sensu-plugins-aws-boutetnico 1.0.6

data/bin/check-elb-certs.rb

@@ -0,0 +1,132 @@
+#! /usr/bin/env ruby
+#
+# check-elb-certs
+#
+# DESCRIPTION:
+#   This plugin looks up all ELBs in the region and checks https
+#   endpoints for expiring certificates
+#
+# OUTPUT:
+#   plain-text
+#
+# PLATFORMS:
+#   Linux
+#
+# DEPENDENCIES:
+#   gem: aws-sdk
+#   gem: sensu-plugin
+#
+# USAGE:
+#  ./check-elb-certs.rb -r ${your_region} -w ${days_to_warn} -c ${days_to_critical}
+#
+# NOTES:
+#
+# LICENSE:
+#   Copyright (c) 2013, Peter Burkholder, pburkholder@pobox.com
+#   Released under the same terms as Sensu (the MIT license); see LICENSE
+#   for details.
+#
+
+require 'sensu-plugin/check/cli'
+require 'sensu-plugins-aws'
+require 'aws-sdk'
+require 'net/http'
+require 'openssl'
+
+class CheckELBCerts < Sensu::Plugin::Check::CLI
+  include Common
+
+  option :aws_region,
+         short: '-r AWS_REGION',
+         long: '--aws-region REGION',
+         description: 'AWS Region (defaults to us-east-1).',
+         default: 'us-east-1'
+
+  option :warn_under,
+         short: '-w WARN_NUM',
+         long: '--warn WARN_NUM',
+         description: 'Warn on minimum number of days to SSL/TLS certificate expiration',
+         default: 30,
+         proc: proc(&:to_i)
+
+  option :crit_under,
+         short: '-c CRIT_NUM',
+         long: '--crit CRIT_NUM',
+         description: 'Minimum number of days to SSL/TLS certificate expiration',
+         default: 5,
+         proc: proc(&:to_i)
+
+  option :verbose,
+         short: '-v',
+         long: '--verbose',
+         description: 'Provide SSL/TLS certificate expiration details even when OK',
+         default: false
+
+  def cert_message(count, descriptor, limit)
+    message = (count == 1 ? '1 ELB cert is ' : "#{count} ELB certs are ")
+    message += "#{descriptor} #{limit} day"
+    message += (limit == 1 ? '' : 's') # rubocop:disable UselessAssignment
+  end
+
+  def aws_config
+    { access_key_id: config[:aws_access_key],
+      secret_access_key: config[:aws_secret_access_key],
+      region: config[:aws_region] }
+  end
+
+  def run
+    ok_message = []
+    warning_message = []
+    critical_message = []
+
+    elb = Aws::ElasticLoadBalancing::Client.new(aws_config)
+
+    begin
+      elb.describe_load_balancers.load_balancer_descriptions.each do |lb|
+        lb.listener_descriptions.each do |listener|
+          elb_listener = listener['listener']
+          if elb_listener.protocol.to_s == 'HTTPS'
+            url = URI.parse("https://#{lb.dns_name}:#{elb_listener.load_balancer_port}")
+            http = Net::HTTP.new(url.host, url.port)
+            http.use_ssl = true
+            http.verify_mode = OpenSSL::SSL::VERIFY_NONE
+            cert = ''
+
+            begin
+              http.start { cert = http.peer_cert }
+            rescue StandardError => e
+              critical "An issue occurred attempting to get cert: #{e.message}"
+            end
+
+            cert_days_remaining = ((cert.not_after - Time.now) / 86_400).to_i
+            message = sprintf '%s(%d)', lb.load_balancer_name, cert_days_remaining
+
+            if config[:crit_under] > 0 && config[:crit_under] >= cert_days_remaining
+              critical_message << message
+            elsif config[:warn_under] > 0 && config[:warn_under] >= cert_days_remaining
+              warning_message << message
+            else
+              ok_message << message
+            end
+          end
+        end
+      end
+    rescue StandardError => e
+      unknown "An error occurred processing AWS ELB API: #{e.message}"
+    end
+
+    if !critical_message.empty?
