Hi Giovanni,
It doesn't feel right from a security standpoint to merge the production and cloud services concerns. I would also be concerned about the additional load placed on the production Icinga instance (check latency comes to mind).
I would recommend we spin up cloud services-specific copy of what we have in production until we know what our next monitoring solution looks like.
If you would like a hand, I could make some time to assist.
CW
On Mon, Feb 25, 2019 at 10:40 AM Giovanni Tirloni gtirloni@wikimedia.org wrote:
Hi,
If we poke roles in the firewall so Icinga can reach the VMs and we define the monitoring::service stuff in Puppet, is that all we need to shutdown Shinken? Do you think there would be any concerns with going that route?
I'm asking about this because soon we'll see requests about removing more and more Jessie support from the Puppet codebase [0] and there's no exit strategy from Jessie for Shinken (it's not available in Stretch unless we want to package things ourselves, which I tried and failed).
0 - https://gerrit.wikimedia.org/r/c/operations/puppet/+/491460
Thanks,
-- Giovanni Tirloni Operations Engineer Wikimedia Foundation