icinga / ansible-playbooks Goto Github PK

IcingaWeb2 setup complains about php timezone not set (http://[IP]/icingaweb2/setup > Modules).

The PHP config `date.timezone' is not defined.

Possible Solution

Something like this:

  tasks:
    - name: Timezone in php.ini
      lineinfile:
        path: /etc/php/7.0/apache2/php.ini
        regexp: '^;?date.timezone ='
        line: "date.timezone = \"{{ lookup('file', '/etc/timezone') }}\""
     notify: restart apache2

My Environment

ansible 2.4.3.0
python version = 2.7.12 (default, Dec  4 2017, 14:50:18) [GCC 5.4.0 20160609]
Ubuntu 16.04.4 LTS

This issue has been migrated from Redmine: https://dev.icinga.com/issues/6439

Created by mfriedrich on 2014-06-07 11:59:16 +00:00

Assignee: (none)
Status: Closed (closed on 2014-06-10 15:23:32 +00:00)
Target Version: (none)
Last Update: 2015-01-27 14:11:22 +00:00 (in Redmine)

Specify how to override default password - value: "CHANGEME" in vars/Debian_wheezy.yml - for icinga2-classicui

TASK: icinga2-ansible-no-ui | Install Icinga2 on RedHat OS
\ family

failed: [10.0.18.11] => (item={'package': 'nagios-plugins-all'}) => {"changed": false, "failed": true, "item": {"package": "nagios-plugins-all"}, "rc": 0, "results": []}
msg: No Package matching 'nagios-plugins-all' found available, installed or updated

The web2 Playbook restarts Apache2 and Icinga2 everytime the Playbook runs. (around line 70 in icinga2-ansible-web2-ui/tasks/icinga2_web2_ui_Debian_install.yml). Another Icinga2 is triggered earlier as well, which might lead to yet another restart once the Playbook finished.

Looking at the code, it is not entirely clear why Apache2 is restarted, all the changed happen in the database and not the webserver configuration.

Executing the icinga2-ansible-no-ui task fails with:

TASK [icinga2-ansible-no-ui : Get Icinga2 Apt Repos for Debian OS family] *****************************
failed: [$host] (item={u'repo': u'deb https://packages.icinga.org/ubuntu icinga-xenial main'}) => changed=false 
  item:
    repo: deb https://packages.icinga.org/ubuntu icinga-xenial main
  module_stderr: |-
    Shared connection to $host closed.
  module_stdout: |-
    Traceback (most recent call last):
      File "/tmp/ansible_xNVZfR/ansible_module_apt_repository.py", line 550, in <module>
        main()
      File "/tmp/ansible_xNVZfR/ansible_module_apt_repository.py", line 542, in main
        cache.update()
      File "/usr/lib/python2.7/dist-packages/apt/cache.py", line 454, in update
        raise FetchFailedException(e)
    apt.cache.FetchFailedException: W:The repository 'https://packages.icinga.org/ubuntu icinga-xenial Release' does not have a Release file., W:Data from such a repository can't be authenticated and is therefore potentially dangerous to use., W:See apt-secure(8) manpage for repository creation and user configuration details., E:Failed to fetch https://packages.icinga.org/ubuntu/dists/icinga-xenial/main/source/Sources  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none, E:Some index files failed to download. They have been ignored, or old ones used instead.
  msg: MODULE FAILURE
  rc: 1
failed: [$host] (item={u'repo': u'deb-src https://packages.icinga.org/ubuntu icinga-xenial main'}) => changed=false 
  item:
    repo: deb-src https://packages.icinga.org/ubuntu icinga-xenial main
  module_stderr: |-
    Shared connection to $host closed.
  module_stdout: |-
    Traceback (most recent call last):
      File "/tmp/ansible_AfqkSq/ansible_module_apt_repository.py", line 550, in <module>
        main()
      File "/tmp/ansible_AfqkSq/ansible_module_apt_repository.py", line 542, in main
        cache.update()
      File "/usr/lib/python2.7/dist-packages/apt/cache.py", line 454, in update
        raise FetchFailedException(e)
    apt.cache.FetchFailedException: W:The repository 'https://packages.icinga.org/ubuntu icinga-xenial Release' does not have a Release file., W:Data from such a repository can't be authenticated and is therefore potentially dangerous to use., W:See apt-secure(8) manpage for repository creation and user configuration details., E:Failed to fetch https://packages.icinga.org/ubuntu/dists/icinga-xenial/main/source/Sources  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none, E:Some index files failed to download. They have been ignored, or old ones used instead.
  msg: MODULE FAILURE
  rc: 1

