Add prometheus keys to access aws instances

ooni · Jan 31, 2025 · 10e5bbb · 10e5bbb
1 parent 8b4645f
commit 10e5bbb
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/ansible/roles/prometheus/templates/prometheus.yml b/ansible/roles/prometheus/templates/prometheus.yml
@@ -214,4 +214,16 @@ scrape_configs:
     static_configs:
       - targets:
         - backend-hel.ooni.org:444
+
+  # EC2 instances monitoring: 
+  - job_name: 'ooni-api-ec2'
+    scrape_interval: 5s
+    scheme: https
+    metrics_path: "/metrics" 
+    ec2_sd_configs:
+      - access_key: "{{prometheus_aws_access_key}}" 
+        secret_key: "{{prometheus_aws_secret_key}}"
+        region: "eu-central-1"
+        port: 80 # should be the proxy 
+    # relabel_configs: # Change the host to the proxy host with relabeling
 ...
diff --git a/ansible/roles/prometheus/vars/main.yml b/ansible/roles/prometheus/vars/main.yml
@@ -150,3 +150,6 @@ blackbox_jobs:
   - name: icmp
     module: icmp
     targets: "{{ dom0_hosts | list }}"
+
+prometheus_aws_access_key: "{{ lookup('amazon.aws.aws_ssm', '/oonidevops/secrets/ooni_monitoring/access_key', profile='oonidevops_user_dev') }}"
+prometheus_aws_secret_key: "{{ lookup('amazon.aws.aws_ssm', '/oonidevops/secrets/ooni_monitoring/secret_key', profile='oonidevops_user_dev') }}"