sensu-plugins-aws-boutetnico 1.0.6

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 168687aadfb019212eefa8435fdff01ffdaf456323c96f2355e413087c836804
+  data.tar.gz: 2ae1bad36a33aa04dca6dcb0f2a146f3a3c572f3d31e3e5732d43c91534f567c
+SHA512:
+  metadata.gz: 6a12c2639df2f1fee08c05f5e1816917c206de9f2f897d76246275f5e489745bca6f2ac2f4fc2dc07716b7bd8fd11c30f0003c28a8a1745ecfae8f9bb54d9ba8
+  data.tar.gz: 333597d48f09852e891c6b05781a0937ef8f720e59f1496b46caeca69a0e823f6b906bf6136482a45fbe8e3a973467b7082f2d592af33d90287357ee15d878bc

data/CHANGELOG.md

@@ -0,0 +1,3 @@
+# Change Log
+
+Can be found at [https://github.com/boutetnico/sensu-plugins-aws/releases](https://github.com/boutetnico/sensu-plugins-aws/releases).

data/LICENSE

@@ -0,0 +1,22 @@
+Copyright (c) 2015 Sensu-Plugins
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,333 @@
+## Sensu-Plugins-aws
+
+[![Build Status](https://travis-ci.org/boutetnico/sensu-plugins-aws.svg?branch=master)](https://travis-ci.org/boutetnico/sensu-plugins-aws)
+[![Gem Version](https://badge.fury.io/rb/sensu-plugins-aws-boutetnico.svg)](https://badge.fury.io/rb/sensu-plugins-aws-boutetnico.svg)
+[![Sensu Bonsai Asset](https://img.shields.io/badge/Bonsai-Download%20Me-brightgreen.svg?colorB=89C967&logo=sensu)](https://bonsai.sensu.io/assets/boutetnico/sensu-plugins-aws)
+
+## This is an unofficial fork
+
+Due to the lack of activity from owners of [sensu-plugins-aws](https://github.com/sensu-plugins/sensu-plugins-aws) I have created this fork. It is automatically tested, built and published to [RubyGems](https://rubygems.org/gems/sensu-plugins-aws-boutetnico/) and [Bonsai](https://bonsai.sensu.io/assets/boutetnico/sensu-plugins-aws). It includes several new plugins as well as some improvements. Please check the changelog at the [GitHub Releases page](https://github.com/boutetnico/sensu-plugins-aws/releases).
+
+## Sensu Asset
+The Sensu assets packaged from this repository are built against the Sensu Ruby runtime environment. When using these assets as part of a Sensu Go resource (check, mutator or handler), make sure you include the corresponding Sensu Ruby runtime asset in the list of assets needed by the resource. The current ruby-runtime assets can be found [here](https://bonsai.sensu.io/assets/sensu/sensu-ruby-runtime) in the [Bonsai Asset Index](bonsai.sensu.io).
+
+## Functionality
+
+**check-alb-target-group-health.rb**
+
+**check-asg-instances-created.rb**
+
+**check-asg-instances-inservice.rb**
+
+**check-autoscaling-cpucredits.rb**
+
+**check-beanstalk-elb-metric.rb**
+
+**check-certificate-expiry.rb**
+
+**check-cloudwatch-alarm**
+
+**check-cloudwatch-alarms**
+
+**check-cloudwatch-composite-metric**
+
+**check-cloudwatch-metric**
+
+**check-cloudfront-tag**
+
+**check-configservice-rules**
+
+**check-dynamodb-capacity.rb**
+
+**check-dynamodb-throttle.rb**
+
+**check-direct-connect-virtual-interfaces.rb**
+
+**check-ebs-snapshots.rb**
+
+**check-ebs-burst-limit.rb**
+
+**check-ec2-cpu_balance.rb**
+
+**check-ec2-filter.rb**
+
+**check-ec2-network.rb**
+
+**check-ecs-service-health.rb**
+
+**check-efs-metric.rb**
+
+**check-eip-allocation.rb**
+
+**check-elasticache-failover.rb**
+
+**check-elb-certs.rb**
+
+**check-elb-health-fog.rb**
+
+**check-elb-health-sdk.rb**
+
+**check-elb-health.rb**
+
+**check-elb-instances-inservice.rb**
+
+**check-elb-latency.rb**
+
+**check-elb-nodes.rb**
+
+**check-elb-sum-requests.rb**
+
+**check-emr-cluster.rb**