+      message = cert_message(critical_message.length, 'expiring within', config[:crit_under])
+      message += ': ' + critical_message.sort.join(' ')
+      critical message
+    elsif !warning_message.empty?
+      message = cert_message(warning_message.length, 'expiring within', config[:warn_under])
+      message += ': ' + warning_message.sort.join(' ')
+      warning message
+    else
+      message = cert_message(ok_message.length, 'valid for at least', config[:warn_under])
+      message += ': ' + ok_message.sort.join(' ') if config[:verbose]
+      ok message
+    end
+  end
+end

data/bin/check-elb-health-fog.rb

@@ -0,0 +1,114 @@
+#! /usr/bin/env ruby
+#
+# check-elb-health-fog
+#
+#
+# DESCRIPTION:
+#   This plugin checks the health of an Amazon Elastic Load Balancer.
+#
+# OUTPUT:
+#   plain-text
+#
+# PLATFORMS:
+#   Linux
+#
+# DEPENDENCIES:
+#   gem: fog
+#   gem: sensu-plugin
+#
+# USAGE:
+#  ./check-ec2-network.rb -r ${you_region} -i ${your_instance_id} --warning-over 1000000 --critical-over 1500000
+#  ./check-ec2-network.rb -r ${you_region} -i ${your_instance_id} -d NetworkIn --warning-over 1000000 --critical-over 1500000
+#  ./check-ec2-network.rb -r ${you_region} -i ${your_instance_id} -d NetworkOut --warning-over 1000000 --critical-over 1500000
+#
+# NOTES:
+#
+# LICENSE:
+#   Copyright (c) 2014, Panagiotis Papadomitsos <pj@ezgr.net>
+#   Released under the same terms as Sensu (the MIT license); see LICENSE
+#   for details.
+#
+
+require 'sensu-plugin/check/cli'
+require 'net/http'
+require 'uri'
+require 'fog/aws'
+
+class ELBHealth < Sensu::Plugin::Check::CLI
+  option :aws_access_key,
+         short: '-a AWS_ACCESS_KEY',
+         long: '--aws-access-key AWS_ACCESS_KEY',
+         description: "AWS Access Key. Either set ENV['AWS_ACCESS_KEY'] or provide it as an option",
+         default: ENV['AWS_ACCESS_KEY']
+
+  option :aws_secret_access_key,
+         short: '-k AWS_SECRET_KEY',
+         long: '--aws-secret-access-key AWS_SECRET_KEY',
+         description: "AWS Secret Access Key. Either set ENV['AWS_SECRET_KEY'] or provide it as an option",
+         default: ENV['AWS_SECRET_KEY']
+
+  option :aws_region,
+         short: '-r AWS_REGION',
+         long: '--aws-region REGION',
+         description: 'AWS Region (such as eu-west-1). If you do not specify a region, it will be detected by the server the script is run on'
+
+  option :elb_name,
+         short: '-n ELB_NAME',
+         long: '--elb-name ELB_NAME',
+         description: 'The Elastic Load Balancer name of which you want to check the health',
+         required: true
+
+  option :instances,
+         short: '-i INSTANCES',
+         long: '--instances INSTANCES',
+         description: 'Comma separated list of specific instances IDs inside the ELB of which you want to check the health'
+
+  option :verbose,
+         short: '-v',
+         long: '--verbose',
+         description: 'Enable a little bit more verbose reports about instance health',
+         boolean: true,
+         default: false
+
+  def query_instance_region
+    instance_az = nil
+    Timeout.timeout(3) do
+      instance_az = Net::HTTP.get(URI('http://169.254.169.254/latest/meta-data/placement/availability-zone/'))
+    end
+    instance_az[0...-1]
+  rescue StandardError
+    raise "Cannot obtain this instance's Availability Zone. Maybe not running on AWS?"
