Sensu opstools

opstools.sh

#!/bin/bash
yum -y install "@Development Tools" python-devel python-setuptools libffi-devel libxml2-devel libxslt-devel openssl-devel ruby-devel
easy_install pip
pip install setuptools --upgrade
pip install ansible

git clone https://github.com/centos-opstools/opstools-ansible
cd opstools-ansible

cat << EOF > hosts
localhost ansible_connection=local

[redis_hosts]
localhost

[rabbit_hosts]
localhost

[sensu_server]
localhost

[sensu_client]
localhost

[sensu_hosts:children]
sensu_server
sensu_client
EOF

cat << EOF > extra-vars.yml
# Certificates generated with http://sensuapp.org/docs/latest/files/sensu_ssl_tool.tar
server_ssl_ca_cert: |
    -----BEGIN CERTIFICATE-----
    MIICxDCCAaygAwIBAgIJAM6kjatsHJD9MA0GCSqGSIb3DQEBBQUAMBIxEDAOBgNV
    BAMTB1NlbnN1Q0EwHhcNMTcwNzEzMTM1NTA2WhcNMjIwNzEyMTM1NTA2WjASMRAw
    DgYDVQQDEwdTZW5zdUNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
    sOR20ZltT/5axLGsoslALQpRVa++kmnrODv2SEvnt62bty9nXr7THtIt51DbTzCT
    Ubt7kynp0OWXNFbsquEb28oxyIlqSylJTy94QKRf/JYHBJTB4aiWj/hc4C10myHB
    g4OJTePMPSzPIeVa9JZ2mrKT5hj7gIvJ3lVDffmdaoo/sh4JJFKDYGUaMaJMUfyx
    giALCSm15kBU/dx8zCOfSGkBRErgKWeQPfU3pfV+J0Bih1eJx4/+OrIuzscMWT6T
    +uMyLjYjiagKaiPX27RSND4HZcxG2fMjX5g5mYVKz/FJ6aUP2aQj73cUgOlNhMsC
    EFTjVX70k5hReYuHaM74VwIDAQABox0wGzAMBgNVHRMEBTADAQH/MAsGA1UdDwQE
    AwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAbgRc50BbycjyyTjFWyH18oyATkS8agkk
    HvOt8vkHHOAr0NVvfmgTPgsWV3m2hKxWH/EgnNJZeqRdqChGYWy0mJDbSp8wTUuw
    ELsesAnNNmDIqMNcrfA7IgAS+2fQrcK64EsmvLIyAxqpSocYIbV7RJkmEyvhHzCP
    RzeJcbOAci0CSpjM3S+AWdPEQnuYHKAquqrt521elYka2Y88JhR53/jLgP2joOH0
    6tUe4pS3F7YCau0rdCog2sVU/GFW0/LGSqnkt/YPz7Ocij3rcWsB8okmYuWm4vbX
    bkvcjp48QVL4569bH/NlEJe3YQYxzLz6zKZfn1dzhZElXYld2g3HFQ==
    -----END CERTIFICATE-----
server_ssl_cert: |
    -----BEGIN CERTIFICATE-----
    MIIC3TCCAcWgAwIBAgIBATANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdTZW5z
    dUNBMB4XDTE3MDcxMzEzNTUwNloXDTIyMDcxMjEzNTUwNlowITEOMAwGA1UEAwwF
    c2Vuc3UxDzANBgNVBAoMBnNlcnZlcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
    AQoCggEBAOdSKffITmAEidHPFRn9KxTrlTGma1dGkckZjyEC7KbryS4E91C8LbpV
    XGf9YYZUljcm/SPnkqMSHOPFuW19rwGj7DHRxCsxIRBzY9LCLZZ6JSOe92zOTKgq
    KKuvAIYZu07ydH35jGv8HFWs1bFN00a1OxJT5dq9D6K5fzhIcr7O1nxjFmejptY6
    RfGKdBNfyvCinsVAGDujBUNlosfkmnpDaLaSuZGvXr/Zy6sK2Ti4zyOJ2kArkW1O
