ceph
/
ceph-ansible
mirror of https://github.com/ceph/ceph-ansible.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

alertmanager: allow disable dashboard tls verify 

When using self-signed/untrusted CA certificates, alertmanager displays
an error in logs. With this commit this should make those messages
disappear.

Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1936299

Co-authored-by: Guillaume Abrioux <gabrioux@redhat.com>

Signed-off-by: Dimitri Savineau <dsavinea@redhat.com>
pull/6752/head
Dimitri Savineau 2021-07-23 10:27:55 -04:00 committed by Guillaume Abrioux
parent ad05a08160
commit 9f77b929d1
4 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
group_vars/all.yml.sample
View File

@ -723,6 +723,7 @@ dummy:
#alertmanager_port: 9093 #alertmanager_port: 9093
#alertmanager_cluster_port: 9094 #alertmanager_cluster_port: 9094
#alertmanager_conf_overrides: {} #alertmanager_conf_overrides: {}
#alertmanager_dashboard_api_no_ssl_verify: "{{ true if dashboard_protocol == 'https' and not dashboard_crt and not dashboard_key else false }}"
# igw # igw
# #
# `igw_network` variable is intended for allowing dashboard deployment with iSCSI node not residing in the same subnet than what is defined in `public_network`. # `igw_network` variable is intended for allowing dashboard deployment with iSCSI node not residing in the same subnet than what is defined in `public_network`.

1
group_vars/rhcs.yml.sample
View File

@ -723,6 +723,7 @@ alertmanager_container_image: registry.redhat.io/openshift4/ose-prometheus-alert
#alertmanager_port: 9093 #alertmanager_port: 9093
#alertmanager_cluster_port: 9094 #alertmanager_cluster_port: 9094
#alertmanager_conf_overrides: {} #alertmanager_conf_overrides: {}
#alertmanager_dashboard_api_no_ssl_verify: "{{ true if dashboard_protocol == 'https' and not dashboard_crt and not dashboard_key else false }}"
# igw # igw
# #
# `igw_network` variable is intended for allowing dashboard deployment with iSCSI node not residing in the same subnet than what is defined in `public_network`. # `igw_network` variable is intended for allowing dashboard deployment with iSCSI node not residing in the same subnet than what is defined in `public_network`.

1
roles/ceph-defaults/defaults/main.yml
View File

@ -715,6 +715,7 @@ alertmanager_conf_dir: /etc/alertmanager
alertmanager_port: 9093 alertmanager_port: 9093
alertmanager_cluster_port: 9094 alertmanager_cluster_port: 9094
alertmanager_conf_overrides: {} alertmanager_conf_overrides: {}
alertmanager_dashboard_api_no_ssl_verify: "{{ true if dashboard_protocol == 'https' and not dashboard_crt and not dashboard_key else false }}"
# igw # igw
# #
# `igw_network` variable is intended for allowing dashboard deployment with iSCSI node not residing in the same subnet than what is defined in `public_network`. # `igw_network` variable is intended for allowing dashboard deployment with iSCSI node not residing in the same subnet than what is defined in `public_network`.

5
roles/ceph-prometheus/templates/alertmanager.yml.j2
View File

@ -12,4 +12,9 @@ receivers:
webhook_configs: webhook_configs:
{% for host in groups['mgrs'] | default(groups['mons']) %} {% for host in groups['mgrs'] | default(groups['mons']) %}
- url: '{{ dashboard_protocol }}://{{ hostvars[host]['ansible_facts']['fqdn'] }}:{{ dashboard_port }}/api/prometheus_receiver' - url: '{{ dashboard_protocol }}://{{ hostvars[host]['ansible_facts']['fqdn'] }}:{{ dashboard_port }}/api/prometheus_receiver'
{% if dashboard_protocol == 'https' and alertmanager_dashboard_api_no_ssl_verify | bool %}
http_config:
tls_config:
insecure_skip_verify: true
{% endif %}
{% endfor %} {% endfor %}