Reference

icinga2: This module installs and configures Icinga 2.
icinga2::feature::api: Configures the Icinga 2 feature api.
icinga2::feature::checker: Configures the Icinga 2 feature checker.
icinga2::feature::command: Configures the Icinga 2 feature command.
icinga2::feature::compatlog: Configures the Icinga 2 feature compatlog.
icinga2::feature::debuglog: Configures the Icinga 2 feature mainlog.
icinga2::feature::elasticsearch: Configures the Icinga 2 feature elasticsearch.
icinga2::feature::gelf: Configures the Icinga 2 feature gelf.
icinga2::feature::graphite: Configures the Icinga 2 feature graphite.
icinga2::feature::icingadb: Configures the Icinga 2 feature icingadb.
icinga2::feature::idomysql: Installs and configures the Icinga 2 feature ido-mysql.
icinga2::feature::idopgsql: Installs and configures the Icinga 2 feature ido-pgsql.
icinga2::feature::influxdb: Configures the Icinga 2 feature influxdb.
icinga2::feature::livestatus: Configures the Icinga 2 feature livestatus.
icinga2::feature::mainlog: Configures the Icinga 2 feature mainlog.
icinga2::feature::notification: Configures the Icinga 2 feature notification.
icinga2::feature::opentsdb: Configures the Icinga 2 feature opentsdb.
icinga2::feature::perfdata: Configures the Icinga 2 feature perfdata.
icinga2::feature::statusdata: Configures the Icinga 2 feature statusdata.
icinga2::feature::syslog: Configures the Icinga 2 feature syslog.
icinga2::pki::ca: This class provides multiple ways to create the CA used by Icinga 2.

Private Classes

icinga2::config: This class exists to manage general configuration files needed by Icinga 2 to run.
icinga2::globals: This class loads the default parameters by doing a hiera lookup.
icinga2::install: This class handles the installation of the Icinga 2 package. On Windows only chocolatey is supported as installation source.
icinga2::repo: This class manages the packages.icinga.com repository based on the operating system. Windows is not supported.
icinga2::service: This class handles the Icinga 2 service. By default the service will start on boot and will be restarted if stopped.

Defined types

Public Defined types

icinga2::config::fragment: Set a code fragment in a target configuration file.
icinga2::object::apiuser: Manage Icinga 2 ApiUser objects.
icinga2::object::checkcommand: Manage Icinga 2 Host objects.
icinga2::object::checkresultreader: Manage Icinga 2 CheckResultReader objects.
icinga2::object::dependency: Manage Icinga 2 dependency objects.
icinga2::object::endpoint: Manage Icinga 2 endpoint objects.
icinga2::object::eventcommand: Manage Icinga 2 EventCommand objects.
icinga2::object::host: Manage Icinga 2 Host objects.
icinga2::object::hostgroup: Manage Icinga 2 HostGroup objects.
icinga2::object::notification: Manage Icinga 2 notification objects.
icinga2::object::notificationcommand: Manage Icinga 2 notificationcommand objects.
icinga2::object::scheduleddowntime: Manage Icinga 2 scheduleddowntime objects.
icinga2::object::service: Manage Icinga 2 service objects.
icinga2::object::servicegroup: Manage Icinga 2 servicegroup objects.
icinga2::object::timeperiod: Manage Icinga 2 timeperiod objects.
icinga2::object::user: Manage Icinga 2 user objects.
icinga2::object::usergroup: Manage Icinga 2 usergroup objects.
icinga2::object::zone: Manage Icinga 2 zone objects.

Private Defined types

icinga2::feature: Private define resource to used by this module only.
icinga2::object: Define resource to used by this module only.

Functions

icinga2::icinga2_attributes: Summarise what the function does here
icinga2::icinga2_ticket_id: Summarise what the function does here
icinga2_attributes: Wrapper for config parser
icinga2_ticket_id: Generates a auth ticket to get a certificate

Data types

Icinga2::CustomAttributes: A type for the structure of custom attributes
Icinga2::Fingerprint: Type for certificate fingerprints
Icinga2::Interval: A strict type for intervals
Icinga2::LogFacility: A strict type of syslog facilities
Icinga2::LogSeverity: A strict type for log levels

Classes

icinga2

This module installs and configures Icinga 2.

