mirror of
https://github.com/ansible/awx.git
synced 2026-01-21 14:38:00 -03:30
85 lines
3.5 KiB
Python
85 lines
3.5 KiB
Python
import urllib.parse as urlparse
|
|
|
|
from django.conf import settings
|
|
|
|
from awx.main.utils.reload import supervisor_service_command
|
|
|
|
|
|
def construct_rsyslog_conf_template(settings=settings):
|
|
tmpl = ''
|
|
parts = []
|
|
host = getattr(settings, 'LOG_AGGREGATOR_HOST', '')
|
|
port = getattr(settings, 'LOG_AGGREGATOR_PORT', '')
|
|
protocol = getattr(settings, 'LOG_AGGREGATOR_PROTOCOL', '')
|
|
timeout = str(getattr(settings, 'LOG_AGGREGATOR_TCP_TIMEOUT', 5) * 1000)
|
|
if protocol.startswith('http'):
|
|
scheme = 'https'
|
|
# urlparse requires '//' to be provided if scheme is not specified
|
|
original_parsed = urlparse.urlsplit(host)
|
|
if (not original_parsed.scheme and not host.startswith('//')) or original_parsed.hostname is None:
|
|
host = '%s://%s' % (scheme, host) if scheme else '//%s' % host
|
|
parsed = urlparse.urlsplit(host)
|
|
|
|
host = parsed.hostname
|
|
try:
|
|
if parsed.port:
|
|
port = parsed.port
|
|
except ValueError:
|
|
port = settings.LOG_AGGREGATOR_PORT
|
|
max_bytes = settings.MAX_EVENT_RES_DATA
|
|
parts.extend([
|
|
'$WorkDirectory /var/lib/awx/rsyslog',
|
|
f'$MaxMessageSize {max_bytes}',
|
|
'$IncludeConfig /var/lib/awx/rsyslog/conf.d/*.conf',
|
|
'module(load="imuxsock" SysSock.Use="off")',
|
|
'input(type="imuxsock" Socket="' + settings.LOGGING['handlers']['external_logger']['address'] + '" unlink="on")',
|
|
'template(name="awx" type="string" string="%rawmsg-after-pri%")',
|
|
])
|
|
if protocol.startswith('http'):
|
|
# https://github.com/rsyslog/rsyslog-doc/blob/master/source/configuration/modules/omhttp.rst
|
|
ssl = "on" if parsed.scheme == 'https' else "off"
|
|
skip_verify = "off" if settings.LOG_AGGREGATOR_VERIFY_CERT else "on"
|
|
if not port:
|
|
port = 443 if parsed.scheme == 'https' else 80
|
|
|
|
params = [
|
|
'type="omhttp"',
|
|
f'server="{host}"',
|
|
f'serverport="{port}"',
|
|
f'usehttps="{ssl}"',
|
|
f'skipverifyhost="{skip_verify}"',
|
|
'action.resumeRetryCount="-1"',
|
|
'template="awx"',
|
|
'errorfile="/var/log/tower/rsyslog.err"',
|
|
f'healthchecktimeout="{timeout}"',
|
|
]
|
|
if parsed.path:
|
|
path = urlparse.quote(parsed.path[1:])
|
|
if parsed.query:
|
|
path = f'{path}?{urlparse.quote(parsed.query)}'
|
|
params.append(f'restpath="{path}"')
|
|
username = getattr(settings, 'LOG_AGGREGATOR_USERNAME', '')
|
|
password = getattr(settings, 'LOG_AGGREGATOR_PASSWORD', '')
|
|
if username:
|
|
params.append(f'uid="{username}"')
|
|
if username and password:
|
|
# you can only have a basic auth password if there's a username
|
|
params.append(f'pwd="{password}"')
|
|
params = ' '.join(params)
|
|
parts.extend(['module(load="omhttp")', f'action({params})'])
|
|
elif protocol and host and port:
|
|
parts.append(
|
|
f'action(type="omfwd" target="{host}" port="{port}" protocol="{protocol}" action.resumeRetryCount="-1" template="awx")' # noqa
|
|
)
|
|
else:
|
|
parts.append(f'action(type="omfile" file="/dev/null")') # rsyslog needs *at least* one valid action to start
|
|
tmpl = '\n'.join(parts)
|
|
return tmpl
|
|
|
|
|
|
def reconfigure_rsyslog():
|
|
tmpl = construct_rsyslog_conf_template()
|
|
with open('/var/lib/awx/rsyslog/rsyslog.conf', 'w') as f:
|
|
f.write(tmpl + '\n')
|
|
supervisor_service_command(command='restart', service='awx-rsyslogd')
|