chrnie / ansible-role-icinga2 Goto Github PK

---
- hosts: monitoring.hostname.tld
  roles:
    - geerlingguy.mysql
    - chrnie.icinga2
  vars:
    - icinga2_role: master

- name: Manage Certificates
  include_tasks: "pki.yml"
  creates: "/var/lib/icinga2/certs/{{ icinga2_nodename }}.crt"
  when: inventory_hostname != icinga2_ca_host
  tags:
    - install
    - update

FAILED! => {"reason": "'creates' is not a valid attribute for a TaskInclude\n\nThe error appears to have been in '/data/icinga2-vagrant-ansible/roles/chrnie.icinga2/tasks/config-master.yml': line 38, column 3, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n- name: Manage Certificates\n  ^ here\n\nThis error can be suppressed as a warning using the \"invalid_task_attribute_failed\" configuration"}

- name: Test config before restart icinga 2
  shell: "{{ icinga2_binary }} daemon -C"
  register: configTest
  changed_when: configTest.rc == 0
  notify: Restart Icinga 2

RUNNING HANDLER [chrnie.icinga2 : Test config before restart icinga 2] ****
task path: /Users/cjefferies/Documents/code/gitlab/ansible/base/roles/chrnie.icinga2/handlers/main.yml:3

9-03-20 18:40:43 +0000] critical/config: 1 error",
    "stdout_lines": [
        "[2019-03-20 18:40:43 +0000] information/cli: Icinga application loader (version: r2.10.4-1)",
        "[2019-03-20 18:40:43 +0000] information/cli: Loading configuration file(s).",
        "[2019-03-20 18:40:43 +0000] information/ConfigItem: Committing config item(s).",
        "[2019-03-20 18:40:43 +0000] information/ApiListener: My API identity: mon.my.int",
        "[2019-03-20 18:40:43 +0000] critical/SSL: Error loading and verifying locations in ca key file '/var/lib/icinga2/certs//ca.crt': 33558530, \"error:02001002:system library:fopen:No such file or directory\"",
        "[2019-03-20 18:40:43 +0000] critical/config: Error: Cannot make SSL context for cert path: '/var/lib/icinga2/certs//mon.my.int.crt' key path: '/var/lib/icinga2/certs//mon.my.int.key' ca path: '/var/lib/icinga2/certs//ca.crt'.",
        "Location: in /etc/icinga2/features-enabled/api.conf: 4:1-4:24",
        "/etc/icinga2/features-enabled/api.conf(2):  * The API listener is used for distributed monitoring setups.",
        "/etc/icinga2/features-enabled/api.conf(3):  */",
        "/etc/icinga2/features-enabled/api.conf(4): object ApiListener \"api\" {",
        "                                           ^^^^^^^^^^^^^^^^^^^^^^^^",
        "/etc/icinga2/features-enabled/api.conf(5): ",
        "/etc/icinga2/features-enabled/api.conf(6):   accept_config = false",
        "",
        "[2019-03-20 18:40:43 +0000] critical/config: 1 error"
    ]
}

    name: "{{ icinga2_ido_dbname }}"
    login_host: "{{ icinga2_ido_host }}"
    login_port: "{{ icinga2_ido_port }}"
    login_user: "{{ icinga2_ido_user }}"
    login_password: "{{ icinga2_ido_password|default(omit) }}"

    target: /usr/share/icinga2-ido-mysql/schema/mysql.sql

- name: node setup
  shell: |
    {{ icinga2_binary }} node setup \
    --ticket {{ icinga2_client_ticket['stdout'] }} \
    --zone {{ inventory_hostname }} \
    --parent_host {{ icinga2_cert_request_host }} \
    --parent_zone {{ icinga2_ZoneName }} \
    --trustedcert /var/lib/icinga2/certs/trustedcert.crt \
    --cn {{ icinga2_nodename }} \
    --accept-commands \
    --accept-config
  args:
    creates: /etc/icinga2/zones.conf.orig
  notify: Test config before restart icinga 2
  when: icinga2_role == "agent"
  ignore_errors: '{{ ansible_check_mode }}'

icinga2 node setup --help
icinga2 - The Icinga 2 network monitoring daemon (version: r2.8.4-1)

Usage:
  icinga2 node setup [<arguments>]

Sets up an Icinga 2 node.

Global options:
  -h [ --help ]             show this help message
  -V [ --version ]          show version information
  --color                   use VT100 color codes even when stdout is not a
                            terminal
  -D [ --define ] arg       define a constant
  -a [ --app ] arg          application library name (default: icinga)
  -l [ --library ] arg      load a library
  -I [ --include ] arg      add include search directory
  -x [ --log-level ] arg    specify the log level for the console log.
                            The valid value is either debug, notice,
                            information (default), warning, or critical
  -X [ --script-debugger ]  whether to enable the script debugger

Command options:
  --zone arg            The name of the local zone
  --master_host arg     The name of the master host for auto-signing the csr;
                        syntax: host[,port]
  --endpoint arg        Connect to remote endpoint; syntax: cn[,host,port]
  --listen arg          Listen on host,port
  --ticket arg          Generated ticket number for this request (optional)
  --trustedcert arg     Trusted master certificate file
  --cn arg              The certificate's common name
  --accept-config       Accept config from master
  --accept-commands     Accept commands from master
  --master              Use setup for a master instance

Report bugs at <https://github.com/Icinga/icinga2>
Get support: <https://www.icinga.com/support/>
Icinga home page: <https://www.icinga.com/>