mirror of
https://github.com/kemko/nomad.git
synced 2026-01-02 00:15:43 +03:00
8a5a057d88
Nomad Enterprise users operating in air-gapped or otherwise secured environments don't want to send license reporting metrics directly from their servers. Implement manual/offline reporting by periodically recording usage metrics snapshots in the state store, and providing an API and CLI by which cluster administrators can download the snapshot for review and out-of-band transmission to HashiCorp. This is the CE portion of the work required for implemention in the Enterprise product. Nomad CE does not perform utilization reporting. Ref: https://github.com/hashicorp/nomad-enterprise/pull/2673 Ref: https://hashicorp.atlassian.net/browse/NMD-68 Ref: https://go.hashi.co/rfc/nmd-210
434 lines
9.6 KiB
JSON
434 lines
9.6 KiB
JSON
{
|
|
"acl": [
|
|
{
|
|
"enabled": true,
|
|
"policy_ttl": "60s",
|
|
"replication_token": "foobar",
|
|
"token_ttl": "60s",
|
|
"role_ttl": "60s",
|
|
"token_min_expiration_ttl": "1h",
|
|
"token_max_expiration_ttl": "100h"
|
|
}
|
|
],
|
|
"audit": {
|
|
"enabled": true,
|
|
"sink": [
|
|
{
|
|
"file": {
|
|
"type": "file",
|
|
"format": "json",
|
|
"delivery_guarantee": "enforced",
|
|
"path": "/opt/nomad/audit.log",
|
|
"rotate_bytes": 100,
|
|
"rotate_duration": "24h",
|
|
"rotate_max_files": 10
|
|
}
|
|
}
|
|
],
|
|
"filter": [
|
|
{
|
|
"default": [
|
|
{
|
|
"endpoints": [
|
|
"/v1/metrics"
|
|
],
|
|
"operations": [
|
|
"*"
|
|
],
|
|
"stages": [
|
|
"*"
|
|
],
|
|
"type": "HTTPEvent"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"addresses": [
|
|
{
|
|
"http": "127.0.0.1",
|
|
"rpc": "127.0.0.2",
|
|
"serf": "127.0.0.3"
|
|
}
|
|
],
|
|
"advertise": [
|
|
{
|
|
"rpc": "127.0.0.3",
|
|
"serf": "127.0.0.4"
|
|
}
|
|
],
|
|
"autopilot": [
|
|
{
|
|
"cleanup_dead_servers": true,
|
|
"disable_upgrade_migration": true,
|
|
"enable_custom_upgrades": true,
|
|
"enable_redundancy_zones": true,
|
|
"last_contact_threshold": "12705s",
|
|
"max_trailing_logs": 17849,
|
|
"min_quorum": 3,
|
|
"server_stabilization_time": "23057s"
|
|
}
|
|
],
|
|
"bind_addr": "192.168.0.1",
|
|
"client": [
|
|
{
|
|
"alloc_dir": "/tmp/alloc",
|
|
"alloc_mounts_dir": "/tmp/mounts",
|
|
"bridge_network_name": "custom_bridge_name",
|
|
"bridge_network_subnet": "custom_bridge_subnet",
|
|
"bridge_network_subnet_ipv6": "custom_bridge_subnet_ipv6",
|
|
"chroot_env": [
|
|
{
|
|
"/opt/myapp/bin": "/bin",
|
|
"/opt/myapp/etc": "/etc"
|
|
}
|
|
],
|
|
"client_max_port": 2000,
|
|
"client_min_port": 1000,
|
|
"cni_path": "/tmp/cni_path",
|
|
"cpu_total_compute": 4444,
|
|
"disable_remote_exec": true,
|
|
"enabled": true,
|
|
"gc_disk_usage_threshold": 82,
|
|
"gc_inode_usage_threshold": 91,
|
|
"gc_interval": "6s",
|
|
"gc_max_allocs": 50,
|
|
"gc_parallel_destroys": 6,
|
|
"host_volume": [
|
|
{
|
|
"tmp": [
|
|
{
|
|
"path": "/tmp"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"max_kill_timeout": "10s",
|
|
"meta": [
|
|
{
|
|
"baz": "zip",
|
|
"foo": "bar"
|
|
}
|
|
],
|
|
"network_interface": "eth0",
|
|
"network_speed": 100,
|
|
"no_host_uuid": false,
|
|
"node_class": "linux-medium-64bit",
|
|
"options": [
|
|
{
|
|
"baz": "zip",
|
|