This is because the TLS certificate for packages.icinga.org is expired:

$ curl -I https://packages.icinga.org/ubuntu/dists/icinga-xenial/main/source/Sources
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.

Also, the server redirects to packages.icinga.com:

$ curl -kI https://packages.icinga.org/ubuntu/dists/icinga-xenial/main/source/Sources                                                                                                     :(
HTTP/1.1 301 Moved Permanently
Date: Tue, 17 Jul 2018 08:32:05 GMT
Server: Apache
Location: https://packages.icinga.com/ubuntu/dists/icinga-xenial/main/source/Sources
Content-Type: text/html; charset=iso-8859-1

A PR fixing this in the works.

During Icinga2 Web2 UI graphical setup on Ubuntu ; after Database Resource settings.

Current Behavior

Database Setup

It seems that either the database you defined earlier does not yet exist and cannot be created using the provided access credentials, the database does not have the required schema to be operated by Icinga Web 2 or the provided access credentials do not have the sufficient permissions to access the database. Please provide appropriate access credentials to solve this.

Expected Behavior

Authentication Backend

As you've chosen to use a database for authentication all you need to do now is defining a name for your first authentication backend.

Possible Solution

Granting all privileges to icinga2_web2_db_user as suggested in documentation solves the problem. However, it might be good to identify the root cause.

- name: Create Icinga2 Web Database User and configure Grants
  mysql_user:
    name: "{{ icinga2_web2_db_user }}"
    password: "{{ icinga2_web2_db_pass }}"
    state: present
    priv: "{{ icinga2_web2_db }}.*:ALL"

Your Environment

ansible 2.4.3.0
python version = 2.7.12
Ubuntu 16.04.4 LTS

The icinga2-ansible-web2-ui role is does not allow for a fully automated installation and requires manual intervention to finish the installation as indicated by the following message Now generate a token with 'icingacli setup token create' and go at http://IP//icingaweb2/setup to continue the installation

This issue has been migrated from Redmine: https://dev.icinga.com/issues/6441

Created by mfriedrich on 2014-06-07 12:00:00 +00:00

Assignee: (none)
Status: New
Target Version: (none)
Last Update: 2015-01-27 14:11:23 +00:00 (in Redmine)

Create a ping-only group to generate host definitions of hosts which will be checked only for ping (no need to gather facts).

Hi,

I get a deprecation warning when I use icinga2 roles.

[DEPRECATION WARNING]: The use of 'include' for tasks has been deprecated. Use 'import_tasks' for static inclusions or 'include_tasks' for dynamic inclusions. This feature will be removed in a future release. Deprecation warnings can be disabled by 
setting deprecation_warnings=False in ansible.cfg.
[DEPRECATION WARNING]: include is kept for backwards compatibility but usage is discouraged. The module documentation details page may explain more about this rationale.. This feature will be removed in a future release. Deprecation warnings can be 
disabled by setting deprecation_warnings=False in ansible.cfg.

