189 lines
9.1 KiB
YAML
189 lines
9.1 KiB
YAML
---
|
|
role_version: 4.13.0
|
|
|
|
# define if the datadog-agent services should be enabled
|
|
datadog_enabled: yes
|
|
|
|
# Whether the datadog.conf / datadog.yaml, system-probe.yaml, security-agent.yaml and checks config under conf.d are managed by Ansible
|
|
datadog_manage_config: yes
|
|
|
|
# default datadog.conf / datadog.yaml options
|
|
datadog_config: {}
|
|
|
|
# default system-probe.yaml options
|
|
system_probe_config: {}
|
|
network_config: {}
|
|
|
|
# default checks enabled
|
|
datadog_checks: {}
|
|
|
|
# set this to `true` to delete untracked checks
|
|
datadog_disable_untracked_checks: false
|
|
|
|
# Add additional checks to keep when `datadog_disable_untracked_checks` is set to `true`
|
|
datadog_additional_checks: []
|
|
|
|
# set this to `true` to delete default checks
|
|
datadog_disable_default_checks: false
|
|
|
|
# default user/group
|
|
datadog_user: dd-agent
|
|
datadog_group: dd-agent
|
|
|
|
# agent integration variables
|
|
integration_command_user_linux: "dd-agent"
|
|
integration_command_user_windows: "administrator"
|
|
datadog_agent_binary_path_linux: /opt/datadog-agent/bin/agent/agent
|
|
datadog_agent_binary_path_windows: "C:\\Program Files\\Datadog\\Datadog Agent\\bin\\agent.exe"
|
|
|
|
# list of additional groups for datadog_user
|
|
datadog_additional_groups: {}
|
|
|
|
# Major version of the Agent that will be installed.
|
|
# Possible values: 5, 6, 7
|
|
# By default, version 7 will be installed.
|
|
# If datadog_agent_version is defined, the major version will be deduced from it.
|
|
datadog_agent_major_version: ""
|
|
|
|
# Pin agent to a version. Highly recommended.
|
|
# Defaults to the latest version of the major version chosen in datadog_agent_major_version
|
|
# If both datadog_agent_major_version and datadog_agent_version are set, they must be
|
|
# compatible (ie. the major version in datadog_agent_version must be datadog_agent_major_version)
|
|
datadog_agent_version: ""
|
|
|
|
# Default Package name for APT and RPM installs - can override in playbook for IOT Agent
|
|
datadog_agent_flavor: "datadog-agent"
|
|
|
|
|
|
# Default apt repo and keyserver
|
|
|
|
# By default, the role uses the official apt Datadog repository for the chosen major version
|
|
# Use the datadog_apt_repo variable to override the repository used.
|
|
datadog_apt_repo: ""
|
|
|
|
datadog_apt_cache_valid_time: 3600
|
|
datadog_apt_key_retries: 5
|
|
|
|
# Default yum repo and keys
|
|
|
|
# By default, the role uses the official yum Datadog repository for the chosen major version
|
|
# Use the datadog_yum_repo variable to override the repository used.
|
|
datadog_yum_repo: ""
|
|
|
|
datadog_yum_repo_gpgcheck: ""
|
|
datadog_yum_gpgcheck: yes
|
|
# NOTE: we don't use URLs starting with https://keys.datadoghq.com/, as Python
|
|
# on older CentOS/RHEL/SUSE doesn't support SNI and get_url would fail on them
|
|
datadog_yum_gpgkey: "https://s3.amazonaws.com/public-signing-keys/DATADOG_RPM_KEY.public"
|
|
# the CURRENT key always contains the key that is used to sign repodata and latest packages
|
|
datadog_yum_gpgkey_current: "https://s3.amazonaws.com/public-signing-keys/DATADOG_RPM_KEY_CURRENT.public"
|
|
# this key expires in 2022
|
|
datadog_yum_gpgkey_e09422b3: "https://s3.amazonaws.com/public-signing-keys/DATADOG_RPM_KEY_E09422B3.public"
|
|
datadog_yum_gpgkey_e09422b3_sha256sum: "694a2ffecff85326cc08e5f1a619937999a5913171e42f166e13ec802c812085"
|
|
# this key expires in 2024
|
|
datadog_yum_gpgkey_20200908: "https://s3.amazonaws.com/public-signing-keys/DATADOG_RPM_KEY_FD4BF915.public"
|
|
datadog_yum_gpgkey_20200908_sha256sum: "4d16c598d3635086762bd086074140d947370077607db6d6395b8523d5c23a7d"