"foo": "bar"
|
|
}
|
|
],
|
|
"reserved": [
|
|
{
|
|
"cpu": 10,
|
|
"disk": 10,
|
|
"memory": 10,
|
|
"reserved_ports": "1,100,10-12"
|
|
}
|
|
],
|
|
"server_join": [
|
|
{
|
|
"retry_interval": "15s",
|
|
"retry_join": [
|
|
"1.1.1.1",
|
|
"2.2.2.2"
|
|
],
|
|
"retry_max": 3
|
|
}
|
|
],
|
|
"servers": [
|
|
"a.b.c:80",
|
|
"127.0.0.1:1234"
|
|
],
|
|
"state_dir": "/tmp/client-state",
|
|
"stats": [
|
|
{
|
|
"collection_interval": "5s",
|
|
"data_points": 35
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"consul": [
|
|
{
|
|
"address": "127.0.0.1:9500",
|
|
"allow_unauthenticated": true,
|
|
"auth": "username:pass",
|
|
"auto_advertise": true,
|
|
"ca_file": "/path/to/ca/file",
|
|
"cert_file": "/path/to/cert/file",
|
|
"checks_use_advertise": true,
|
|
"client_auto_join": true,
|
|
"client_http_check_name": "nomad-client-http-health-check",
|
|
"client_service_name": "nomad-client",
|
|
"key_file": "/path/to/key/file",
|
|
"server_auto_join": true,
|
|
"server_http_check_name": "nomad-server-http-health-check",
|
|
"server_rpc_check_name": "nomad-server-rpc-health-check",
|
|
"server_serf_check_name": "nomad-server-serf-health-check",
|
|
"server_service_name": "nomad",
|
|
"service_auth_method": "nomad-services",
|
|
"task_auth_method": "nomad-tasks",
|
|
"service_identity": {
|
|
"aud": [
|
|
"consul.io",
|
|
"nomad.dev"
|
|
],
|
|
"env": false,
|
|
"file": true,
|
|
"ttl": "1h"
|
|
},
|
|
"ssl": true,
|
|
"task_identity": {
|
|
"aud": [
|
|
"consul.io"
|
|
],
|
|
"env": true,
|
|
"file": false,
|
|
"ttl": "2h"
|
|
},
|
|
"timeout": "5s",
|
|
"token": "token1",
|
|
"verify_ssl": true
|
|
}
|
|
],
|
|
"data_dir": "/tmp/nomad",
|
|
"datacenter": "dc2",
|
|
"disable_anonymous_signature": true,
|
|
"disable_update_check": true,
|
|
"enable_debug": true,
|
|
"enable_syslog": true,
|
|
"http_api_response_headers": [
|
|
{
|
|
"Access-Control-Allow-Origin": "*"
|
|
}
|
|
],
|
|
"keyring": {
|
|
"awskms": {
|
|
"active": true,
|
|
"region": "us-east-1",
|
|
"kms_key_id": "alias/kms-nomad-keyring"
|
|
},
|
|
"aead": {}
|
|
},
|
|
"leave_on_interrupt": true,
|
|
"leave_on_terminate": true,
|
|
"log_file": "/var/log/nomad.log",
|
|
"log_include_location": true,
|
|
"log_json": true,
|
|
"log_level": "ERR",
|
|
"name": "my-web",
|
|
"plugin": [
|
|
{
|
|
"docker": [
|
|
{
|
|
"args": [
|
|
"foo",
|
|
"bar"
|
|
],
|
|
"config": [
|
|
{
|
|
"foo": "bar",
|
|
"nested": [
|
|
{
|
|
"bam": 2
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"exec": [
|
|
{
|
|
"config": [
|
|
{
|
|
"foo": true
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"plugin_dir": "/tmp/nomad-plugins",
|
|
"ports": [
|
|
{
|
|
"http": 1234,
|
|
"rpc": 2345,
|
|
"serf": 3456
|
|
}
|
|
],
|
|
"region": "foobar",
|
|
"sentinel": [
|
|
{
|
|
"import": [
|
|
{
|
|
"foo": [
|
|
{
|
|
"args": [
|
|
"a",
|
|
"b",
|
|
"c"
|
|
],
|
|
"path": "foo"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"bar": [
|
|
{
|
|
"args": [
|
|
"x",
|
|
"y",
|
|
"z"
|
|
],
|
|
"path": "bar"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"server": [
|
|
{
|
|
"acl_token_gc_threshold": "12h",
|
|
"authoritative_region": "foobar",
|
|
"bootstrap_expect": 5,
|
|
