cache_dir = Chef::Config[:file_cache_path]
-prometheus_version = "2.39.1"
+prometheus_version = "2.41.0"
alertmanager_version = "0.24.0"
-karma_version = "0.108"
+karma_version = "0.111"
directory "/opt/prometheus-server" do
owner "root"
user "prometheus"
exec_start "/opt/promscale/bin/promscale --db.uri postgresql:///promscale?host=/run/postgresql&port=5432 --db.connections-max 400"
limit_nofile 16384
- private_tmp true
- protect_devices true
- protect_system "strict"
- protect_home true
- no_new_privileges true
+ sandbox :enable_network => true
+ restrict_address_families "AF_UNIX"
end
if node[:prometheus][:promscale]
description "Alert dashboard for Prometheus Alertmanager"
user "prometheus"
exec_start "/opt/prometheus-server/karma/karma-linux-amd64 --config.file=/etc/prometheus/karma.yml"
- private_tmp true
- private_devices true
- protect_system "full"
- protect_home true
- no_new_privileges true
+ sandbox :enable_network => true
restart "on-failure"
end
action [:enable, :start]
subscribes :reload, "template[/etc/prometheus/karma.yml]"
subscribes :restart, "archive_file[#{cache_dir}/karma-linux-amd64.tar.gz]"
+ subscribes :restart, "systemd_service[prometheus-karma]"
end
package "grafana-enterprise"