    bio44mjwt9hOK2TccKaUswy/cNoaxlljDnAv4R+obZoz+Hcbd7BvndQXAJ7S30n/
    rbJ4WEBRUd7DbLkt2DthbG5uHuTXh58CAwEAAaMvMC0wCQYDVR0TBAIwADALBgNV
    HQ8EBAMCBSAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDQYJKoZIhvcNAQEFBQADggEB
    AFXmKM69936teoq/xSgjRvSKQu6KWMuGk3g4EhWqOsPDU80W5uJE89aHw6GXcU8M
    rCn8FVvobFo9i7lY/QMmN29pXTJReq3r4qGBiUg62YG3QrenweC3OHwL/HpgRb+V
    gFa84Ms7rnOsIfgcTrAwRsT29AVtZ84JByeRdNDGCnC0YeFa9IhENueByekORbm1
    Q8JuaNe2UlmdO8/hfXyx9xR9j/4bysfAX0Fp9a1rrc1wevxRscLMOxRcW8NmRxnO
    X6wDYhTq+CITAXVfqM9+4wFt86VyLI/Udg9rW0gfIurjcFHRvgskwa7buo7iwofL
    MOUb+fQKByQ7nUNt5gOPUTY=
    -----END CERTIFICATE-----
server_ssl_key: |
    -----BEGIN RSA PRIVATE KEY-----
    MIIEowIBAAKCAQEA51Ip98hOYASJ0c8VGf0rFOuVMaZrV0aRyRmPIQLspuvJLgT3
    ULwtulVcZ/1hhlSWNyb9I+eSoxIc48W5bX2vAaPsMdHEKzEhEHNj0sItlnolI573
    bM5MqCooq68Ahhm7TvJ0ffmMa/wcVazVsU3TRrU7ElPl2r0Porl/OEhyvs7WfGMW
    Z6Om1jpF8Yp0E1/K8KKexUAYO6MFQ2Wix+SaekNotpK5ka9ev9nLqwrZOLjPI4na
    QCuRbU5uKjjiaPC32E4rZNxwppSzDL9w2hrGWWMOcC/hH6htmjP4dxt3sG+d1BcA
    ntLfSf+tsnhYQFFR3sNsuS3YO2Fsbm4e5NeHnwIDAQABAoIBAAQZD4dFNCY9Tle6
    LGyGcKHxPnZftV0ZcfG3EzMJgzm9yZWYHu1+N+0qH/XzpiukCfk2JpvhOVbMNljO
    oudOp7AGwGNtjOUa/LP251jPedFFnqzP3yA9U1xTSt8nvYGiqQ/P+cJVjmhHUhUu
    d6apc0m4YjCD7fl/CezfDmLn3aiFpuXJhCzbHGW0wZomtZMVrjiiH1Vs1zyZHWc/
    RJqV9bkoQTmQ4WTQr2v16NL3tLJS1bac8UIAGgfVNPL1GVgentL+qusjTgHVZ/K4
    YnOxXXiUUOcTX3nT19/b6z4JTtfTRIpc3j9qLSr9I+laQgZTjVdImERxlKQYck7W
    a3BymWECgYEA9PE9nmn/FuYCzt/6It7ScfRJOq0pELtlTRIaD8laoE/LLBv7uT/x
    erlcQ9HS+1UlAvS1ufKM2+dtYVN++nmIEzW/HbnGkBVDbKAvhmRx6iOfBBJtXUaI
    7ekRSda3IN9CMdm2x5x3FnKS6qAd5fYAIEiOyByo3gy9HHg2HI7lJu8CgYEA8cOA
    w4pCKeMsX0ZqOzNktU5Mm/ryD1eXdmdj3Kxjisms2hSAvVrDyr75uCo+xrrjY8mx
    +itc/k1g/O004NS8cgFD4dTuYDTWSNJcD3yJEncUoxYJZO8aRcQk3WHehcEOeKDD
    UBlq3trih95/oK/XHDwJFUc4OYl35ylvSyE9KlECgYAjoCLSM6CCeBnYdQMwpy/8
    mwc7nYvnfxoQx506xpKD1pc6ZyeJnh9FNkiRJKeHHq8vauAzl2+dXF+wVDCXxa1g
    /eQ6MpcKxcz0s6e16E4ZO+0Y7oUxl9y6nbeCAdTI1zANiBjpl3xKq4dq0LcIh2sl
    Ruhdeq2k/j1TMrjMFoyFyQKBgEL79fs3nWlZpfun2NsaPDb3wMYe215g2HhX4RVN
    Ni9H/XpW3+yW71SHYU0jd008jrAhPAyiYxuaeNrbJiF9D9FOhG5XvswtF4oJrrQj
    vx68m50sB+JNVSwrUkN8UFkiyk2lzTeuMywX3Vfjz9zHm4QZJjMdDnjym6QSmOFq
    DjZhAoGBAKhMY3szaSLgWSIsnv57JlhNHFkeKHXC8JA76v+eJAfHioW2yJDjTJvj
    PpZZauBztqn5DKOzV0aNV9UOYu5OpThyhiDSC+F24To2GUIde6FumLOy1/lo9by4
    71RiKrO/2QzHUpSg+WHuq+TO/JpRVuE+8PRzJcL51jU5e1HHby7k
    -----END RSA PRIVATE KEY-----