$ rgrep "include:" *
icinga2-ansible-add-hosts/tasks/main.yml:- include: icinga2_add_hosts.yml
icinga2-ansible-classic-ui/tasks/main.yml:- include: icinga2_classic_ui_Debian_install.yml
icinga2-ansible-classic-ui/tasks/main.yml:- include: icinga2_classic_ui_RedHat_install.yml
icinga2-ansible-classic-ui/tasks/main.yml:- include: icinga2_classic_ui_Gentoo_install.yml
icinga2-ansible-no-ui/tasks/main.yml:- include: icinga2_Debian_install.yml
icinga2-ansible-no-ui/tasks/main.yml:- include: icinga2_Ubuntu_install.yml
icinga2-ansible-no-ui/tasks/main.yml:- include: icinga2_RedHat_install.yml
icinga2-ansible-no-ui/tasks/main.yml:- include: icinga2_Gentoo_install.yml
icinga2-ansible-no-ui/tasks/main.yml:- include: icinga2_configure.yml
icinga2-ansible-web2-ui/tasks/main.yml:- include: icinga2_web2_ui_RedHat_install.yml
icinga2-ansible-web2-ui/tasks/main.yml:- include: icinga2_web2_ui_Debian_install.yml
icinga2-ansible-web-ui/tasks/main.yml:- include: icinga2_web_ui_RedHat_install.yml
icinga2-ansible-web-ui/tasks/icinga2_web_ui_RedHat_install.yml:- include: icinga2_web_ui_mysql_RedHat_install.yml
icinga2-nrpe-agent/tasks/main.yml:- include: icinga2_nrpe_agent_RedHat.yml
icinga2-nrpe-agent/tasks/main.yml:- include: icinga2_nrpe_agent_Debian.yml
icinga2-nrpe-agent/tasks/main.yml:- include: icinga2_nrpe_agent_Gentoo.yml

Possible Solution

Replacing include: with include_task:

My Environment

ansible 2.4.3.0
python version = 2.7.12 (default, Dec  4 2017, 14:50:18) [GCC 5.4.0 20160609]
Ubuntu 16.04.4 LTS

Thanks a lot for your work.

Am getting this issue now , using the icinga2-ansible playbook to install and configure the server
using ubuntu xenial:

<?php /*! Icinga Web 2 | (c) 2014 Icinga Development Team | GPLv2+ */ require_once '/usr/share/php/Icinga/Application/webrouter.php';

dpkg -l |grep php
ii php 1:7.0+35ubuntu6 all server-side, HTML-embedded scripting language (default)
ii php-common 1:35ubuntu6 all Common files for PHP packages
ii php-dompdf 0.6.1+dfsg-2ubuntu1 all HTML to PDF converter
ii php-font-lib 0.2.2+dfsg-2build1 all read, parse, export and make subsets of different fonts
ii php-gd 1:7.0+35ubuntu6 all GD module for PHP [default]
ii php-htmlpurifier 4.7.0-1build1 all Standards-compliant HTML filter
ii php-icinga 2.4.1-1ppa1604+1 all PHP library to communicate with and use Icinga
ii php-imagick 3.4.0rc6-1ubuntu3 amd64 Provides a wrapper to the ImageMagick library
ii php-intl 1:7.0+35ubuntu6 all Internationalisation module for PHP [default]
ii php-ldap 1:7.0+35ubuntu6 all LDAP module for PHP [default]
ii php-mysql 1:7.0+35ubuntu6 all MySQL module for PHP [default]
ii php-xml 1:7.0+35ubuntu6 all DOM, SimpleXML, WDDX, XML, and XSL module for PHP [default]
ii php7.0 7.0.13-0ubuntu0.16.04.1 all server-side, HTML-embedded scripting language (metapackage)
ii php7.0-cli 7.0.13-0ubuntu0.16.04.1 amd64 command-line interpreter for the PHP scripting language
ii php7.0-common 7.0.13-0ubuntu0.16.04.1 amd64 documentation, examples and common module for PHP
ii php7.0-fpm 7.0.13-0ubuntu0.16.04.1 amd64 server-side, HTML-embedded scripting language (FPM-CGI binary)
ii php7.0-gd 7.0.13-0ubuntu0.16.04.1 amd64 GD module for PHP
ii php7.0-intl 7.0.13-0ubuntu0.16.04.1 amd64 Internationalisation module for PHP
ii php7.0-json 7.0.13-0ubuntu0.16.04.1 amd64 JSON module for PHP
ii php7.0-ldap 7.0.13-0ubuntu0.16.04.1 amd64 LDAP module for PHP
ii php7.0-mysql 7.0.13-0ubuntu0.16.04.1 amd64 MySQL module for PHP
ii php7.0-opcache 7.0.13-0ubuntu0.16.04.1 amd64 Zend OpCache module for PHP
ii php7.0-readline 7.0.13-0ubuntu0.16.04.1 amd64 readline module for PHP
ii php7.0-xml 7.0.13-0ubuntu0.16.04.1 amd64 DOM, SimpleXML, WDDX, XML, and XSL module for PHP

