 'puppet:///modules/varnish/dstat_varnishstat.py',
require => File['/usr/local/share/dstat'],
}
file { '/usr/local/share/dstat/dstat_varnish_hit.py':
owner => 'root',
group => 'root',
mode => '0444',
source => 'puppet:///modules/varnish/dstat_varnish_hit.py',
require => File['/usr/local/share/dstat'],
}
# `vlogdump` is a small tool to filter the output of varnishlog
# See <https://github.com/cosimo/vlogdump> for more.
file { '/usr/local/bin/vlogdump':
source => 'puppet:///modules/varnish/vlogdump',
owner => 'root',
group => 'root',
mode => '0555',
}
file { '/usr/local/lib/python2.7/dist-packages/varnishprocessor':
ensure => absent,
recurse => true,
purge => true,
force => true,
}
# We are not using varnishncsa, make sure it's stopped
service { 'varnishncsa':
ensure => 'stopped',
enable => false,
}
# We don't use varnishlog at all, and it can become an issue, see T135700
service { 'varnishlog':
ensure => 'stopped',
}
file { '/usr/local/lib/python2.7/dist-packages/varnishapi.py':
ensure => absent,
}
file { '/usr/local/lib/python2.7/dist-packages/varnishlog.py':
ensure => absent,
}
file { '/usr/local/lib/python2.7/dist-packages/cachestats.py':
ensure => absent,
}
file { '/usr/local/lib/nagios/plugins/check_varnish_uds':
ensure => 'present',
owner => 'root',
group => 'root',
mode => '0555',
source => 'puppet:///modules/varnish/check_varnish_uds.py';
}
sudo::user { 'nagios_varnish_uds':
ensure => 'present',
user => 'nagios',
privileges => ['ALL = (root) NOPASSWD: /usr/local/lib/nagios/plugins/check_varnish_uds'],
}
}
|