client_ssl_cert: |
    -----BEGIN CERTIFICATE-----
    MIIC3TCCAcWgAwIBAgIBAjANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdTZW5z
    dUNBMB4XDTE3MDcxMzEzNTUwNloXDTIyMDcxMjEzNTUwNlowITEOMAwGA1UEAwwF
    c2Vuc3UxDzANBgNVBAoMBmNsaWVudDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
    AQoCggEBAL9JW8ipyYVS0oYT3zL91YlHyuSSs2qk13CA9Vn1G7Rr6gcNOU87VUrF
    TJ38a8XJ5KeC9oHO8ITXKH6g2GvGttwAd5d0OvRVGSW8EV8V/qAta/w5aCgWL57o
    pcl+7NaxoGd5N1AxpmPSL/aro+8UJDOMRRA3c515HwXWsXJydA+hEFTPjl1S5oiO
    Way5hrj9btWlTYWx4gJ2o1aT9x/rX52BKNbAa2zNSSS+xwDbuYF+XzVsTN7fdT5s
    REAN7g+khc93uiieEsHsEaPpPBuxPjX+vmdxSw80zuM4Bdl3lUFgJm9KbxTVrO3Y
    /8hVqAh+pk+g4W52MOnITal6v+YwGScCAwEAAaMvMC0wCQYDVR0TBAIwADALBgNV
    HQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQEFBQADggEB
    AHn6lEjlI8kdCSDlu2xIy3d8e2d4CxGY7VCxLtn/OdTCpfl5pFgsrKY7HUBBeV9a
    XVQbq9wjCksK8nCYb1ozI0IeToQiSZcswx+YcR7lE7Y2x+GEJvzNegZNH/HMHaeA
    ICzNW+wEyd20vo7/qZDBsgvPm/2nR/PRS5b6GY+fz2XExv5JCHc6hzGL/Zio5ggd
    259KsyJjytZ05K8fUnVjbupvVKS1SsvmpSTccZseE5I/913zTVxcuTmqJGYOCl9Y
    AN1VbPjj3dFRBym+7Y9OZyb/DETGn4TKMe7l7Yf4iqnQbDaYAZM6bibUY/K9le2L
    qojrDNz80GneOAhGpr5/bZ0=
    -----END CERTIFICATE-----
client_ssl_key: |
    -----BEGIN RSA PRIVATE KEY-----
    MIIEpQIBAAKCAQEAv0lbyKnJhVLShhPfMv3ViUfK5JKzaqTXcID1WfUbtGvqBw05
    TztVSsVMnfxrxcnkp4L2gc7whNcofqDYa8a23AB3l3Q69FUZJbwRXxX+oC1r/Dlo
    KBYvnuilyX7s1rGgZ3k3UDGmY9Iv9quj7xQkM4xFEDdznXkfBdaxcnJ0D6EQVM+O
    XVLmiI5ZrLmGuP1u1aVNhbHiAnajVpP3H+tfnYEo1sBrbM1JJL7HANu5gX5fNWxM
    3t91PmxEQA3uD6SFz3e6KJ4SwewRo+k8G7E+Nf6+Z3FLDzTO4zgF2XeVQWAmb0pv
    FNWs7dj/yFWoCH6mT6DhbnYw6chNqXq/5jAZJwIDAQABAoIBAFgyMbCGoFTpiAmr
    1eiD4tXmFSVognL0SCUmQHnWqox4iTHxJfBjMgNEjvv065gJa3TUzGWzjXAiaBhi
    fwbKW3t6d6mMPLZ1GiAs43GNCZa++qATs/Nvr0s8h1wtOnQO+B9dY2SFT+uMePLp
    1q8gAUUHMry0ZIlB1Ezz3WMgZGTjmE2KFcgj3tJJz6fBEHKsD8KexrUiiyi0u8le
    TjhgAEIGGv8BrIuERS9Dte6sVBlKIFpAOpkGVu1Opq/cdhXmtd09PSEu+WxSO3K6
    jZq23Dq9jgVVM6q5E9oRNU9giMfjXIhavaNgR2bCjYRS/fdYsmq0Y/um45vjCcaG
    zi8la/ECgYEA84SdVbszJjJvvu6uE4uZDgFTHFxVerqYOe11TGjbwjdTJChOMjZU
    D3mmiK0pK2S5NpBnu0Mr3oz0izqVuneJ28hnJYRGLuXFuVyyjVfZzHgjs1p/+Qs+
    sQHR6Ht3NyqKb2643DJXzkW52EjcscXYR6Qhs6IYvWDOIH22l7u9aC8CgYEAyRdg
    BLbzhwwLBH6D4wtl3ZvD/GGlqtFc1gV/A7d5aJE0y7bjG+GEcd4OE0khcHR4jrie
    BBBAh7WL2jXlAAWOa3hrgg8mTErdkDpaX2NZdPbiAlvzfT2S0cQtowaa5XxnsXbC
    itOqkfemNHYSm89Sm88uxfbngE3pwIMZhhQ0KIkCgYEAtHZHfnv/GMRxyWXpvPRL
    1XQn2jGW6x+SpgMSVTC0AsarJ3VzFYTrYJh/UHQ6uTyogQYcyUqrHP8KTo943Dmw
    AR8PSV8v/5spnwdSDqrW7c7ubgCYK8AoklZN72Jn44r0EkZUWmI4bdWANwcv/dIn
    SFga3Zs3iEhQGQXwpZtsbuMCgYEAmv05NGkOKfhORZh9bnFKghOcatmYJqBXPV3f
    F65CFSZV2u2K/eJDgr/zeUnUTCh5AweoQtmD4xU6RWVkqy+dJZgaxJOIoSTSwGc5
    YGvidxQR/l+Au/bJQoRB6HUezeGkylMOfpHF1dtabvTSQuT4dr6o/kvfAjULBSYG
    diD8UoECgYEAm3iF/r/QrUzuVz7H8BKXC/TKxJXdXO/ySApKGrVr+YnIq89GGVfK
    MDfjWD1TXl4ysqy6GT9M4QxJIG/CWfJBjSGZlFHxiRBtSHs6A4dX62vPYzcGDoDG
    1RQRrZbLilj9VO4YI5q7UmDOrwaldq1TCzGQY6isV6sTFWEy9AgaGGY=
    -----END RSA PRIVATE KEY-----