Note Setting manage_package to false means that all package aren't handeld by the module included the IDO packages.

Examples

Declare icinga2 with all defaults. Keep in mind that your operating system may not have Icinga 2 in its package repository.

include ::icinga2

If you want to use the official Icinga Project repository, enable the manage_repo parameter.

class { 'icinga2':
  manage_repo => true,
}

If you don't want to manage the Icinga 2 service with puppet, you can dissable this behaviour with the manage_service parameter. When set to false no service refreshes will be triggered.

class { 'icinga2':
  manage_service => false,
}

To manage the version of Icinga 2 binaries you can do it by disable package management:

package { 'icinga2':
  ensure  => latest,
  notifiy => Class['icinga2'],
}

class { '::icinga2':
  manage_package => false,
}

To set constants in etc/icinga2/constants.conf use the constants parameter and as value a hash, every key will be set as constant and assigned by it's value. Defaults can be overwritten.

class { 'icinga2':
  ...
  constants   => {
    'key1'             => 'value1',
    'key2'             => 'value2',
    'PluginContirbDir' => '/usr/local/nagios/plugins',
  }
}

Enabling features with there defaults or loading parameters via Hiera:

class { '::icinga2':
  manage_repo => true,
  features    => ['checker', 'mainlog', 'command'],
}

The ITL contains several CheckCommand definitions to load, set these in the array of the plugins parameter, i.e. for a master or satellite do the following and disbale the load of the configuration in conf.d.

class { 'icinga':
  ...
  plugins => [ 'plugins', 'contrib-plugins', 'nscp', 'windows-plugins' ],
  confd   => false,
}

Sometimes it's necessary to cover very special configurations that you cannot handle with this module. In this case you can use the icinga2::config::file tag on your file resource. This module collects all file resource types with this tag and triggers a reload of Icinga 2 on a file change.

include ::icinga2

file { '/etc/icinga2/conf.d/foo.conf':
  ensure => file,
  owner  => icinga,
  ...
  tag    => 'icinga2::config::file',
  ...
}

To use a different directory for your configuration, create the directory as file resource with tag icinga2::config::file.

file { '/etc/icinga2/local.d':
  ensure => directory,
  tag    => 'icinga2::config::file'
}
class { 'icinga2':
  ...
  confd => 'local.d',
}

If set to true the service is managed otherwise the service also isn't restarted if a config file changed.

Default value: true

`features`

Data type: Array

List of features to activate. Defaults to [checker, mainlog, notification].

`purge_features`

Data type: Boolean

Define if configuration files for features not managed by Puppet should be purged.

Default value: true

`constants`

Data type: Hash

Hash of constants. Defaults are set in the params class. Your settings will be merged with the defaults.

Default value: {}

`plugins`

Data type: Array

A list of the ITL plugins to load. Defaults to [ 'plugins', 'plugins-contrib', 'windows-plugins', 'nscp' ].

`confd`

Data type: Variant[Boolean, String]

conf.d is the directory where Icinga 2 stores its object configuration by default. To disable it, set this parameter to false. By default this parameter is true. It's also possible to assign your own directory. This directory must be managed outside of this module as file resource with tag icinga2::config::file.

Default value: true

icinga2::feature::api

Configures the Icinga 2 feature api.

Examples

Use the puppet certificates and key copy these files to the cert directory named to 'hostname.key', 'hostname.crt' and 'ca.crt' if the contant NodeName is set to 'hostname'.

include ::icinga2::feature::api

To use your own certificates and key as file resources if the contant NodeName is set to fqdn (default) do:

class { 'icinga2::feature::api':
  pki => 'none',
}

File {
  owner => 'icinga',
  group => 'icinga',
}

file { "/var/lib/icinga2/certs/${::fqdn}.key":
  ensure => file,
  tag    => 'icinga2::config::file',
  source => "puppet:///modules/profiles/private_keys/${::fqdn}.key",
}
...

