From 31edd53e794db1410c13be075262f2971560da2f Mon Sep 17 00:00:00 2001 From: Takwa Date: Thu, 22 Oct 2026 13:06:40 +0200 Subject: [PATCH 1/2] Let sf and sf2 push metrics and logs to the monitoring hub sf and sf2 are not in the inventory, so the hub's 8443 allowlist does not cover them. They are about to run Alloy next to their old agents (ipni/infra#166, #188). Co-Authored-By: Claude Opus 5.5 --- roles/monitoring/defaults/main.yml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/roles/monitoring/defaults/main.yml b/roles/monitoring/defaults/main.yml index 714996b..fe4dc04 100644 --- a/roles/monitoring/defaults/main.yml +++ b/roles/monitoring/defaults/main.yml @@ -1,6 +1,8 @@ --- # Addresses outside the inventory that push metrics and logs to the hub too. -# The boxes in the inventory are always allowed. sf and sf2 (ipni/infra) go -# here when they move off grafana.ipni.io: -# monitoring_ingest_extra_sources: [103.232.206.165, 103.232.206.162] -monitoring_ingest_extra_sources: [] +# The boxes in the inventory are always allowed. sf and sf2 (ipni/infra) run +# Alloy next to their old agents while they move off grafana.ipni.io +# (ipni/infra#166, #188). +monitoring_ingest_extra_sources: + - 103.232.206.165 # sf (debian-ipni-fmt-2) + - 103.232.206.162 # sf2 (debian-ipni-fmt-1) From 34bda6697aedc87129c1d2b0dbc5ad199029357c Mon Sep 17 00:00:00 2001 From: Takwa Date: Thu, 22 Oct 2026 13:12:02 +0200 Subject: [PATCH 2/2] Drop the internal hostnames from the ingest allowlist comments Co-Authored-By: Claude Opus 5.5 --- roles/monitoring/defaults/main.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/monitoring/defaults/main.yml b/roles/monitoring/defaults/main.yml index fe4dc04..384ff3a 100644 --- a/roles/monitoring/defaults/main.yml +++ b/roles/monitoring/defaults/main.yml @@ -4,5 +4,5 @@ # Alloy next to their old agents while they move off grafana.ipni.io # (ipni/infra#166, #188). monitoring_ingest_extra_sources: - - 103.232.206.165 # sf (debian-ipni-fmt-2) - - 103.232.206.162 # sf2 (debian-ipni-fmt-1) + - 103.232.206.165 # sf + - 103.232.206.162 # sf2