+  end
+
+  def aws_config
+    { aws_access_key_id: config[:aws_access_key],
+      aws_secret_access_key: config[:aws_secret_access_key],
+      region: config[:aws_region] }
+  end
+
+  def run
+    aws_region = config[:aws_region].nil? || config[:aws_region].empty? ? query_instance_region : config[:aws_region]
+    begin
+      elb = Fog::AWS::ELB.new aws_config
+      if config[:instances]
+        instances = config[:instances].split(',')
+        health = elb.describe_instance_health(config[:elb_name], instances)
+      else
+        health = elb.describe_instance_health(config[:elb_name])
+      end
+      unhealthy_instances = {}
+      health.body['DescribeInstanceHealthResult']['InstanceStates'].each do |instance|
+        unhealthy_instances[instance['InstanceId']] = instance['State'] unless instance['State'].eql?('InService')
+      end
+      if unhealthy_instances.empty?
+        ok "All instances on ELB #{aws_region}::#{config[:elb_name]} healthy!"
+      elsif config[:verbose]
+        critical "Unhealthy instances detected: #{unhealthy_instances.map { |id, state| '[' + id + '::' + state + ']' }.join(' ')}"
+      else
+        critical "Detected [#{unhealthy_instances.size}] unhealthy instances"
+      end
+    rescue StandardError => e
+      warning "An issue occured while communicating with the AWS EC2 API: #{e.message}"
+    end
+  end
+end

data/bin/check-elb-health-sdk.rb

@@ -0,0 +1,176 @@
+#!/usr/bin/env ruby
+#
+# check-elb-health-sdk
+#
+# DESCRIPTION:
+#   This plugin checks the health of an Amazon Elastic Load Balancer or all ELBs in a given region.
+#
+# OUTPUT:
+#   plain-text
+#
+# PLATFORMS:
+#   Linux
+#
+# DEPENDENCIES:
+#   gem: aws-sdk
+#   gem: sensu-plugin
+#
+# USAGE:
+#   check-elb-health-sdk.rb -r region
+#   check-elb-health-sdk.rb -r region -n my-elb
+#   check-elb-health-sdk.rb -r region -n my-elb -i instance1,instance2
+#   check-alb-health-sdk.rb -r all
+#
+# Copyright (c) 2015, Benjamin Kett <bkett@umn.edu>
+#
+# Released under the same terms as Sensu (the MIT license); see LICENSE
+# for details.
+
+require 'sensu-plugin/check/cli'
+require 'sensu-plugins-aws'
+require 'aws-sdk'
+
+class ELBHealth < Sensu::Plugin::Check::CLI
+  include Common
+
+  option :aws_region,
+         short: '-r AWS_REGION',
+         long: '--aws-region REGION',
+         description: 'AWS Region (defaults to us-east-1).',
+         default: 'us-east-1'
+
+  option :elb_name,
+         short: '-n ELB_NAME',
+         long: '--elb-name ELB_NAME',
+         description: 'The Elastic Load Balancer name of which you want to check the health'
+
+  option :instance_tag,
+         short: '-t',
+         long: '--instance-tag INSTANCE_TAG',
+         description: "Specify instance tag to be included in the check output. E.g. 'Name' tag"
+
+  option :instances,
+         short: '-i INSTANCES',
+         long: '--instances INSTANCES',
+         description: 'Comma separated list of specific instances IDs inside the ELB of which you want to check the health'
+
+  option :verbose,
+         short: '-v',
+         long: '--verbose',
+         description: 'Enable a little bit more verbose reports about instance health',
+         boolean: true,
+         default: false
+
+  option :warn_only,
+         short: '-w',
+         long: '--warn-only',
+         description: 'Warn instead of critical when unhealthy instances are found',
+         default: false
+
+  def aws_config
+    { access_key_id: config[:aws_access_key],
+      secret_access_key: config[:aws_secret_access_key],
+      region: config[:aws_region] }
+  end
+
+  def elb