dpkg -l |grep icinga
ii icinga2 2.6.2-1ppa1xenial1 amd64 host and network monitoring system
ii icinga2-bin 2.6.2-1ppa1xenial1 amd64 host and network monitoring system - daemon
ii icinga2-common 2.6.2-1ppa1xenial1 all host and network monitoring system - common files
ii icinga2-ido-mysql 2.6.2-1ppa1xenial1 amd64 host and network monitoring system - MySQL support
ii icingacli 2.4.1-1ppa1604+1 all simple CLI tool for Icingaweb2 and its modules
ii icingaweb2 2.4.1-1ppa1604+1 all simple and responsive web interface for Icinga
ii icingaweb2-common 2.4.1-1ppa1604+1 all simple and responsive web interface for Icinga - common files
ii icingaweb2-module-doc 2.4.1-1ppa1604+1 all simple and responsive web interface for Icinga - documentation module
ii icingaweb2-module-monitoring 2.4.1-1ppa1604+1 all simple and responsive web interface for Icinga - monitoring module
ii libicinga2 2.6.2-1ppa1xenial1 amd64 host and network monitoring system - internal libraries
ii php-icinga 2.4.1-1ppa1604+1 all PHP library to communicate with and use Icinga

issue was fixed on the ubuntu after adding the php7.0 and libapache2-mod-php packages, and the ansible code for it was :

name: Install PHP requirements
apt:
name: "{{ item}}"
state: present
with_items:
php7.0
libapache2-mod-php7.0

This issue has been migrated from Redmine: https://dev.icinga.com/issues/6445

Created by mfriedrich on 2014-06-07 12:02:37 +00:00

Assignee: (none)
Status: New
Target Version: (none)
Last Update: 2015-01-27 14:11:26 +00:00 (in Redmine)

Icinga2 can operate in Cluster mode. Given the power of Ansible inventory to target multiple monitoring servers would be fine to add Icinga2 Cluster setup tasks in the future.

This issue has been migrated from Redmine: https://dev.icinga.com/issues/6440

Created by mfriedrich on 2014-06-07 11:59:35 +00:00

Assignee: (none)
Status: New
Target Version: (none)
Last Update: 2015-01-27 14:11:23 +00:00 (in Redmine)

Add support for multi-ip in Icinga2 checks

Bringing a new icinga2 installation with the classic UI and upon login i am getting this error

Error: Could not read object configuration data!

systemctl status icinga2.service
● icinga2.service - Icinga host/service/network monitoring system
Loaded: loaded (/usr/lib/systemd/system/icinga2.service; enabled; vendor preset: disabled)
Active: active (running) since Mon 2017-02-20 22:44:19 UTC; 3min 58s ago
Process: 15846 ExecStart=/usr/sbin/icinga2 daemon -d -e ${ICINGA2_ERROR_LOG} (code=exited, status=0/SUCCESS)
Process: 15784 ExecStartPre=/usr/lib/icinga2/prepare-dirs /etc/sysconfig/icinga2 (code=exited, status=0/SUCCESS)
Main PID: 15871 (icinga2)
CGroup: /system.slice/icinga2.service
├─15868 /usr/lib64/icinga2/sbin/icinga2 --no-stack-rlimit daemon -d -e /var/log/icinga2/error.log
└─15871 /usr/lib64/icinga2/sbin/icinga2 --no-stack-rlimit daemon -d -e /var/log/icinga2/error.log