"csi_plugin_gc_threshold": "12h",
|
|
"csi_volume_claim_gc_threshold": "12h",
|
|
"data_dir": "/tmp/data",
|
|
"deployment_gc_threshold": "12h",
|
|
"enabled": true,
|
|
"enable_event_broker": false,
|
|
"event_buffer_size": 200,
|
|
"enabled_schedulers": [
|
|
"test"
|
|
],
|
|
"encrypt": "abc",
|
|
"eval_gc_threshold": "12h",
|
|
"csi_volume_claim_gc_interval": "3m",
|
|
"heartbeat_grace": "30s",
|
|
"job_gc_interval": "3m",
|
|
"job_gc_threshold": "12h",
|
|
"max_heartbeats_per_second": 11,
|
|
"min_heartbeat_ttl": "33s",
|
|
"failover_heartbeat_ttl": "330s",
|
|
"node_gc_threshold": "12h",
|
|
"non_voting_server": true,
|
|
"num_schedulers": 2,
|
|
"plan_rejection_tracker": {
|
|
"enabled": true,
|
|
"node_threshold": 100,
|
|
"node_window": "41m"
|
|
},
|
|
"raft_protocol": 3,
|
|
"raft_multiplier": 4,
|
|
"redundancy_zone": "foo",
|
|
"rejoin_after_leave": true,
|
|
"retry_interval": "15s",
|
|
"retry_join": [
|
|
"1.1.1.1",
|
|
"2.2.2.2"
|
|
],
|
|
"retry_max": 3,
|
|
"server_join": [
|
|
{
|
|
"retry_interval": "15s",
|
|
"retry_join": [
|
|
"1.1.1.1",
|
|
"2.2.2.2"
|
|
],
|
|
"retry_max": 3
|
|
}
|
|
],
|
|
"start_join": [
|
|
"1.1.1.1",
|
|
"2.2.2.2"
|
|
],
|
|
"default_scheduler_config": [
|
|
{
|
|
"scheduler_algorithm": "spread",
|
|
"preemption_config": [
|
|
{
|
|
"batch_scheduler_enabled": true,
|
|
"system_scheduler_enabled": true,
|
|
"service_scheduler_enabled": true
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"upgrade_version": "0.8.0",
|
|
"license_path": "/tmp/nomad.hclic",
|
|
"job_default_priority": 100,
|
|
"job_max_priority": 200,
|
|
"start_timeout": "1m"
|
|
}
|
|
],
|
|
"syslog_facility": "LOCAL1",
|
|
"telemetry": [
|
|
{
|
|
"disable_allocation_hook_metrics": true,
|
|
"in_memory_collection_interval": "1m",
|
|
"in_memory_retention_period": "24h",
|
|
"collection_interval": "3s",
|
|
"disable_hostname": true,
|
|
"prometheus_metrics": true,
|
|
"publish_allocation_metrics": true,
|
|
"publish_node_metrics": true,
|
|
"statsd_address": "127.0.0.1:2345",
|
|
"statsite_address": "127.0.0.1:1234"
|
|
}
|
|
],
|
|
"tls": [
|
|
{
|
|
"ca_file": "foo",
|
|
"cert_file": "bar",
|
|
"http": true,
|
|
"key_file": "pipe",
|
|
"rpc": true,
|
|
"rpc_upgrade_mode": true,
|
|
"tls_cipher_suites": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
|
|
"tls_min_version": "tls12",
|
|
"verify_https_client": true,
|
|
"verify_server_hostname": true
|
|
}
|
|
],
|
|
"vault": [
|
|
{
|
|
"address": "127.0.0.1:9500",
|
|
"allow_unauthenticated": true,
|
|
"ca_file": "/path/to/ca/file",
|
|
"ca_path": "/path/to/ca",
|
|
"cert_file": "/path/to/cert/file",
|
|
"create_from_role": "test_role",
|
|
"default_identity": {
|
|
"aud": [
|
|
"vault.io",
|
|
"nomad.io"
|
|
],
|
|
"env": false,
|
|
"file": true,
|
|
"ttl": "3h"
|
|
},
|
|
"enabled": false,
|
|
"jwt_auth_backend_path": "nomad_jwt",
|
|
"key_file": "/path/to/key/file",
|
|
"task_token_ttl": "1s",
|
|
"tls_server_name": "foobar",
|
|
"tls_skip_verify": true,
|
|
"token": "12345"
|
|
}
|
|
],
|
|
"reporting": {
|
|
"address": "http://localhost:8080",
|
|
"export_interval": "15m",
|
|
"snapshot_retention_time": "24h",
|
|
"license": {
|
|
"enabled": "true"
|
|
}
|
|
}
|
|
}
|