If you like to manage the certificates and the key as strings in base64 encoded format:

class { 'icinga2::feature::api':
  pki         => 'none',
  ssl_cacert  => '-----BEGIN CERTIFICATE----- ...',
  ssl_key     => '-----BEGIN RSA PRIVATE KEY----- ...',
  ssl_cert    => '-----BEGIN CERTIFICATE----- ...',
}

Fine tune TLS settings

class { '::icinga2::feature::api':
  ssl_protocolmin => 'TLSv1.2',
  ssl_cipher_list => 'HIGH:MEDIUM:!aNULL:!MD5:!RC4',
}

Transfer a CA certificate and key from an existing CA by using the file resource:

include ::icinga2

file { '/var/lib/icinga2/ca/ca.crt':
  source => '...',
  tag    => 'icinga2::config::file',
}

file { '/var/lib/icinga2/ca/ca.key':
  source => '...',
  tag    => 'icinga2::config::file',
}

Parameters

The following parameters are available in the icinga2::feature::api class.

`ensure`

Data type: Enum['absent', 'present']

Set to present enables the feature api, absent disabled it.

Default value: present

`pki`

Data type: Enum['ca', 'icinga2', 'none', 'puppet']

Provides multiple sources for the certificate, key and ca.

puppet: Copies the key, cert and CAcert from the Puppet ssl directory to the cert directory /var/lib/icinga2/certs on Linux and C:/ProgramData/icinga2/var/lib/icinga2/certs on Windows.
icinga2: Uses the icinga2 CLI to generate a Certificate Request and Key to obtain a signed Certificate from 'ca_host' using the icinga2 ticket mechanism. In case the 'ticket_salt' has been configured the ticket_id will be generated by the module in a custom function that imitates the icinga ticket generation. The 'ticket_id' parameter can be used to directly set an ticket_id.
none: Does nothing and you either have to manage the files yourself as file resources or use the ssl_key, ssl_cert, ssl_cacert parameters.

Default value: undef

icinga2::feature::checker

Configures the Icinga 2 feature checker.

Note Deprecated in Icinga 2.11, replaced by global constant MaxConcurrentChecks which will be set if you still use concurrent_checks.

Sets how often should the log file be rotated.

Default value: undef

icinga2::feature::debuglog

Configures the Icinga 2 feature mainlog.

Parameters

The following parameters are available in the icinga2::feature::debuglog class.

`ensure`

Data type: Enum['absent', 'present']

Set to present enables the feature mainlog, absent disables it.

Default value: present

`path`

Data type: Stdlib::Absolutepath

Absolute path to the log file.

Default value: "${::icinga2::globals::log_dir}/debug.log"

icinga2::feature::elasticsearch

Configures the Icinga 2 feature elasticsearch.

Examples

class { 'icinga2::feature::elasticsearch':
  host     => "10.10.0.15",
  index    => "icinga2"
}

Enable the high availability functionality. Only valid in a cluster setup.

Default value: undef

icinga2::feature::graphite

Configures the Icinga 2 feature graphite.

Examples

class { '::icinga2::feature::graphite':
  host                   => '10.10.0.15',
  port                   => 2003,
  enable_send_thresholds => true,
  enable_send_metadata   => true,
}

Default value: undef

`enable_send_metadata`

Examples

The ido-mysql featue requires an existing database and a user with permissions. This example uses the puppetlabs/mysql module.

include mysql::server

mysql::db { 'icinga2':
  user     => 'icinga2',
  password => 'supersecret',
  host     => 'localhost',
  grant    => ['SELECT', 'INSERT', 'UPDATE', 'DELETE', 'DROP', 'CREATE VIEW', 'CREATE', 'INDEX', 'EXECUTE', 'ALTER'],
}

class{ 'icinga2::feature::idomysql':
  user          => "icinga2",
  password      => "supersecret",
  database      => "icinga2",
  import_schema => true,
  require       => Mysql::Db['icinga2']
}

Parameters

The following parameters are available in the icinga2::feature::idomysql class.

`ensure`

Data type: Enum['absent', 'present']

Set to present enables the feature ido-mysql, absent disables it.

Default value: present

`host`

Data type: Stdlib::Host

MySQL database host address.