|
|
# Default zypper repo and keys
|
|
|
|
# By default, we fail early & print a helpful message if a Python 3 interpreter is used on CentOS < 8, as
|
|
# the 'yum' module is only available on Python 2, and the 'python3-dnf' package is not available before
|
|
# CentOS 8.
|
|
# If set to true, this option removes this check and allows the install to proceed. Useful in specific setups
|
|
# where an old CentOS host using a Python 3 interpreter does have 'dnf' (eg. through backports).
|
|
datadog_ignore_old_centos_python3_error: false
|
|
|
|
# By default, the role uses the official zypper Datadog repository for the chosen major version
|
|
# Use the datadog_zypper_repo variable to override the repository used.
|
|
datadog_zypper_repo: ""
|
|
|
|
datadog_zypper_repo_gpgcheck: ""
|
|
datadog_zypper_gpgcheck: yes
|
|
datadog_zypper_gpgkey: "https://s3.amazonaws.com/public-signing-keys/DATADOG_RPM_KEY.public"
|
|
datadog_zypper_gpgkey_sha256sum: "00d6505c33fd95b56e54e7d91ad9bfb22d2af17e5480db25cba8fee500c80c46"
|
|
datadog_zypper_gpgkey_current: "https://s3.amazonaws.com/public-signing-keys/DATADOG_RPM_KEY_CURRENT.public"
|
|
datadog_zypper_gpgkey_e09422b3: "https://s3.amazonaws.com/public-signing-keys/DATADOG_RPM_KEY_E09422B3.public"
|
|
datadog_zypper_gpgkey_e09422b3_sha256sum: "694a2ffecff85326cc08e5f1a619937999a5913171e42f166e13ec802c812085"
|
|
datadog_zypper_gpgkey_20200908: "https://s3.amazonaws.com/public-signing-keys/DATADOG_RPM_KEY_FD4BF915.public"
|
|
datadog_zypper_gpgkey_20200908_sha256sum: "4d16c598d3635086762bd086074140d947370077607db6d6395b8523d5c23a7d"
|
|
|
|
# Avoid checking if the agent is running or not. This can be useful if you're
|
|
# using sysvinit and providing your own init script.
|
|
datadog_skip_running_check: false
|
|
|
|
# Set this to `yes` to allow agent downgrades on apt-based platforms.
|
|
# Internally, this uses `apt-get`'s `--force-yes` option. Use with caution.
|
|
# On centos this will only work with ansible 2.4 and up
|
|
datadog_agent_allow_downgrade: no
|
|
|
|
# Default windows latest msi package URL
|
|
|
|
# By default, will use the official latest msi package for the chosen major version.
|
|
# Use the datadog_windows_download_url option to override the msi package used.
|
|
datadog_windows_download_url: ""
|
|
|
|
# The default msi package for each major Agent version is specified in the following variables.
|
|
# These variables are for internal use only, do not modify them.
|
|
datadog_windows_agent6_latest_url: "https://s3.amazonaws.com/ddagent-windows-stable/datadog-agent-6-latest.amd64.msi"
|
|
datadog_windows_agent7_latest_url: "https://s3.amazonaws.com/ddagent-windows-stable/datadog-agent-7-latest.amd64.msi"
|
|
|
|
# If datadog_agent_version is set, the role will use the following url prefix instead, and append the version number to it
|
|
# in order to get the full url to the msi package.
|
|
datadog_windows_versioned_url: "https://s3.amazonaws.com/ddagent-windows-stable/ddagent-cli"
