xdr-terraform-live/prod/aws-us-gov/mdr-prod-c2/095-instance-sensu/README.md

Sensu Setup Steps

NOTE: If you are recreating the Sensu server, don't forget to destroy the sensu-configuration first THEN destroy the instance-sensu! This will clear out the terraform state. If you forget you can use these terragrunt commands to remove the configurations from the state and then reapply them.

terragrunt state list
terragrunt state list > deleteme
for line in `cat deleteme`; do terragrunt state rm $line; done

• Run terraform in 095-instance-sensu to spin up the server and other resources
• Ensure the RPMs are located on the reposerver
• Run prep Salt states
  • salt sensu*com saltutil.sync_all
  • salt sensu*com saltutil.pillar_refresh
  • salt sensu*com state.sls os_modifications
  • salt sensu*com state.highstate
• Run Salt state sensu_master to install sensu from reposerver
  • salt sensu*com state.sls sensu_master
• Run post-installation commands as root user on Sensu server to setup the backend
  • Get the password from Vault to input
  • Init the backend sensu-backend init --interactive
  • prep to login vim sensu-password
  • Log in via sensuctl sensuctl configure -n --username 'admin' --password $( cat sensu-password ) --namespace default --url 'https://127.0.0.1:8080' --insecure-skip-tls-verify
  • Setup OIDC auth ( no TF support for this call ) sensuctl create -f /etc/sensu/conf.d/oidc-okta.yml
  • Opt-out of stats sensuctl tessen opt-out --skip-confirm
  • Apply License file ( see Sensu Notes.md )
  • Clean up password echo "" > sensu-password
  • Log out of sensuctl sensuctl logout
• Run Terraform in 096-sensu-configuration to configure the software
  • On your laptop, put the sensu password in the SENSU_PASSWORD environment var
  • export SENSU_PASSWORD='password'