Default value: 'localhost'

`port`

Data type: Optional[Stdlib::Port::Unprivileged]

MySQL database port.

Default value: undef

`socket_path`

Data type: Optional[Stdlib::Absolutepath]

MySQL socket path.

Default value: undef

`user`

Data type: String

MySQL database user with read/write permission to the icinga database.

Default value: 'icinga'

Data type: Boolean

Whether to import the MySQL schema or not.

Default value: false

icinga2::feature::idopgsql

Installs and configures the Icinga 2 feature ido-pgsql.

Examples

The ido-pgsql featue requires an existing database and a user with permissions. This example uses the puppetlab/postgresql module.

include icinga2
include postgresql::server

postgresql::server::db { 'icinga2':
  user     => 'icinga2',
  password => postgresql_password('icinga2', 'supersecret'),
}

class{ 'icinga2::feature::idopgsql':
  user          => "icinga2",
  password      => "supersecret",
  database      => "icinga2",
  import_schema => true,
  require       => Postgresql::Server::Db['icinga2']
}

Parameters

The following parameters are available in the icinga2::feature::idopgsql class.

`ensure`

Data type: Enum['absent', 'present']

Set to present enables the feature ido-pgsql, absent disables it.

Default value: present

`host`

Data type: Stdlib::Host

PostgreSQL database host address.

Default value: 'localhost'

`port`

Data type: Stdlib::Port::Unprivileged

PostgreSQL database port.

Default value: 5432

`user`

Data type: String

PostgreSQL database user with read/write permission to the icinga database.

Default value: 'icinga'

Configures the Icinga 2 feature influxdb.

Examples

class { 'icinga2::feature::influxdb':
  host     => "10.10.0.15",
  username => "icinga2",
  password => "supersecret",
  database => "icinga2"
}

Examples

Let Icinga 2 generate a CA for you:

include icinga2
include icinga2::pki::ca

Set the content of CA certificate and key:

include icinga2

class { 'icinga2::pki::ca':
  ca_cert => '-----BEGIN CERTIFICATE----- ...',
  ca_key  => '-----BEGIN RSA PRIVATE KEY----- ...',
}

Parameters

The following parameters are available in the icinga2::pki::ca class.

`ca_cert`

Data type: Optional[String]

Content of the CA certificate. If this is unset, a certificate will be generated with the Icinga 2 CLI.

Default value: undef

`ca_key`

Data type: Optional[String]

Content of the CA key. If this is unset, a key will be generated with the Icinga 2 CLI.

Default value: undef

Defined types

icinga2::config::fragment

Set a code fragment in a target configuration file.

Examples

To create a custom configuration add content to a specified target at the position you set in the order parameter. You can use also templates to add content.

include ::icinga2

icinga2::object::service { 'load':
  display_name  => 'Load',
  apply         => true,
  check_command => 'load',
  assign        => ['vars.os == Linux'],
  target        => '/etc/icinga2/conf.d/service_load.conf',
  order         => 30,
}

icinga2::config::fragment { 'load-function':
  target => '/etc/icinga2/conf.d/service_load.conf',
  order => 10,
  content => 'vars.load_wload1 = {{
    if (get_time_period("backup").is_inside) {
      return 20
    } else {
      return 5
    }
  }}',
}

Parameters

The following parameters are available in the icinga2::config::fragment defined type.

`content`

Data type: String

Content to insert in file specified in target.

`target`

Data type: Stdlib::Absolutepath

Destination config file to store in this fragment. File will be declared the first time.

`order`

Data type: Variant[String, Integer]

String or integer to set the position in the target file, sorted in alpha numeric order. Defaults to 00.

Default value: '00'

`code_name`

Data type: String

Default value: $title

icinga2::object::apiuser

Manage Icinga 2 ApiUser objects.