Feb 20 22:44:19 ip-172-31-37-241 systemd[1]: Starting Icinga host/service/network monitoring system...
Feb 20 22:44:19 ip-172-31-37-241 systemd[1]: Started Icinga host/service/network monitoring system.

icinga2 daemon -C
information/cli: Icinga application loader (version: v2.6.2)
information/cli: Loading configuration file(s).
information/ConfigItem: Committing config item(s).
warning/ApplyRule: Apply rule 'satellite-host' (in /etc/icinga2/conf.d/satellite.conf: 29:1-29:41) for type 'Dependency' does not match anywhere!
information/ConfigItem: Instantiated 1 Zone.
information/ConfigItem: Instantiated 1 FileLogger.
information/ConfigItem: Instantiated 1 Endpoint.
information/ConfigItem: Instantiated 12 Notifications.
information/ConfigItem: Instantiated 2 NotificationCommands.
information/ConfigItem: Instantiated 1 ScheduledDowntime.
information/ConfigItem: Instantiated 62 CheckCommands.
information/ConfigItem: Instantiated 1 Downtime.
information/ConfigItem: Instantiated 2 HostGroups.
information/ConfigItem: Instantiated 1 IcingaApplication.
information/ConfigItem: Instantiated 3 Hosts.
information/ConfigItem: Instantiated 1 User.
information/ConfigItem: Instantiated 1 UserGroup.
information/ConfigItem: Instantiated 3 TimePeriods.
information/ConfigItem: Instantiated 3 ServiceGroups.
information/ConfigItem: Instantiated 19 Services.
information/ConfigItem: Instantiated 1 CheckerComponent.
information/ConfigItem: Instantiated 1 CompatLogger.
information/ConfigItem: Instantiated 1 StatusDataWriter.
information/ConfigItem: Instantiated 1 ExternalCommandListener.
information/ConfigItem: Instantiated 1 IdoMysqlConnection.
information/ConfigItem: Instantiated 1 NotificationComponent.
information/ScriptGlobal: Dumping variables to file '/var/cache/icinga2/icinga2.vars'
information/cli: Finished validating the configuration file(s).

the selinux is blocking the access to the data - need to be set to permissive or disabled,

Using the ansible roles without --become is impossible. Many steps currently require super user privileges. Would prefer to run the ansible roles without executing everything as super user and just use super user privileges when needed.

- yum:
    name: icinga2
    state: present

Expected Behavior

- yum:
    name: icinga2
    state: present
  become: yes .   # would prefer this explicit super user privileges

Possible Solution

Adding behave: yes to places where super user privileges are required.

Steps to Reproduce (for bugs)

Execute the roles without --become

This issue has been migrated from Redmine: https://dev.icinga.com/issues/6442

Created by mfriedrich on 2014-06-07 12:01:48 +00:00

Assignee: (none)
Status: New
Target Version: (none)
Last Update: 2015-01-27 14:11:24 +00:00 (in Redmine)

This issue has been migrated from Redmine: https://dev.icinga.com/issues/10267

Created by kmf on 2015-10-02 12:34:52 +00:00

Assignee: (none)
Status: New
Target Version: (none)
Last Update: 2016-01-08 08:24:55 +00:00 (in Redmine)

icinga2-ansible-add-hosts/templates/object_logic.j2 always denotes

address = "{{ host_address }}"

This always imports the IPv4 ping command, even on an IPv6 only node. Dual stack is not supported thes way.

I am not sure how to solve this cleanly, and would like to ask some input!

