110 lines
4.0 KiB
YAML
110 lines
4.0 KiB
YAML
---
|
|
# Copyright 2018, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: Install Journal-Remote
|
|
hosts: hosts
|
|
gather_facts: "{{ osa_gather_facts | default(True) }}"
|
|
become: true
|
|
pre_tasks:
|
|
# At this time there's no suitable package available for systemd-journal-remote/gateway
|
|
# When installing on SUSE 42.x. For now this playbook will omit suse when the package
|
|
# manager is "zypper". When a suitable package is available on SUSE this should be removed.
|
|
- name: Omit suse from this playbook
|
|
meta: end_play
|
|
when:
|
|
- ansible_pkg_mgr == 'zypper'
|
|
|
|
- name: Skip playbook if log_hosts group is empty
|
|
meta: end_play
|
|
when:
|
|
- groups['log_hosts'] | length == 0
|
|
|
|
- name: Install systemd-journal-remote
|
|
package:
|
|
name: "{{ systemd_journal_remote_distro_package[ansible_pkg_mgr] }}"
|
|
state: "{{ package_state }}"
|
|
|
|
- name: Create journal directory
|
|
file:
|
|
path: "/var/log/journal"
|
|
state: "directory"
|
|
owner: "root"
|
|
group: "systemd-journal"
|
|
|
|
- name: Create journal remote directory
|
|
file:
|
|
path: "/var/log/journal/remote"
|
|
state: "directory"
|
|
owner: "systemd-journal-remote"
|
|
group: "systemd-journal"
|
|
|
|
roles:
|
|
- role: "systemd_service"
|
|
systemd_tempd_prefix: "openstack"
|
|
systemd_CPUAccounting: true
|
|
systemd_BlockIOAccounting: true
|
|
systemd_MemoryAccounting: true
|
|
systemd_TasksAccounting: true
|
|
systemd_services:
|
|
- service_name: "systemd-journal-remote"
|
|
enabled: "{{ (ansible_host != systemd_journal_remote_target) | ternary('no', 'yes') }}"
|
|
state: "{{ (ansible_host != systemd_journal_remote_target) | ternary('stopped', 'started') }}"
|
|
execstarts: >-
|
|
{{ systemd_utils_prefix }}/systemd-journal-remote
|
|
--listen-http=-3
|
|
--split-mode=host
|
|
--compress
|
|
--seal
|
|
--output=/var/log/journal/remote/
|
|
config_overrides:
|
|
Unit:
|
|
Description: "Journal Remote Sink Service"
|
|
Documentation: "man:systemd-journal-remote(8) man:journal-remote.conf(5)"
|
|
Requires: "systemd-journal-remote.socket"
|
|
Service:
|
|
WatchdogSec: "3min"
|
|
LimitNOFILE: 16384
|
|
User: "systemd-journal-remote"
|
|
Group: "systemd-journal-remote"
|
|
|
|
- service_name: "systemd-journal-upload"
|
|
enabled: "{{ (ansible_host == systemd_journal_remote_target) | ternary('no', 'yes') }}"
|
|
state: "{{ (ansible_host == systemd_journal_remote_target) | ternary('stopped', 'started') }}"
|
|
execstarts: >-
|
|
{{ systemd_utils_prefix }}/systemd-journal-upload
|
|
--save-state
|
|
--merge
|
|
--url=http://{{ systemd_journal_remote_target }}:19532
|
|
config_overrides:
|
|
Unit:
|
|
Description: "Journal Remote Upload Service"
|
|
Documentation: "man:systemd-journal-upload(8)"
|
|
After: "network.target"
|
|
Service:
|
|
WatchdogSec: "3min"
|
|
LimitNOFILE: 16384
|
|
User: "systemd-journal-upload"
|
|
Group: "systemd-journal"
|
|
|
|
vars:
|
|
systemd_journal_remote_target: "{{ hostvars[groups['log_hosts'][0]]['ansible_host'] }}"
|
|
systemd_journal_remote_distro_package:
|
|
apt: "systemd-journal-remote"
|
|
yum: "systemd-journal-gateway"
|
|
dnf: "systemd-journal-gateway"
|
|
|
|
tags:
|
|
- journal-remote
|