Examples

Create an user with full permissions:

::icinga2::object::apiuser { 'director':
  ensure      => present,
  password    => 'Eih5Weefoo2oa8sh',
  permissions => [ '*' ],
  target      => '/etc/icinga2/conf.d/api-users.conf',
}

Create an user with restricted permissions for Icinga Web 2:

::icinga2::object::apiuser { 'icingaweb2':
  ensure      => present,
  password    => '12e2ef553068b519',
  permissions => [ 'status/query', 'actions/*', 'objects/modify/*', 'objects/query/*' ],
  target      => '/etc/icinga2/conf.d/api-users.conf',
}

Create user who's only allowed to query hosts and services:

::icinga2::object::apiuser { 'read':
  ensure      => present,
  password    => 'read',
  permissions => [
    {
      permission => 'objects/query/Host',
      filter     => '{{ regex("^Linux", host.vars.os) }}'
    },
    {
      permission => 'objects/query/Service',
      filter     => '{{ regex("^Linux", host.vars.os) }}'
    },
  ],
  target      => '/etc/icinga2/conf.d/api-users.conf',
}

Default value: undef

`arguments`

Data type: Optional[Variant[Hash, String]]

A dictionary of command arguments.

Default value: undef

`target`

Data type: Stdlib::Absolutepath

Destination config file to store in this object. File will be declared the first time.

`template`

Data type: Boolean

Set to true creates a template instead of an object.

Default value: false

`order`

Data type: Variant[String, Integer]

String or integer to set the position in the target file, sorted alpha numeric.

Default value: 15

icinga2::object::checkresultreader

Manage Icinga 2 CheckResultReader objects.

Parameters

The following parameters are available in the icinga2::object::checkresultreader defined type.

`ensure`

Data type: Enum['absent', 'present']

Set to present enables the object, absent disables it.

Default value: present

`checkresultreader_name`

Data type: String

Set the Icinga 2 name of the ceckresultreader object.

Default value: $title

`spool_dir`

Data type: Optional[Stdlib::Absolutepath]

The directory which contains the check result files.

Default value: undef

`target`

`order`

Data type: Variant[String, Integer]

String or integer to set the position in the target file, sorted alpha numeric.

Default value: 50

icinga2::object::hostgroup

Manage Icinga 2 HostGroup objects.

Examples

icinga2::object::hostgroup { 'monitoring-hosts':
  display_name => 'Linux Servers',
  groups       => [ 'linux-servers' ],
  target       => '/etc/icinga2/conf.d/groups2.conf',
  assign       => [ 'host.name == NodeName' ],
}

Parameters

The following parameters are available in the icinga2::object::hostgroup defined type.

`ensure`

Data type: Enum['absent', 'present']

Set to present enables the object, absent disables it.

Default value: present

`display_name`

Data type: Optional[String]

A short description of the host group.

Default value: undef

`groups`

Data type: Optional[Array]

An array of nested group names.

Default value: undef

`assign`

Data type: Array

Assign host group members using the group rules.

Default value: []

`ignore`

Data type: Array

Ignore host group members using the group rules.

Default value: []

`target`

Data type: Stdlib::Absolutepath

Destination config file to store in this object. File will be declared at the first time.

`order`

Data type: Variant[String, Integer]

String or integer to set the position in the target file, sorted alpha numeric.

Default value: 55

`hostgroup_name`

Sorted List of templates to include.

Default value: []

`target`

Data type: Stdlib::Absolutepath

Destination config file to store in this object. File will be declared the first time.

`order`

Data type: Variant[String, Integer]

String or integer to set the position in the target file, sorted alpha numeric.

Default value: 85

`assign`

Data type: Array

Default value: []

`ignore`

Sorted List of templates to include.

Default value: []

`target`

Assign user group members using the group assign rules.

Default value: []

`ignore`

Data type: Array

Exclude users using the group ignore rules.

Default value: []

`target`

Data type: Stdlib::Absolutepath

Destination config file to store in this object. File will be declared the first time.

`order`

Data type: Variant[String, Integer]

String or integer to set the position in the target file, sorted alpha numeric.

Default value: 90

icinga2::object::service

Manage Icinga 2 service objects.

Examples

A service `ping` is applied to all hosts with a valid ipv4 address.

::icinga2::object::service { 'ping4':
  import        => ['generic-service'],
  apply         => true,
  check_command => 'ping',
  assign        => ['host.address'],
  target        => '/etc/icinga2/zones.d/global-templates/services.conf',
}

A `apply Service for (disk_name =>config in host.vars.disks)` rule is applied to all Linux hosts with an Icinga Agent. Note in this example it's required that the endpoint (see `command_endpoint`) and the host object has the same name!

