Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

KeyDescriptionExampleCreated byData-typeDatafileUsed by:
profile::sensu::installOpt-out for installing sensu. If not set to false, sensu-clients will be installed everywherefalseN/ABooleansensu.yaml or node-specificAll
profile::sensu::uchiwa::private_keyPrivate key for uchiwa JWT creationContent of generated file

openssl genrsa -out uchiwa.rsa 2048

Stringsensu.yaml

role::sensuserver

profile::sensu::uchiwa::public_keyPublic key for uchiwa JWT creationContent of generated fileopenssl rsa -in uchiwa.rsa -pubout > uchiwa.rsa.pubStringsensu.yamlrole::sensuserver
profile::sensu::uchiwa::passwordPassword for default (and only) user 'sensu' in Uchiwa'g00dp@$$w0rd'pwgen -s -y 20 1Stringsensu.yamlrole::sensuserver
profile::sensu::uchiwa::fqdnFQDN for uchiwa web frontend (not FQDN for the server running an instance of it)'sensu.cloud.domain.com'N/AStringsensu.yamlrole::sensuserver, role::bootstrap, role::balancer::mangement
profile::sensu::rabbit_passwordPassword for sensu user at the /sensu rabbitmq vhost. Needed for rabbitmq servers, sensu servers AND all sensu clients.'g00dp@$$w0rd'pwgen -s -y 20 1Stringsensu.yamlAll
profile::sensu::mailer::urlURL to Uchiwa web frontend, that will appear in e-mails from Sensu"http://%{hiera('profile::sensu::uchiwa::fqdn')}"N/AStringsensu.yamlrole::sensuserver
profile::sensu::mailer::mail_fromThe address sensu will send e-mail alerts from'sensu@sensu.domain.com'N/AStringsensu.yamlrole::sensuserver
profile::sensu::mailer::mail_toList of addresses that sensu will send e-mail alerts to

- 'sysadmin1@cloud.domain.com'

- 'sysadmin2@cloud.domain.com'

N/AList of stringssensu.yamlrole::sensuserver
profile::sensu::mailer::smtp_addressOutgoing SMTP server mail alerts'smtp.cloud.domain.com'N/AStringsensu.yamlrole::sensuserver
profile::sensu::mailer::smtp_portTCP port used for connections to the given SMTP server25N/AIntegersensu.yamlrole::sensuserver
profile::sensu::mailer::smtp_domainSMTP domain'cloud.domain.com'N/AStringsensu.yamlrole::sensuserver
profile::sensu::plugins

The plugins listed here will be installed on all clients.

OBS:

The example value is actually mandatory, because the checks tagged with 'all' in profile::sensu::checks rely on them. Puppet will not fail without defining this key, but none of the cheks will make any sense...

- 'sensu-plugins-disk-checks'
- 'sensu-plugins-load-checks'
- 'sensu-plugins-memory-checks'
- 'sensu-plugins-process-checks'
- 'sensu-plugins-hardware'
- 'sensu-plugins-puppet'
- 'sensu-plugins-dns'
- 'sensu-plugins-ntp'

N/AList of stringssensu.yamlAll
sensu::redactValues that match the patterns in this list will be redacted in all output from sensu

- 'password'
- 'pass'
- 'pw'

N/AList of stringssensu.yamlAll
sensu::subscriptionsWhich checks a sensu-client should subscribe to. This is typically set per node. By default, a sensu-client will subscribe to checks tagged with 'all', and if the client is a physical server, it will also subscribe to 'physical-servers'

- 'mysql'

- 'rabbitmq'

- 'roundrobin:ceph'

N/AList of stringsnode-specificAll
sensu::client_customIf you want to override parameters for check command. I.e thresholds, specifying passowrd etc. This where you do that. Should only be set per node

'load':

warning: "8,4,2"

critical: "16,8,4"

'mysql':

password: "%{hiera('profile::mysqlcluster::status_password')}"

'disk':

mountpoints: '/,/home,/var'

N/AList of hashes

node-specific

or really anywhere if you configure lookup_options to deep merge

All (or, more precise, just the client you add this key to)
profile::sensu::checks::tlsexpiryA hash of 'fqdn[:port]' : 'shortname' which should be checked for TLS Expiry

'www.foo.com' : 'foo'

'api.foo.com:8080' : 'api'

'munin.foo.com' : 'munin'

N/AHashsensu.yamlrole::sensuserver

lookup_options:

You might wanna set this in sensu.yaml to allow client_custom settings to be set in multple hiera files without overwriting them with the settings in the top of the hierarchy

  sensu::client_custom:

    merge:

     strategy: 'deep'

     merge_hash_arrays: true

N/AList of hashessensu.yamlAll