rdo_release: "ocata"

# Sensu SSL issue ?
# https://github.com/sensu/sensu/issues/1601

rabbitmq_use_ssl: true
rabbitmq_ssl_cacert: "{{ server_ssl_ca_cert }}"
rabbitmq_ssl_cert: "{{ server_ssl_cert }}"
rabbitmq_ssl_key: "{{ server_ssl_key }}"

sensu_manage_checks: false
sensu_rabbitmq_with_ssl: true
sensu_rabbitmq_ssl_cert: "{{ client_ssl_cert }}"
sensu_rabbitmq_ssl_key: "{{ client_ssl_key }}"
sensu_rabbitmq_password: "sensu"

uchiwa_authentication: 'uchiwa'
EOF

cat << EOF > playbook.yml
---
- name: Install prerequisites on all hosts and gather facts
  hosts: sensu_hosts
  tags:
    - prereqs
  roles:
    - prereqs
    - repos
    - chrony

- name: Install RabbitMQ
  hosts: rabbit_hosts
  tags:
    - availability
    - rabbitmq
  roles:
    - rabbitmq/server

- name: Install Redis
  hosts: redis_hosts
  tags:
    - availability
    - redis
  roles:
    - redis/server

- name: Install Sensu Server
  hosts: sensu_server
  tags:
    - availability
    - sensu
  roles:
    - sensu/server

- name: Install Sensu Client
  hosts: sensu_client
  tags:
    - availability
    - sensu
  roles:
    - sensu/client

- name: Install Uchiwa
  hosts: sensu_server
  tags:
    - availability
    - uchiwa
    - web
  roles:
    - uchiwa/server
    - uchiwa/proxy
EOF

ansible-playbook -vv -i hosts playbook.yml -e @extra-vars.yml
echo "Firewall commit issue, running Ansible a second time..."
ansible-playbook -vv -i hosts playbook.yml -e @extra-vars.yml