::icinga2::object::service { 'linux_disks':
  import           => ['generic-service'],
  apply            =>  'disk_name => config in host.vars.disks',
  check_command    => 'disk',
  command_endpoint => 'host.name',
  vars             => '+ config',
  assign           => ['host.vars.os == Linux'],
  ignore           => ['host.vars.noagent'],
  target           => '/etc/icinga2/zones.d/global-templates/services.conf',
}

Destination config file to store in this object. File will be declared the first time.

`order`

Data type: Variant[String, Integer]

String or integer to set the position in the target file, sorted alpha numeric.

Default value: 60

icinga2::object::servicegroup

Manage Icinga 2 servicegroup objects.

Parameters

The following parameters are available in the icinga2::object::servicegroup defined type.

`ensure`

Data type: Enum['absent', 'present']

Set to present enables the object, absent disables it.

Default value: present

`servicegroup_name`

Data type: String

Set the Icinga 2 name of the servicegroup object.

Default value: $title

`display_name`

Data type: Optional[String]

A short description of the service group.

Default value: undef

`groups`

Data type: Optional[Array]

An array of nested group names.

Default value: undef

`assign`

Data type: Array

Assign user group members using the group assign rules.

Default value: []

`ignore`

Data type: Array

Exclude users using the group ignore rules.

Default value: []

`template`

Data type: Boolean

Set to true creates a template instead of an object.

Default value: false

`import`

Data type: Array

Sorted List of templates to include.

Default value: []

`target`

Sorted List of templates to include.

Default value: []

`target`

Data type: Stdlib::Absolutepath

Destination config file to store in this object. File will be declared the first time.

`target`

Data type: Stdlib::Absolutepath

Destination config file to store in this object. File will be declared the first time.

`order`

Data type: Variant[String, Integer]

String or integer to set the position in the target file, sorted alpha numeric.

Default value: 80

icinga2::object::zone

Manage Icinga 2 zone objects.

Parameters

The following parameters are available in the icinga2::object::zone defined type.

`ensure`

Data type: Enum['absent', 'present']

Set to present enables the object, absent disables it.

Default value: present

`zone_name`

Data type: String

Set the Icinga 2 name of the zone object.

Default value: $title

`endpoints`

Data type: Optional[Array]

List of endpoints belong to this zone.

Default value: []

`parent`

Data type: Optional[String]

Parent zone to this zone.

Default value: undef

`global`

Data type: Optional[Boolean]

If set to true, a global zone is defined and the parameter endpoints and parent are ignored.

Default value: false

`target`

Data type: Optional[Stdlib::Absolutepath]

Destination config file to store in this object. File will be declared at the first time.

Default value: undef

`order`

Data type: Variant[String, Integer]

String or integer to control the position in the target file, sorted alpha numeric.

Type: Ruby 3.x API

Generates a auth ticket to get a certificate

`icinga2_ticket_id()`

The icinga2_ticket_id function.

Returns: Any The ticket to get a certificate

Data types

Icinga2::CustomAttributes

A type for the structure of custom attributes

Alias of Optional[Variant[String, Array[Variant[String, Hash]], Hash]]

Icinga2::Fingerprint

Type for certificate fingerprints

Alias of Pattern[/^([0-9a-fA-F]{2}\:){19}[0-9,a-f,A-F]{2}$/]

Icinga2::Interval

A strict type for intervals

Alias of Pattern[/^\d+\.?\d*[d|h|m|s]?$/]

Icinga2::LogFacility

A strict type of syslog facilities

Alias of Variant[Enum['LOG_AUTH', 'LOG_AUTHPRIV', 'LOG_CRON', 'LOG_DAEMON', 'LOG_FTP', 'LOG_KERN', 'LOG_LPR', 'LOG_MAIL', 'LOG_NEWS', 'LOG_SYSLOG', 'LOG_USER', 'LOG_UUCP'], Pattern[/^LOG_LOCAL[0-7]$/]]

Icinga2::LogSeverity

A strict type for log levels

Alias of Enum['debug', 'information', 'notice', 'warning', 'critical']

Files

REFERENCE.md

Latest commit

History

REFERENCE.md

File metadata and controls

Reference

Table of Contents

Classes

icinga2

Examples

Declare icinga2 with all defaults. Keep in mind that your operating system may not have Icinga 2 in its package repository.

