From 8969c14c649bd226b6e22b9a644162d0993cf4d3 Mon Sep 17 00:00:00 2001
From: Gregor Michels <hirnpfirsich@brainpeach.de>
Date: Sun, 3 Jul 2022 02:09:02 +0200
Subject: [PATCH] add playbook_provision_monitoring

---
 .../vms/monitoring01/grafana/admin.gpg        | Bin 0 -> 1003 bytes
 playbook_provision_monitoring.yml             |  64 ++++++++++++++++++
 templates/prometheus.yml                      |  30 ++++++++
 3 files changed, 94 insertions(+)
 create mode 100644 password-store/vms/monitoring01/grafana/admin.gpg
 create mode 100644 playbook_provision_monitoring.yml
 create mode 100644 templates/prometheus.yml

diff --git a/password-store/vms/monitoring01/grafana/admin.gpg b/password-store/vms/monitoring01/grafana/admin.gpg
new file mode 100644
index 0000000000000000000000000000000000000000..f1fd8e35efeb2b470f7755064387dc4ca58bc934
GIT binary patch
literal 1003
zcmV<H0~Gv)0gMAuv2e?Nuf@Ru3;?H1!GnOX&!Db6g=U{gF0thCVgk!Szk;7VoX$}q
zTx;An!PC}-E`N$({FG@-Pb6v~f;<!mj}3`r3Q}!{2LpN07kbAR`h1pTCfDV-EY}dS
zqdO}H<)r0ch}S%EVvn`{DCOF+&=ZXm4o03fu6Cv5&7wQx?`{lF1G;$h)!Qj^$)uE$
zGkBJKULO84I=Fq4ErEns=d~n}Uacc=La@zPf%5Dc=DUf5tR0-fWA$NTQgbtINf~sj
zB#5&KatU+_&3g(LNw@3tpNrjCGRU6SD-S|RS8~z`kr1#F9AxN*B25z-TAbZcsre5l
z3Vc4eKhX`G)|yNNh#V?jEV71Zl=|Fe4S7I{)D*#h`vokt_(_8-*4`72No<*NM3;#2
zVZj-KzRuMHIx|dTqN8^K0?t06R&fSRV!V0<tE#o($%K60YLd1;DATh!0oqiaE>#)=
zT5%tu2bY?Ow3qB|=z1aAAP}7PAPZLdny5TkvNh`vaEu*^n+2rp`z(b53<JwFRsqpy
zdU^p5{wc_T&!I5bM$$(RG`_OhuIOrhp=O7j^!MS1cxJ8|M0^Q@RO8@ZYKG21H%`R`
z=y03aE2dXulC$t!)op&Fh1CkfU<@!f&}$UbUV^|0Sb~4~((^!O(*4VIx>onKe*mem
zVEe;WYRfh)U*b&Es0C8sD$D}F%%Atz*ph>zPR#k*GV-3!I&W$vnWSx)whdbBphP;>
zrDVQR0#hH?Z?y0U9%`A&$l(lt=@FFH*EcMMXTIFWI&oe?s(CNYQfW=Kj+z19^Ia|+
z-Zj8$i?qgZJLSgyD))XFg`?);a|+h>-DG~}3o<}=w${3`p~2Vggou=(NPZ<nes8C?
zJ2Y@EAOA0gUCxNizo0}*lPipFUe6&;&+|CREzh^6`ay}<pE~m|>59_DdNp}iDX@@~
z23(1(+YPmqL4GELf6bqTI+>k@-<CEMGSdi{5GocN(3~gmORG%#Dt-H)hT(!|f<f~(
z-oiIW_mrbAj$Wzh&^LD|$4Ks|2b$=bnXXp;f_3P&l29r}b*9uxW8Z0wpX)pm@p2xQ
zV1P-^oY#TaQmKEng#G<km`<%67h(CmMlvxjXfej!NZSS(rP%Tru`L6@%&GP^HKaq5
zhGD7}G{yGf@HOb}KJbiV3`cSke&+>M6;YX~Hx!=rjjf3cZo~PPa*>4EQf!r!Mbb+F
zpmdgCDl=mAbJLEy-rEn$gU_)wBMuHapBu4DfW9Z`GgAL(xlF4bMtBJs@hGUV6^1xo
Zi6(lr=a#i~sG~Hw52wrja}s}<3r^3+@Z<mh

literal 0
HcmV?d00001

diff --git a/playbook_provision_monitoring.yml b/playbook_provision_monitoring.yml
new file mode 100644
index 0000000..45f7504
--- /dev/null
+++ b/playbook_provision_monitoring.yml
@@ -0,0 +1,64 @@
+---
+- name: provision monitoring
+  hosts:
+    - monitoring01
+  tasks:
+    - name: install playbook requirements
+      package:
+        name:
+          - gpg
+
+    - name: install prometheus
+      package:
+        name:
+          - prometheus
+          - prometheus-alertmanager
+
+    - name: configure prometheus
+      template:
+        src: templates/prometheus.yml
+        dest: /etc/prometheus/prometheus.yml
+        validate: "/usr/bin/promtool check config %s"
+      notify:
+        - reload prometheus
+
+    - name: add grafana oss repo gpg key
+      apt_key:
+        url: "https://packages.grafana.com/gpg.key"
+        id: "4E40DDF6D76E284A4A6780E48C8C34C524098CB6"
+
+    - name: add grafana oss repo
+      apt_repository:
+        repo: "deb https://packages.grafana.com/oss/deb stable main"
+
+    - name: install grafana oss
+      package:
+        name: grafana
+
+    - name: enable and start grafana
+      service:
+        name: grafana-server
+        state: started
+        enabled: yes
+
+    - name: enable anonymous login in grafana
+      blockinfile:
+        path: /etc/grafana/grafana.ini
+        block: |
+          [auth.anonymous]
+          enabled = true
+          org_role = Viewer
+
+      notify:
+        - restart grafana
+
+  handlers:
+    - name: reload prometheus
+      service:
+        name: prometheus
+        state: reloaded
+
+    - name: restart grafana
+      service:
+        name: grafana-server
+        state: restarted
diff --git a/templates/prometheus.yml b/templates/prometheus.yml
new file mode 100644
index 0000000..777310d
--- /dev/null
+++ b/templates/prometheus.yml
@@ -0,0 +1,30 @@
+global:
+  scrape_interval:     15s # Set the scrape interval to every 15 seconds. Default is every 1 minute.
+  evaluation_interval: 15s # Evaluate rules every 15 seconds. The default is every 1 minute.
+  # scrape_timeout is set to the global default (10s).
+
+alerting:
+  alertmanagers:
+  - static_configs:
+    - targets: ['localhost:9093']
+
+rule_files:
+  # - "first_rules.yml"
+
+scrape_configs:
+  - job_name: 'prometheus'
+    scrape_interval: 5s
+    scrape_timeout: 5s
+    static_configs:
+      - targets: ['localhost:9090']
+
+{% for group in groups.keys() | reject('all') | reject('ungrouped') %}
+  - job_name: {{ group }}
+    static_configs:
+{% for host in groups[group] %}
+      - targets: ["{{ hostvars[host]['monitoring_ip'] | default(hostvars[host]['ip']) }}:9100"]
+        labels:
+          instance: "{{ host }}:9100"
+{% endfor %}
+
+{% endfor %}