This issue has been migrated from Redmine: https://dev.icinga.com/issues/6947

Created by mfriedrich on 2014-08-17 13:58:14 +00:00

Assignee: mfriedrich
Status: Resolved (closed on 2014-08-17 14:00:06 +00:00)
Target Version: (none)
Last Update: 2015-01-27 14:11:27 +00:00 (in Redmine)

Use GPLv2 similar to https://github.com/Icinga/icinga2/blob/master/COPYING

Changesets

2014-08-17 13:57:50 +00:00 by (unknown) 4665360

Add COPYING license file

fixes #6947

If I run the role icinga2-ansible-no-ui on a freshly installed Ubuntu 14.04 as suggested in the Getting Started instructions, it fails with the following output:

TASK: [icinga2-ansible-no-ui | Install Icinga2 on Debian OS family] *********** 
failed: [icinga.example.com] => (item={'package': 'icinga2'}) => {"failed": true, "item": {"package": "icinga2"}}
stderr: E: Unable to correct problems, you have held broken packages.

stdout: Reading package lists...
Building dependency tree...
Reading state information...
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 icinga2 : Depends: icinga2-bin (= 2.1.0~icingaautorelease201409110730) but it is not going to be installed
           Depends: icinga2-common (= 2.1.0~icingaautorelease201409110730) but it is not going to be installed

msg: 'apt-get install 'icinga2' ' failed: E: Unable to correct problems, you have held broken packages.


changed: [icinga.example.com] => (item={'package': 'nagios-plugins'})

FATAL: all hosts have already failed -- aborting

apt-get install icinga2 fails with the same error message. I already executed apt-get install -f, apt-get update and apt-get dist-upgrade without errors.
Any suggestions?

You forgot to include mysql-server setup for debian based hosts

I'd submit a pull request to fix this myself but I'm too unfamiliar with ansible as of now to have any confidence that I'm using the right approach to address this.

eg. icinga2-ansible/icinga2-ansible-add-hosts/tasks/main.yml:

- name: create Autogenerated host directory
  file:
      path: "{{ icinga2_hosts_dir }}"
      owner: **icinga**
      group: **icinga**

For me it was no big deal to just hardcode the other user/group, but it would be nice if this worked right out of the box.

This issue has been migrated from Redmine: https://dev.icinga.com/issues/6443

Created by mfriedrich on 2014-06-07 12:02:08 +00:00

Assignee: (none)
Status: New
Target Version: (none)
Last Update: 2015-01-27 14:11:25 +00:00 (in Redmine)

This issue has been migrated from Redmine: https://dev.icinga.com/issues/6438

Created by mfriedrich on 2014-06-07 11:58:41 +00:00

Assignee: (none)
Status: Closed (closed on 2014-06-10 15:22:20 +00:00)
Target Version: (none)
Last Update: 2015-01-27 14:11:21 +00:00 (in Redmine)

Users must be able to choose a preferred Web Interface for Icinga2 during execution (or at the beginning) of the play. (Or maybe --step?)

The Ansible web2 Playbook has Apache2 hardcoded all over the place. Other popular webservers like NGINX are not supported.

This issue has been migrated from Redmine: https://dev.icinga.com/issues/8831

Created by thoth on 2015-03-21 14:08:50 +00:00

Assignee: (none)
Status: New
Target Version: (none)
Last Update: 2015-03-25 14:36:17 +00:00 (in Redmine)

I was trying out ansible, and tried to shoehorn the ansible playbook into a docker container with ansible in it and try the install from there. It fails on me at this step:

TASK: [icinga2-ansible-no-ui | Start Icinga2] ********************************* 
failed: [icinga_one] => {"cmd": "/sbin/initctl status icinga2", "failed": true, "rc": 8}
msg: [Errno 8] Exec format error

might be just happening too fast and I need to insert a wait in there. But I thought I'd gather any suggestions here. If you'd like to take a look at my docker container it is here:

https://github.com/joshuacox/docker-ansible-icinga2

FIXED

The Ansible Playbook only supports MySQL, can other databases (like PostgreSQL) be supported as well?

This issue has been migrated from Redmine: https://dev.icinga.com/issues/6444

Created by mfriedrich on 2014-06-07 12:02:19 +00:00

Assignee: (none)
Status: Closed (closed on 2014-06-10 15:24:10 +00:00)
Target Version: (none)
Last Update: 2015-01-27 14:11:25 +00:00 (in Redmine)