Proxy ping healthcheck

* Proxy ping healthcheck
* Telegraf conditional

roles/docker/tasks/main.yml

@@ -51,6 +51,7 @@
 
 
 - name: "AWS ECR docker config directory ( {{ ansible_user_dir }}/.docker )"
+  become: yes
   tags:
     - cfg
   file:

roles/provision/tasks/finalise.yml

@@ -112,7 +112,7 @@
     health_check:
         ping_protocol: http
         ping_port: 80
-        ping_path: "{{ load_balancers[iter.type].health_check | default('/server-status') }}"
+        ping_path: "{{ load_balancers[iter.type].health_check | default('/ping') }}"
         response_timeout: 5 # seconds
         interval: 10 # seconds
         unhealthy_threshold: 2
@@ -156,7 +156,7 @@
     health_check:
         ping_protocol: http
         ping_port: 80
-        ping_path: "{{ load_balancers[iter.type].health_check | default('/server-status') }}"
+        ping_path: "{{ load_balancers[iter.type].health_check | default('/'ping) }}"
         response_timeout: 5 # seconds
         interval: 10 # seconds
         unhealthy_threshold: 2

roles/proxy/tasks/main.yml

@@ -107,6 +107,17 @@
       - "{{ proxy.directory }}/cache:{{ proxy_cache.directory }}:rw"
 
 
+- name: "Proxy ping file"
+  tags:
+    - proxy
+  file:
+    state: "touch"
+    path : "{{ proxy.directory }}/www/ping"
+    owner: "root"
+    group: "root"
+    mode: "0644"
+
+
 - name: Proxy cache clean
   cron:
     name: "Proxy cache clean {{ item.title }}"

roles/proxy/templates/localhost.conf.j2

@@ -12,11 +12,11 @@
     CustomLog /dev/null server-status
     <Location /server-status>
         SetHandler server-status
-        Order allow,deny
-        Allow from all
+        Order deny,allow
+        Deny from {{ internal_subnet }}
     </Location>
     <Location /qos>
         SetHandler qos-viewer
-        Order allow,deny
-        Allow from all
+        Order deny,allow
+        Deny from {{ internal_subnet }}
     </Location>

roles/telegraf/tasks/main.yml

@@ -1,55 +1,4 @@
----
-- name: "Discover monitor facts"
-  setup:
-  delegate_to: '{{item}}'
-  delegate_facts: yes
-  when: hostvars[item]["ansible_all_ipv4_addresses"] is not defined
-  with_items: '{{groups["monitor"]}}'
+- name: "Telegraf"
+  include_tasks: "Telegraf.yml"
+  when: telegraf is defined
 
-
-- name: "Telegraf config directory"
-  tags:
-    - cfg
-    - telegraf
-  file:
-    state: "directory"
-    path : "{{ item }}"
-    owner: root
-    group: root
-    mode: "0755"
-  loop: 
-    - /etc/telegraf
-    - /etc/telegraf/telegraf.d
-
-
-- name: "Telegraf repository"
-  yum_repository:
-    name: influxdb
-    description: InfluxData Repository - Stable
-    file: influxdb
-    baseurl: "https://repos.influxdata.com/stable/$basearch/main"
-    gpgkey: "https://repos.influxdata.com/influxdata-archive_compat.key"
-    gpgcheck: yes
-
-
-- name: "Install telegraf"
-  tags:
-    - pkg
-  package:
-    name: "telegraf"
-    state: "latest"
-  notify: "Telegraf service restart"
-
-
-- name: "Telegraf configuration"
-  tags:
-    - cfg
-    - telegraf
-  template:
-    dest: "/etc/telegraf/telegraf.conf"
-    src: "telegraf.conf.j2"
-  notify: "Telegraf service restart"
-
-
-- name: "Services"
-  include_tasks: "services.yml"

roles/telegraf/tasks/telegraf.yml

@@ -0,0 +1,55 @@
+---
+- name: "Discover monitor facts"
+  setup:
+  delegate_to: '{{item}}'
+  delegate_facts: yes
+  when: hostvars[item]["ansible_all_ipv4_addresses"] is not defined
+  with_items: '{{groups["monitor"]}}'
+
+
+- name: "Telegraf config directory"
+  tags:
+    - cfg
+    - telegraf
+  file:
+    state: "directory"
+    path : "{{ item }}"
+    owner: root
+    group: root
+    mode: "0755"
+  loop: 
+    - /etc/telegraf
+    - /etc/telegraf/telegraf.d
+
+
+- name: "Telegraf repository"
+  yum_repository:
+    name: influxdb
+    description: InfluxData Repository - Stable
+    file: influxdb
+    baseurl: "https://repos.influxdata.com/stable/$basearch/main"
+    gpgkey: "https://repos.influxdata.com/influxdata-archive_compat.key"
+    gpgcheck: yes
+
+
+- name: "Install telegraf"
+  tags:
+    - pkg
+  package:
+    name: "telegraf"
+    state: "latest"
+  notify: "Telegraf service restart"
+
+
+- name: "Telegraf configuration"
+  tags:
+    - cfg
+    - telegraf
+  template:
+    dest: "/etc/telegraf/telegraf.conf"
+    src: "telegraf.conf.j2"
+  notify: "Telegraf service restart"
+
+
+- name: "Services"
+  include_tasks: "services.yml"