Hi,
I have a zoned setup with one agent reachable from all addresses and another agent acting from the management network. I try to push a service status update via icinga2 API from a monitored host to the public agent which results in “HTTP/1.1 500 Internal Server Error”. The host itself is being monitored from the agent in the management network.
Is this a non-feature? Are there better designs? The firewall does not allow traffic from the monitored host to the management node.
Reproduce:
Trying to update a service state on the public agent (icinga-external). The host is being monitored from the agent in the management network (icinga-satellite). The agent icinga-satellite connects to icinga-external.
# curl -k -s -S -i -u user:password -H 'Accept: application/json' -X POST 'https://localhost:5665/v1/actions/process-check-result' -d '{ "type": "Service", "filter": "host.name==\"somehost0\" && service.name==\"someservice\"", "exit_status": 1, "plugin_output": "TEST CRITICAL - Packet loss = 100%", "pretty": true }'
HTTP/1.1 500 Internal Server Error
Server: Icinga/2.13.1-1
Content-Type: application/json
Content-Length: 22
{
"results": []
}
If I try the same on a host being monitored by the public agent (satellite-external):
#curl -k -s -S -i -u user:password -H 'Accept: application/json' -X POST 'https://localhost:5665/v1/actions/process-check-result' -d '{ "type": "Service", "filter": "host.name==\"testhost-external\" && service.name==\"testservice\"", "exit_status": 1, "plugin_output": "TEST CRITICAL - Packet loss = 100%", "pretty": true }'
HTTP/1.1 200 OK
Server: Icinga/2.13.1-1
Content-Type: application/json
Content-Length: 176
{
"results": [
{
"code": 200,
"status": "Successfully processed check result for object 'testhost-external!testservice'."
}
]
}
-
Version used (
icinga2 --version)
2.13.1-1 -
Operating System and version
Centos 7 -
Enabled features (
icinga2 feature list)
On the public and management agents: api checker mainlog
On the master node: api checker ido-pgsql influxdb mainlog notification -
Icinga Web 2 version and modules (System - About)
-
Config validation (
icinga2 daemon -C)
valid -
If you run multiple Icinga 2 instances, the
zones.conffile (oricinga2 object list --type Endpointandicinga2 object list --type Zone) from all affected nodes
Object 'icinga-satellite' of type 'Endpoint':
% declared in '/etc/icinga2/zones.conf', lines 10:1-10:48
* __name = "icinga-satellite"
* host = "10.0.17.171"
% = modified in '/etc/icinga2/zones.conf', lines 13:9-13:30
* log_duration = 86400
* name = "icinga-satellite"
* package = "_etc"
* port = "5665"
* source_location
* first_column = 1
* first_line = 10
* last_column = 48
* last_line = 10
* path = "/etc/icinga2/zones.conf"
* templates = [ "icinga-satellite" ]
% = modified in '/etc/icinga2/zones.conf', lines 10:1-10:48
* type = "Endpoint"
* zone = ""
Object 'icinga-external' of type 'Endpoint':
% declared in '/etc/icinga2/zones.conf', lines 22:1-22:47
* __name = "icinga-external"
* host = ""
* log_duration = 86400
* name = "icinga-external"
* package = "_etc"
* port = "5665"
* source_location
* first_column = 1
* first_line = 22
* last_column = 47
* last_line = 22
* path = "/etc/icinga2/zones.conf"
* templates = [ "icinga-external" ]
% = modified in '/etc/icinga2/zones.conf', lines 22:1-22:47
* type = "Endpoint"
* zone = ""
Object 'icinga-master' of type 'Endpoint':
% declared in '/etc/icinga2/zones.conf', lines 6:1-6:45
* __name = "icinga-master"
* host = ""
* log_duration = 86400
* name = "icinga-master"
* package = "_etc"
* port = "5665"
* source_location
* first_column = 1
* first_line = 6
* last_column = 45
* last_line = 6
* path = "/etc/icinga2/zones.conf"
* templates = [ "icinga-master" ]
% = modified in '/etc/icinga2/zones.conf', lines 6:1-6:45
* type = "Endpoint"
* zone = ""
Object 'zone-satellite' of type 'Zone':
% declared in '/etc/icinga2/zones.conf', lines 31:1-31:32
* __name = "zone-satellite"
* endpoints = [ "icinga-satellite" ]
% = modified in '/etc/icinga2/zones.conf', lines 32:9-32:56
* global = false
* name = "zone-satellite"
* package = "_etc"
* parent = "zone-master"
% = modified in '/etc/icinga2/zones.conf', lines 33:9-33:30
* source_location
* first_column = 1
* first_line = 31
* last_column = 32
* last_line = 31
* path = "/etc/icinga2/zones.conf"
* templates = [ "zone-satellite" ]
% = modified in '/etc/icinga2/zones.conf', lines 31:1-31:32
* type = "Zone"
* zone = ""
Object 'zone-master' of type 'Zone':
% declared in '/etc/icinga2/zones.conf', lines 27:1-27:25
* __name = "zone-master"
* endpoints = [ "icinga-master" ]
% = modified in '/etc/icinga2/zones.conf', lines 28:2-28:46
* global = false
* name = "zone-master"
* package = "_etc"
* parent = ""
* source_location
* first_column = 1
* first_line = 27
* last_column = 25
* last_line = 27
* path = "/etc/icinga2/zones.conf"
* templates = [ "zone-master" ]
% = modified in '/etc/icinga2/zones.conf', lines 27:1-27:25
* type = "Zone"
* zone = ""
Object 'global-templates' of type 'Zone':
% declared in '/etc/icinga2/zones.conf', lines 46:1-46:30
* __name = "global-templates"
* endpoints = null
* global = true
% = modified in '/etc/icinga2/zones.conf', lines 47:2-47:14
* name = "global-templates"
* package = "_etc"
* parent = ""
* source_location
* first_column = 1
* first_line = 46
* last_column = 30
* last_line = 46
* path = "/etc/icinga2/zones.conf"
* templates = [ "global-templates" ]
% = modified in '/etc/icinga2/zones.conf', lines 46:1-46:30
* type = "Zone"
* zone = ""
Object 'zone-external' of type 'Zone':
% declared in '/etc/icinga2/zones.conf', lines 41:1-41:31
* __name = "zone-external"
* endpoints = [ "icinga-external" ]
% = modified in '/etc/icinga2/zones.conf', lines 42:9-42:55
* global = false
* name = "zone-external"
* package = "_etc"
* parent = "zone-satellite"
% = modified in '/etc/icinga2/zones.conf', lines 43:9-43:37
* source_location
* first_column = 1
* first_line = 41
* last_column = 31
* last_line = 41
* path = "/etc/icinga2/zones.conf"
* templates = [ "zone-external" ]
% = modified in '/etc/icinga2/zones.conf', lines 41:1-41:31
* type = "Zone"
* zone = ""