|
|
|
@ -10,6 +10,7 @@
|
|
|
|
- "{{ lookup('community.general.dig', 'dev-prometheus-01.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'dev-prometheus-01.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'qa-prometheus-01.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'qa-prometheus-01.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'prodnso-prometheus-01.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'prodnso-prometheus-01.' + domain ) }}"
|
|
|
|
|
|
|
|
- "{{ lookup('community.general.dig', 'demompmx-prometheus-01.' + domain ) }}"
|
|
|
|
k8s_nodes_mobene:
|
|
|
|
k8s_nodes_mobene:
|
|
|
|
- "{{ lookup('community.general.dig', 'prodwork01-kube-node-01.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'prodwork01-kube-node-01.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'prodwork01-kube-node-02.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'prodwork01-kube-node-02.' + domain ) }}"
|
|
|
|
@ -36,6 +37,10 @@
|
|
|
|
- "{{ lookup('community.general.dig', 'prodnso-kube-node-05.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'prodnso-kube-node-05.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'prodnso-kube-node-06.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'prodnso-kube-node-06.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'prodnso-kube-node-07.' + domain ) }}"
|
|
|
|
- "{{ lookup('community.general.dig', 'prodnso-kube-node-07.' + domain ) }}"
|
|
|
|
|
|
|
|
k8s_nodes_demompmx:
|
|
|
|
|
|
|
|
- "{{ lookup('community.general.dig', 'demompmx-kube-node-01.' + domain ) }}"
|
|
|
|
|
|
|
|
- "{{ lookup('community.general.dig', 'demompmx-kube-node-02.' + domain ) }}"
|
|
|
|
|
|
|
|
- "{{ lookup('community.general.dig', 'demompmx-kube-node-03.' + domain ) }}"
|
|
|
|
|
|
|
|
|
|
|
|
- name: "Allow SSH in UFW"
|
|
|
|
- name: "Allow SSH in UFW"
|
|
|
|
ufw:
|
|
|
|
ufw:
|
|
|
|
@ -59,7 +64,7 @@
|
|
|
|
port: 9115
|
|
|
|
port: 9115
|
|
|
|
proto: tcp
|
|
|
|
proto: tcp
|
|
|
|
src: "{{ item }}"
|
|
|
|
src: "{{ item }}"
|
|
|
|
loop: "{{ prometheus_endpoints_all_stages + ip_whitelist + k8s_nodes_mobene + k8s_nodes_devnso + k8s_nodes_qanso + k8s_nodes_prodnso }}"
|
|
|
|
loop: "{{ prometheus_endpoints_all_stages + ip_whitelist + k8s_nodes_mobene + k8s_nodes_devnso + k8s_nodes_qanso + k8s_nodes_prodnso + k8s_nodes_demompmx }}"
|
|
|
|
|
|
|
|
|
|
|
|
- name: "Set firewall default policy"
|
|
|
|
- name: "Set firewall default policy"
|
|
|
|
ufw:
|
|
|
|
ufw:
|
|
|
|
|