+
+**check-emr-steps.rb**
+
+**check-eni-status.rb**
+
+**check-instance-events.rb**
+
+**check-instance-health.rb**
+
+**check-kms-key.rb**
+
+**check-rds-events.rb**
+
+**check-rds-pending.rb**
+
+**check-rds.rb**
+
+**check-redshift-events.rb**
+
+**check-reserved-instances.rb**
+
+**check-route53-domain-expiration.rb**
+
+**check-s3-bucket.rb**
+
+**check-s3-bucket-visibility.rb**
+
+**check-s3-object.rb**
+
+**check-s3-tag.rb**
+
+**check-ses-limit.rb**
+
+**check-ses-statistics.rb**
+
+**check-sns-subscriptions**
+
+**check-sqs-messages.rb**
+
+**check-subnet-ip-consumption**
+
+**check-vpc-nameservers**
+
+**check-instances-count.rb**
+
+**check-vpc-vpn.rb**
+
+**handler-ec2_node.rb**
+
+**handler-scale-asg-down.rb**
+
+**handler-scale-asg-up.rb**
+
+**handler-ses.rb**
+
+**handler-sns.rb**
+
+**metrics-asg.rb**
+
+**metrics-autoscaling-instance-count.rb**
+
+**metrics-billing.rb**
+
+**metrics-ec2-count.rb**
+
+**metrics-ec2-filter.rb**
+
+**metrics-elasticache.rb**
+
+**metrics-elb-full.rb**
+
+**metrics-elb.rb**
+
+**metrics-emr-steps.rb**
+
+**metrics-rds.rb**
+
+**metrics-s3.rb**
+
+**metrics-ses.rb**
+
+**metrics-sqs.rb**
+
+
+## Files
+
+* /bin/check-alb-target-group-health.rb
+* /bin/check-asg-instances-created.rb
+* /bin/check-autoscaling-cpucredits.rb
+* /bin/check-asg-instances-inservice.rb
+* /bin/check-beanstalk-elb-metric.rb
+* /bin/check-certificate-expiry.rb
+* /bin/check-configservice-rules.rb
+* /bin/check-cloudfront-tag.rb
+* /bin/check-cloudwatch-alarm.rb
+* /bin/check-cloudwatch-metric.rb
+* /bin/check-cloudwatch-composite-metric.rb
+* /bin/check-dynamodb-capacity.rb
+* /bin/check-dynamodb-throttle.rb
+* /bin/check-direct-connect-virtual-interfaces.rb
+* /bin/check-ebs-burst-limit.rb
+* /bin/check-ebs-snapshots.rb
+* /bin/check-ec2-filter.rb
+* /bin/check-ec2-network.rb
+* /bin/check-ecs-service-health.rb
+* /bin/check-efs-metric.rb
+* /bin/check-elasticache-failover.rb
+* /bin/check-elb-certs.rb
+* /bin/check-elb-health-fog.rb
+* /bin/check-elb-health-sdk.rb
+* /bin/check-elb-health.rb
+* /bin/check-elb-instances-inservice.rb
+* /bin/check-elb-latency.rb
+* /bin/check-elb-nodes.rb
+* /bin/check-elb-sum-requests.rb
+* /bin/check-emr-cluster.rb
+* /bin/check-emr-steps.rb
+* /bin/check-eni-status.rb
+* /bin/check-expiring-reservations.rb
+* /bin/check-instance-events.rb
+* /bin/check-rds-events.rb
+* /bin/check-rds-pending.rb
+* /bin/check-rds.rb
+* /bin/check-redshift-events.rb
+* /bin/check-route53-domain-expiration.rb
+* /bin/check-s3-object.rb
+* /bin/check-s3-tag.rb
+* /bin/check-ses-limit.rb
+* /bin/check-ses-statistics.rb
+* /bin/check-sqs-messages.rb
+* /bin/check-subnet-ip-consumption.rb
+* /bin/check-vpc-nameservers.rb
+* /bin/check_vpc_vpn.py
+* /bin/check_vpc_vpn.rb
+* /bin/handler-ec2_node.rb
+* /bin/handler-ses.rb
+* /bin/handler-sns.rb
+* /bin/metrics-autoscaling-instance-count.rb
+* /bin/check-instances-count.rb
+* /bin/metrics-asg.rb
+* /bin/metrics-billing.rb
+* /bin/metrics-ec2-count.rb
+* /bin/metrics-ec2-filter.rb
+* /bin/metrics-elasticache.rb
+* /bin/metrics-elb-full.rb
+* /bin/metrics-elb.rb
+* /bin/metrics-emr-steps.rb
+* /bin/metrics-rds.rb
+* /bin/metrics-reservation-utilization.rb
+* /bin/metrics-s3.rb
+* /bin/metrics-ses.rb
+* /bin/metrics-sqs.rb
+
+## Usage
+
+**handler-ses**
+
+1. Configure [authentication](#authentication)
+2. Enable the handler in `/etc/sensu/conf.d/handlers/ses.json`:
+```
+{
+  "handlers": {
+    "ses": {
