Hi Giovanni,

It doesn't feel right from a security standpoint to merge the production and cloud services concerns. I would also be concerned about the additional load placed on the production Icinga instance (check latency comes to mind).

I would recommend we spin up cloud services-specific copy of what we have in production until we know what our next monitoring solution looks like.

If you would like a hand, I could make some time to assist.

On Mon, Feb 25, 2019 at 10:40 AM Giovanni Tirloni <gtirloni@wikimedia.org> wrote:

Hi,

If we poke roles in the firewall so Icinga can reach the VMs and we
define the monitoring::service stuff in Puppet, is that all we need to
shutdown Shinken? Do you think there would be any concerns with going
that route?

I'm asking about this because soon we'll see requests about removing
more and more Jessie support from the Puppet codebase [0] and there's no
exit strategy from Jessie for Shinken (it's not available in Stretch
unless we want to package things ourselves, which I tried and failed).

0 - https://gerrit.wikimedia.org/r/c/operations/puppet/+/491460

Thanks,

--
Giovanni Tirloni
Operations Engineer
Wikimedia Foundation