+    @elb = Aws::ElasticLoadBalancing::Client.new(aws_config)
+  end
+
+  def ec2
+    @ec2 = Aws::EC2::Client.new(aws_config)
+  end
+
+  def ec2_regions
+    Aws.partition('aws').regions.map(&:name)
+  end
+
+  def instances_to_check(instances)
+    all_instances = instances.split(',')
+    all_instances.map! { |instance| { instance_id: instance } }
+  end
+
+  def elbs
+    @elbs = elb.describe_load_balancers.load_balancer_descriptions.to_a
+    @elbs.select! { |elb| config[:elb_name].include? elb.load_balancer_name } if config[:elb_name]
+    @elbs
+  end
+
+  def check_health(elb)
+    unhealthy_instances = {}
+    instance_health = if config[:instances]
+                        @elb.describe_instance_health(
+                          load_balancer_name: elb.load_balancer_name,
+                          instances: instances_to_check(config[:instances])
+                        )
+                      else
+                        @elb.describe_instance_health(load_balancer_name: elb.load_balancer_name)
+                      end
+
+    instance_health.instance_states.each do |instance_health_states|
+      if instance_health_states.state != 'InService'
+        instance_id = instance_health_states.instance_id
+        state_message = instance_health_states.state
+
+        if config[:instance_tag]
+          selected_tag = ec2.describe_tags(
+            filters: [{ name: 'resource-id', values: [instance_id] }]
+          ).tags.select { |tag| tag[:key] == config[:instance_tag] }
+          unless selected_tag.empty?
+            state_message = "#{selected_tag[0][:value]}::#{instance_health_states[:state]}"
+          end
+        end
+
+        unhealthy_instances[instance_id] = state_message
+      end
+    end
+    if unhealthy_instances.empty?
+      'OK'
+    else
+      unhealthy_instances
+    end
+  end
+
+  def run
+    aws_regions = ec2_regions
+    @message = ''
+    critical = false
+
+    unless config[:aws_region].casecmp('all').zero?
+      if aws_regions.include? config[:aws_region]
+        aws_regions.clear.push(config[:aws_region])
+      else
+        critical 'Invalid region specified!'
+      end
+    end
+
+    aws_regions.each do |r| # Iterate each possible region
+      config[:aws_region] = r
+      region_critical = false
+      @message += (elbs.size > 1 ? config[:aws_region] + ': ' : '')
+      elbs.each do |elb|
+        result = check_health(elb)
+        if result != 'OK'
+          @message += "#{elb.load_balancer_name} unhealthy => #{result.map { |id, state| '[' + id + '::' + state + ']' }.join(' ')}. "
+          critical = true
+          region_critical = true
+        else
+          @message += "#{elb.load_balancer_name} => healthy. " unless config[:verbose] == false
+        end
+      end
+      if elbs.size > 1 && config[:verbose] != true && region_critical == false
+        @message += 'OK. '
+      end
+    end
+
+    if critical
+      if config[:warn_only]
+        warning @message
+      else
+        critical @message
+      end
+    else
+      ok @message
+    end
+  end
+end

data/bin/check-elb-health.rb

@@ -0,0 +1,116 @@
+#! /usr/bin/env ruby
+#
+# check-elb-health
+#
+# DESCRIPTION:
+#   This plugin checks the health of an Amazon Elastic Load Balancer.
+#
+# OUTPUT:
+#   plain-text
+#
+# PLATFORMS:
+#   Linux
+#
+# DEPENDENCIES:
+#   gem: right-aws
+#   gem: sensu-plugin
+#
+# USAGE:
+#   ./check-elb-health.rb --elb-name MyELB
+#
+# NOTES:
+#
+# LICENSE:
+#   Copyright (c) 2012, Panagiotis Papadomitsos <pj@ezgr.net>
+#   Released under the same terms as Sensu (the MIT license); see LICENSE
+#   for details.