+      "type": "pipe",
+      "command": "handler-ses.rb"
+    }
+  }
+}
+```
+3. Configure the handler in `/etc/sensu/conf.d/ses.json`:
+```
+{
+  "ses": {
+    "mail_from": "sensu@example.com",
+    "mail_to": "monitor@example.com",
+    "region": "us-east-1",
+    "subscriptions": {
+      "subscription_name": {
+        "mail_to": "teamemail@example.com"
+      }
+    }
+  }
+}
+```
+
+**handler-sns**
+
+`handler-sns` can be used to send alerts to Email, HTTP endpoints, SMS, or any other [subscription type](http://docs.aws.amazon.com/sns/latest/dg/welcome.html) supported by SNS.
+
+1. Create an SNS topic and subscription [[Docs]](http://docs.aws.amazon.com/sns/latest/dg/GettingStarted.html)
+1. Configure [authentication](#authentication)
+2. Enable the handler in `/etc/sensu/conf.d/handlers/sns.json`:
+```
+{
+  "handlers": {
+    "sns": {
+      "type": "pipe",
+      "command": "handler-sns.rb"
+    }
+  }
+}
+```
+3. Configure the handler in `/etc/sensu/conf.d/sns.json`:
+```
+{
+  "sns": {
+    "topic_arn": "arn:aws:sns:us-east-1:111111111111:topic",
+    "region": "us-east-1"
+  }
+}
+```
+## Installation
+
+[Installation and Setup](http://sensu-plugins.io/docs/installation_instructions.html)
+
+Note:  In addition to the standard installation requirements the installation of this gem will require compiling the nokogiri gem.  Due to this you'll need certain development packages on your system.
+
+On Ubuntu systems run the following to install build dependencies:
+
+```
+sudo apt-get install build-essential libxml2-dev zlib1g-dev
+```
+
+On CentOS systems, run the following to install build dependencies:
+```
+sudo yum groupinstall -y "Development Tools"
+sudo yum install -y libxml2-devel zlib-devel
+```
+
+If you'd like to avoid compiling nokogiri and other gems on every system where you need to install this plugin collection, please have a look at [the Sensu guide for pre-compiling plugin packages](https://docs.sensu.io/sensu-core/latest/guides/pre-compile-plugins/).
+
+## Authentication
+
+AWS credentials are required to execute these checks. Starting with AWS-SDK v2 there are a few
+methods of passing credentials to the check:
+
+1. Use a [credential file](http://docs.aws.amazon.com/sdk-for-ruby/v2/developer-guide/setup-config.html#aws-ruby-sdk-credentials-shared). Place the credentials in `~/.aws/credentials`. On Unix-like systems this is going to be `/opt/sensu/.aws/credentials`. Be sure to restrict the file to the `sensu` user.
+```
+[default]
+aws_access_key_id = <access_key>
+aws_secret_access_key = <secret_access_key>
+```
+
+2. Use an [EC2 instance profile](http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html). If the checks are executing on an EC2 instance you can give the instance an IAM role and authentication will be handled automatically.
+
+See the [AWS-SDK docs](http://docs.aws.amazon.com/sdkforruby/api/#Configuration) for more details on
+credential configuration.
+
+Some of the checks accept credentials with `aws_access_key` and `aws_secret_access_key` options
+however this method is deprecated as it is insecure to pass credentials on the command line. Support
+for these options will be removed in future releases.
+
+No matter which authentication method is used you should restrict AWS API access to the minimum required to run the checks. In general this is done by limiting the sensu IAM user/role to the necessary `Describe` calls for the services being checked.

