wieliczka: Alert on age of vault-secrets.conf chankillo
authorAlex Dehnert <alex@dehnerts.com>
Tue, 1 Jul 2025 21:15:14 +0000 (21:15 +0000)
committerAlex Dehnert <alex@dehnerts.com>
Tue, 1 Jul 2025 21:15:14 +0000 (21:15 +0000)
This depends on adehnert-sysconfig/salt commit 6ce2078ddb3a2e, and adds the
check proposed in
https://gitlab.com/adehnert-sysconfig/salt/-/issues/28#note_2457313345

local.d/wieliczka.cfg

index 3b1e2400dd083ffc9e9d8be5470a9fdbdaeca7fb..d278e8f3089489d57df4352d53f1d4a47445561e 100644 (file)
@@ -23,3 +23,14 @@ define service {
     # Often takes more than 10 seconds to run
     check_command       check_byssh_generic_slow!check_salt_vault
 }
+
+define service {
+    # Check infrequently, because this is really for expiry checking
+    # But catch the recovery quickly ish
+    use adehnert-rare-service
+    retry_interval      15
+    host_name           wieliczka
+    service_description SALT-VAULT-SECRET
+    check_command       check_byssh_generic!check_file_age salt-vault-secrets
+    contact_groups      adehnert-priv
+}