If you want to use the official Icinga Project repository, enable the manage_repo parameter.

If you don't want to manage the Icinga 2 service with puppet, you can dissable this behaviour with the manage_service parameter. When set to false no service refreshes will be triggered.

To manage the version of Icinga 2 binaries you can do it by disable package management:

To set constants in etc/icinga2/constants.conf use the constants parameter and as value a hash, every key will be set as constant and assigned by it's value. Defaults can be overwritten.

Enabling features with there defaults or loading parameters via Hiera:

The ITL contains several CheckCommand definitions to load, set these in the array of the plugins parameter, i.e. for a master or satellite do the following and disbale the load of the configuration in conf.d.

Sometimes it's necessary to cover very special configurations that you cannot handle with this module. In this case you can use the icinga2::config::file tag on your file resource. This module collects all file resource types with this tag and triggers a reload of Icinga 2 on a file change.

To use a different directory for your configuration, create the directory as file resource with tag icinga2::config::file.

Parameters

ensure

enable

manage_repo

manage_package

manage_selinux

manage_service

features

purge_features

constants

plugins

confd

icinga2::feature::api

Examples

Use the puppet certificates and key copy these files to the cert directory named to 'hostname.key', 'hostname.crt' and 'ca.crt' if the contant NodeName is set to 'hostname'.

To use your own certificates and key as file resources if the contant NodeName is set to fqdn (default) do:

If you like to manage the certificates and the key as strings in base64 encoded format:

Fine tune TLS settings

Transfer a CA certificate and key from an existing CA by using the file resource:

Parameters

ensure

pki

ssl_key

ssl_cert

ssl_cacert

ssl_crl

accept_config

accept_commands

max_anonymous_clients

ca_host

ca_port

fingerprint

ticket_salt

ticket_id

endpoints

zones

ssl_protocolmin

ssl_handshake_timeout

ssl_cipher_list

bind_host

bind_port

access_control_allow_origin

access_control_allow_credentials

access_control_allow_headers

access_control_allow_methods

environment

icinga2::feature::checker

Parameters

ensure

concurrent_checks

icinga2::feature::command

Parameters

ensure

command_path

icinga2::feature::compatlog

Parameters

ensure

log_dir

rotation_method

icinga2::feature::debuglog

`ensure`

`enable`

`manage_repo`

`manage_package`

`manage_selinux`

`manage_service`

`features`

`purge_features`

`constants`

`plugins`

`confd`

`ensure`

`pki`

`ssl_key`

`ssl_cert`

`ssl_cacert`

`ssl_crl`

`accept_config`

`accept_commands`

`max_anonymous_clients`

`ca_host`

`ca_port`

`fingerprint`

`ticket_salt`

`ticket_id`

`endpoints`

`zones`

`ssl_protocolmin`

`ssl_handshake_timeout`

`ssl_cipher_list`

`bind_host`

`bind_port`

`access_control_allow_origin`

`access_control_allow_credentials`

`access_control_allow_headers`

`access_control_allow_methods`

`environment`

`ensure`

`concurrent_checks`

`ensure`

`command_path`

`ensure`

`log_dir`

`rotation_method`

`ensure`

`path`

`ensure`

`host`

`port`

`index`

`username`

`password`

`enable_ssl`

`ssl_key_path`

`ssl_cert_path`

`ssl_cacert_path`

`ssl_key`

`ssl_cert`

`ssl_cacert`

`enable_send_perfdata`

`flush_interval`

`flush_threshold`

`enable_ha`

`ensure`

`host`

`port`

`source`

`enable_send_perfdata`

`enable_ha`

`ensure`

`host`

`port`

`host_name_template`

`service_name_template`

`enable_send_thresholds`

`enable_send_metadata`

`enable_ha`

`ensure`

`host`

`port`