|
|
|
|
# url of the 6.14 fix script. See https://dtdg.co/win-614-fix for more details.
|
|
datadog_windows_614_fix_script_url: "https://s3.amazonaws.com/ddagent-windows-stable/scripts/fix_6_14.ps1"
|
|
# whether or not to download and apply the above fix
|
|
datadog_apply_windows_614_fix: true
|
|
|
|
# Override to change the name of the windows user to create
|
|
datadog_windows_ddagentuser_name: ""
|
|
# Override to change the password of the created windows user.
|
|
datadog_windows_ddagentuser_password: ""
|
|
|
|
# Override to change the binary installation directory (instead of default c:\program files\datadog\datadog agent)
|
|
datadog_windows_program_files_dir: ""
|
|
|
|
# Override to change the root of the configuration directory
|
|
datadog_windows_config_files_dir: ""
|
|
|
|
# Default configuration root. Do not modify
|
|
datadog_windows_config_root: "{{ ansible_facts.env['ProgramData'] }}\\Datadog"
|
|
|
|
# do not modify. Default empty value for constructing the list of optional
|
|
# arguments to supply to the windows installer.
|
|
win_install_args: " "
|
|
|
|
|
|
#
|
|
# Internal variables
|
|
# The following variables are for internal use only, do not modify them.
|
|
#
|
|
|
|
datadog_apt_trusted_d_keyring: "/etc/apt/trusted.gpg.d/datadog-archive-keyring.gpg"
|
|
datadog_apt_usr_share_keyring: "/usr/share/keyrings/datadog-archive-keyring.gpg"
|
|
datadog_apt_key_current_name: "DATADOG_APT_KEY_CURRENT"
|
|
# NOTE: we don't use URLs starting with https://keys.datadoghq.com/, as Python
|
|
# on older Debian/Ubuntu doesn't support SNI and get_url would fail on them
|
|
datadog_apt_default_keys:
|
|
- key: "{{ datadog_apt_key_current_name }}"
|
|
value: https://s3.amazonaws.com/public-signing-keys/DATADOG_APT_KEY_CURRENT.public
|
|
- key: A2923DFF56EDA6E76E55E492D3A80E30382E94DE
|
|
value: https://s3.amazonaws.com/public-signing-keys/DATADOG_APT_KEY_382E94DE.public
|
|
- key: D75CEA17048B9ACBF186794B32637D44F14F620E
|
|
value: https://s3.amazonaws.com/public-signing-keys/DATADOG_APT_KEY_F14F620E.public
|
|
|
|
# The default apt repository for each major Agent version is specified in the following variables.
|
|
datadog_agent5_apt_repo: "deb [signed-by={{ datadog_apt_usr_share_keyring }}] https://apt.datadoghq.com/ stable main"
|
|
datadog_agent6_apt_repo: "deb [signed-by={{ datadog_apt_usr_share_keyring }}] https://apt.datadoghq.com/ stable 6"
|
|
datadog_agent7_apt_repo: "deb [signed-by={{ datadog_apt_usr_share_keyring }}] https://apt.datadoghq.com/ stable 7"
|
|
|
|
# The default yum repository for each major Agent version is specified in the following variables.
|
|
datadog_agent5_yum_repo: "https://yum.datadoghq.com/rpm/{{ ansible_facts.architecture }}"
|
|
datadog_agent6_yum_repo: "https://yum.datadoghq.com/stable/6/{{ ansible_facts.architecture }}"
|
|
datadog_agent7_yum_repo: "https://yum.datadoghq.com/stable/7/{{ ansible_facts.architecture }}"
|
|
|
|
# The default zypper repository for each major Agent version is specified in the following variables.
|
|
datadog_agent5_zypper_repo: "https://yum.datadoghq.com/suse/rpm/{{ ansible_facts.architecture }}"
|
|
datadog_agent6_zypper_repo: "https://yum.datadoghq.com/suse/stable/6/{{ ansible_facts.architecture }}"
|
|
datadog_agent7_zypper_repo: "https://yum.datadoghq.com/suse/stable/7/{{ ansible_facts.architecture }}"
|