-
Notifications
You must be signed in to change notification settings - Fork 102
adjust monitoring for container host/server container #3750
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
Ensure that the [systemitem]``set-cname`` parameter is the fully qualified domain name (FQDN) of your Salt client. | ||
You can use the the [systemitem]``set-cname`` parameter multiple times if you require multiple aliases: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actually, I'm not fully sure, but I think that's just optional.
Better ask @witekest
scp /root/server.* minion.example.com:/etc/ssl/mlm-server-certs | ||
ssh minion.example.com 'chmod go+r /etc/ssl/mlm-server-certs/server.*; ls -la /etc/ssl/mlm-server-certs' | ||
---- | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Before start with the configuration of formulas, I'm looking into what I wrote in my card, and I see this section:
From the minion:
suma-bv-50-min-sles15sp4:/etc/ssl # mkdir suma-server-certs
suma-bv-50-min-sles15sp4:/etc/ssl # cd suma-server-certs/
suma-bv-50-min-sles15sp4:/etc/ssl/suma-server-certs # cp /root/server.* .
suma-bv-50-min-sles15sp4:/etc/ssl/suma-server-certs # chmod go+r server.*
suma-bv-50-min-sles15sp4:/etc/ssl/suma-server-certs # ls -la
total 16
drwxr-xr-x 2 root root 42 jul 5 11:46 .
drwxr-xr-x 6 root root 183 jul 5 11:45 ..
-rw-r--r-- 1 root root 8335 jul 5 11:46 server.crt
-rw-r--r-- 1 root root 3268 jul 5 11:46 server.key
And we use that path on the minion when we pass the server certificate and key into the Prometheus Formula of the minion.
I would say that's missing right?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe there is something missing. I copied the files from inside the server container to the server container host:
mgrctl cp server:/root/ssl-build/minion/server.key server.key
mgrctl cp server:/root/ssl-build/minion/server.crt server.crt
Then with ssh to the monitoring minion (= the client with Prometheur/Grafana)
ssh minion.example.com 'mkdir /etc/ssl/mlm-server-certs'
scp /root/server.* minion.example.com:/etc/ssl/mlm-server-certs
ssh minion.example.com 'chmod go+r /etc/ssl/mlm-server-certs/server.*; ls -la /etc/ssl/mlm-server-certs'
What should come next is unclear to me. I think you'll now use the formula to prepare clients that should be monitored? I'm not sure what your hostnames stand for.
https://github.com/SUSE/spacewalk/issues/24778