+#
+
+require 'sensu-plugin/check/cli'
+require 'net/http'
+require 'uri'
+require 'right_aws'
+
+class ELBHealth < Sensu::Plugin::Check::CLI
+  option :aws_access_key,
+         short: '-a AWS_ACCESS_KEY',
+         long: '--aws-access-key AWS_ACCESS_KEY',
+         description: "AWS Access Key. Either set ENV['AWS_ACCESS_KEY'] or provide it as an option",
+         default: ENV['AWS_ACCESS_KEY']
+
+  option :aws_secret_access_key,
+         short: '-k AWS_SECRET_KEY',
+         long: '--aws-secret-access-key AWS_SECRET_KEY',
+         description: "AWS Secret Access Key. Either set ENV['AWS_SECRET_KEY'] or provide it as an option",
+         default: ENV['AWS_SECRET_KEY']
+
+  option :aws_region,
+         short: '-r AWS_REGION',
+         long: '--aws-region REGION',
+         description: 'AWS Region (such as eu-west-1). If you do not specify a region, it will be detected by the server the script is run on'
+
+  option :elb_name,
+         short: '-n ELB_NAME',
+         long: '--elb-name ELB_NAME',
+         description: 'The Elastic Load Balancer name of which you want to check the health',
+         required: true
+
+  option :instances,
+         short: '-i INSTANCES',
+         long: '--instances INSTANCES',
+         description: 'Comma separated list of specific instances IDs inside the ELB of which you want to check the health'
+
+  option :verbose,
+         short: '-v',
+         long: '--verbose',
+         description: 'Enable a little bit more verbose reports about instance health',
+         boolean: true,
+         default: false
+
+  def query_instance_region
+    instance_az = nil
+    Timeout.timeout(3) do
+      instance_az = Net::HTTP.get(URI('http://169.254.169.254/latest/meta-data/placement/availability-zone/'))
+    end
+    instance_az[0...-1]
+  rescue StandardError
+    raise "Cannot obtain this instance's Availability Zone. Maybe not running on AWS?"
+  end
+
+  def run
+    begin
+      aws_region = config[:aws_region].nil? || config[:aws_region].empty? ? query_instance_region : config[:aws_region]
+      elb = RightAws::ElbInterface.new(config[:aws_access_key], config[:aws_secret_access_key],
+                                       logger: Logger.new('/dev/null'),
+                                       cache: false,
+                                       server: "elasticloadbalancing.#{aws_region}.amazonaws.com")
+      if config[:instances]
+        instances = config[:instances].split(',')
+        health = elb.describe_instance_health(config[:elb_name], instances)
+      else
+        health = elb.describe_instance_health(config[:elb_name])
+      end
+    rescue StandardError => e
+      critical "An issue occured while communicating with the AWS EC2 API: #{e.message}"
+    end
+    # #YELLOW
+    unless health.empty? # rubocop:disable UnlessElse
+      unhealthy_instances = {}
+      health.each do |instance|
+        unhealthy_instances[instance[:instance_id]] = instance[:state] unless instance[:state].eql?('InService')
+      end
+      # #YELLOW
+      unless unhealthy_instances.empty? # rubocop:disable UnlessElse
+        if config[:verbose]
+          critical "Unhealthy instances detected: #{unhealthy_instances.map { |id, state| '[' + id + '::' + state + ']' }.join(' ')}"
+        else
+          critical "Detected [#{unhealthy_instances.size}] unhealthy instances"
+        end
+      else
+        ok "All instances on ELB #{aws_region}::#{config[:elb_name]} healthy!"
+      end
+    else
+      critical 'Failed to retrieve ELB instance health data'
+    end
+  end
+end