data/bin/check-alb-target-group-health.rb

@@ -0,0 +1,100 @@
+#!/usr/bin/env ruby
+#
+# check-alb-target-group-health
+#
+# DESCRIPTION:
+#   This plugin checks the health of Application Load Balancer target groups
+#
+# OUTPUT:
+#   plain-text
+#
+# PLATFORMS:
+#   Linux
+#
+# DEPENDENCIES:
+#   gem: aws-sdk
+#   gem: sensu-plugin
+#
+# USAGE:
+#   Check all target groups in a region
+#   check-alb-target-group-health.rb -r region
+#
+#   Check a single target group in a region
+#   check-alb-target-group-health.rb -r region -t target-group
+#
+#   Check multiple target groups in a region
+#   check-alb-target-group-health.rb -r region -t target-group-a,target-group-b
+#
+# LICENSE:
+#   Copyright 2017 Eric Heydrick <eheydrick@gmail.com>
+#   Released under the same terms as Sensu (the MIT license); see LICENSE
+#   for details.
+
+require 'aws-sdk'
+require 'sensu-plugin/check/cli'
+require 'sensu-plugins-aws'
+
+class CheckALBTargetGroupHealth < Sensu::Plugin::Check::CLI
+  include Common
+
+  option :target_group,
+         short: '-t',
+         long: '--target-group TARGET_GROUP',
+         description: 'The ALB target group(s) to check. Separate multiple target groups with commas'
+
+  option :aws_region,
+         short: '-r AWS_REGION',
+         long: '--aws-region REGION',
+         description: 'AWS Region (defaults to us-east-1).',
+         default: 'us-east-1'
+
+  option :crit,
+         short: '-c',
+         long: '--crit',
+         description: 'Critical instead of warn when unhealthy targets are found',
+         boolean: true,
+         default: false
+
+  def alb
+    @alb ||= Aws::ElasticLoadBalancingV2::Client.new
+  end
+
+  def unhealthy_target_groups
+    unhealthy_groups = {}
+
+    target_groups_to_check = config[:target_group].split(',') if config[:target_group]
+    target_groups = alb.describe_target_groups(names: target_groups_to_check).target_groups
+
+    target_groups.each do |target_group|
+      health = alb.describe_target_health(target_group_arn: target_group.target_group_arn)
+      unhealthy_targets = health.target_health_descriptions.select { |t| t.target_health.state == 'unhealthy' }.map { |t| t.target.id }
+      healthy_targets = health.target_health_descriptions.select { |t| t.target_health.state == 'healthy' }.map { |t| t.target.id }
+      if !unhealthy_targets.empty? || healthy_targets.empty?
+        unhealthy_groups[target_group.target_group_name] = {
+          unhealthy_targets: unhealthy_targets,
+          healthy_targets: healthy_targets,
+          total_targets: health.target_health_descriptions.size
+        }
+      end
+    end
+    unhealthy_groups
+  end
+
+  def run
+    unhealthy_groups = unhealthy_target_groups
+
+    if !unhealthy_groups.empty?
+      message = 'Unhealthy ALB target groups: '
+      message += unhealthy_groups.map { |target_group, value| "#{target_group} - #{value[:unhealthy_targets].size}/#{value[:total_targets]} unhealthy targets: {#{value[:unhealthy_targets].join(', ')}}" }.join(', ')
+      message += ' : Healthy ALB target groups: '
+      message += unhealthy_groups.map { |target_group, value| "#{target_group} - #{value[:healthy_targets].size}/#{value[:total_targets]} healthy targets: {#{value[:healthy_targets].join(', ')}}" }.join(', ')
+      if config[:crit]
+        critical message
+      else
+        warning message
+      end
+    else
+      ok 'All ALB target groups are healthy'
+    end
+  end
+end