Erich Blume
16bfe06b7b
LaunchDaemons run in the system domain and require sudo to query. Without become: true, the check always fails and tries to reload. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
132 lines
4 KiB
YAML
132 lines
4 KiB
YAML
---
|
|
# Grafana Alloy installation and configuration
|
|
# See defaults/main.yml for build instructions
|
|
|
|
- name: Verify alloy binary exists
|
|
ansible.builtin.stat:
|
|
path: "{{ alloy_binary }}"
|
|
register: alloy_binary_stat
|
|
|
|
- name: Fail if alloy binary not found
|
|
ansible.builtin.fail:
|
|
msg: |
|
|
Alloy binary not found at {{ alloy_binary }}.
|
|
Please build from source first (see ansible/roles/alloy/defaults/main.yml)
|
|
when: not alloy_binary_stat.stat.exists
|
|
|
|
- name: Ensure alloy config directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ alloy_config_dir }}"
|
|
state: directory
|
|
mode: '0755'
|
|
|
|
- name: Ensure alloy data directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ alloy_data_dir }}"
|
|
state: directory
|
|
mode: '0755'
|
|
|
|
- name: Ensure textfile collector directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ alloy_textfile_dir }}"
|
|
state: directory
|
|
mode: '0755'
|
|
|
|
# === Fetch PostgreSQL password from 1Password ===
|
|
# Skipped when running full playbook (pre_tasks sets it)
|
|
# but runs when using --tags alloy
|
|
|
|
- name: Fetch PostgreSQL metrics password from 1Password
|
|
ansible.builtin.command:
|
|
cmd: >-
|
|
op --vault {{ alloy_op_vault }} item get {{ alloy_op_postgres_item }}
|
|
--fields {{ alloy_op_postgres_field }} --reveal
|
|
delegate_to: localhost
|
|
register: alloy_postgres_password_result
|
|
changed_when: false
|
|
no_log: true
|
|
when:
|
|
- alloy_collect_postgres | default(false)
|
|
- alloy_postgres_password is not defined
|
|
|
|
- name: Set PostgreSQL password fact
|
|
ansible.builtin.set_fact:
|
|
alloy_postgres_password: "{{ alloy_postgres_password_result.stdout }}"
|
|
no_log: true
|
|
when:
|
|
- alloy_collect_postgres | default(false)
|
|
- alloy_postgres_password is not defined
|
|
|
|
# === Deploy configuration ===
|
|
|
|
- name: Deploy PostgreSQL custom queries config
|
|
ansible.builtin.template:
|
|
src: postgres_queries.yaml.j2
|
|
dest: "{{ alloy_config_dir }}/postgres_queries.yaml"
|
|
mode: '0600'
|
|
notify: Restart alloy
|
|
when: alloy_collect_postgres | default(false)
|
|
|
|
- name: Deploy alloy configuration
|
|
ansible.builtin.template:
|
|
src: config.alloy.j2
|
|
dest: "{{ alloy_config_dir }}/config.alloy"
|
|
mode: '0600'
|
|
notify: Restart alloy
|
|
no_log: true
|
|
|
|
- name: Deploy alloy LaunchAgent plist
|
|
ansible.builtin.template:
|
|
src: alloy.plist.j2
|
|
dest: ~/Library/LaunchAgents/mcquack.eblume.alloy.plist
|
|
mode: '0644'
|
|
notify: Restart alloy
|
|
|
|
- name: Check if alloy LaunchAgent is loaded
|
|
ansible.builtin.command: launchctl list mcquack.eblume.alloy
|
|
register: alloy_launchctl_check
|
|
changed_when: false
|
|
failed_when: false
|
|
|
|
- name: Load alloy LaunchAgent if not loaded
|
|
ansible.builtin.command: launchctl load ~/Library/LaunchAgents/mcquack.eblume.alloy.plist
|
|
when: alloy_launchctl_check.rc != 0
|
|
changed_when: true
|
|
failed_when: false
|
|
|
|
# === macOS Power Metrics (requires root) ===
|
|
|
|
- name: Deploy macos-power-metrics script
|
|
ansible.builtin.template:
|
|
src: macos-power-metrics.sh.j2
|
|
dest: "{{ alloy_power_metrics_script }}"
|
|
mode: '0755'
|
|
become: true
|
|
notify: Reload macos-power-metrics
|
|
when: alloy_collect_power_metrics | default(false)
|
|
|
|
- name: Deploy macos-power-metrics LaunchDaemon plist
|
|
ansible.builtin.template:
|
|
src: macos-power-metrics.plist.j2
|
|
dest: /Library/LaunchDaemons/mcquack.eblume.macos-power-metrics.plist
|
|
mode: '0644'
|
|
become: true
|
|
notify: Reload macos-power-metrics
|
|
when: alloy_collect_power_metrics | default(false)
|
|
|
|
- name: Check if macos-power-metrics LaunchDaemon is loaded
|
|
ansible.builtin.command: launchctl list mcquack.eblume.macos-power-metrics
|
|
become: true
|
|
register: alloy_power_metrics_launchctl_check
|
|
changed_when: false
|
|
failed_when: false
|
|
when: alloy_collect_power_metrics | default(false)
|
|
|
|
- name: Load macos-power-metrics LaunchDaemon if not loaded
|
|
ansible.builtin.command: launchctl load /Library/LaunchDaemons/mcquack.eblume.macos-power-metrics.plist
|
|
become: true
|
|
when:
|
|
- alloy_collect_power_metrics | default(false)
|
|
- alloy_power_metrics_launchctl_check.rc != 0
|
|
changed_when: true
|
|
failed_when: false
|