Manage Prometheus firewall rules

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
2023-02-16 01:31:57 +01:00 · 2023-02-16 01:31:57 +01:00 · 79f11d9b1e
commit 79f11d9b1e
parent 942a0eea4f
2 changed files with 15 additions and 0 deletions
--- a/pillar/role/monitoring/prometheus-exporter-blackbox.sls
+++ b/pillar/role/monitoring/prometheus-exporter-blackbox.sls
@ -39,3 +39,12 @@ prometheus:
                - expect: "^:[^ ]+ 001"
            icmp:
              prober: icmp
+
+firewalld:
+  zones:
+    internal:
+      ports:
+        - comment: 'Prometheus Blackbox Exporter'
+          port: 9115
+          protocol: tcp
+
--- a/pillar/role/monitoring/prometheus.sls
+++ b/pillar/role/monitoring/prometheus.sls
@ -9,3 +9,9 @@ prometheus:
          global:
            scrape_interval: 15s
            evaluation_interval: 1m
+
+firewalld:
+  zones:
+    internal:
+      services:
+        - prometheus