+ *jelRt^RIt^RIt^RIt^RItRtRtRtRt R Rlt Rt ] R8Xd ] !4R#R#) upaas-cmk-sync — runs ON the Checkmk server (systemd timer). Model: ONE Checkmk host per paas project, named after the project's MAIN domain (uptime + cert via folder-scoped custom_checks rules on $HOSTNAME$). Every OTHER configured domain of the project gets its own "Certificate " service on that same host, via host-scoped custom_checks rules that this script reconciles (marker in the rule description). Changing a project's main domain simply renames the host: old host deleted, new one created, secondary cert rules follow. Config: /etc/paas-cmk-sync.conf (KEY=VALUE) PANEL_URL=https://deploy.younex.de TOKEN= SITE=monitoring VIP=188.40.238.163 EXTRA_DOMAINS=deploy.younex.de Nz/etc/paas-cmk-sync.conf paas_sitesz paas-certc/p\\4FWpVP4pV'gKVPR4'dK6RV9gK?VP R^4wr#W0V&KY V#)#=)openCONFstrip startswithsplit)cfglinekvs I/Users/younes/Documents/develop/phpstorm/dotnews-paas/infra/paas-cmk-sync load_confrsY CT zz| 4,,::c1%DAF  Jc\PPYVe%\P!V4P 4MRR7pVP RR4VP RR4T;'g/P4FwrgVP Wg4K \PPWT^R7;_uu_4pVPVP4P43uuRRR4# +'giR#;i \PPd5p T PT P4P43uRp ? #Rp ? ii;i)N)methoddataz Content-Typezapplication/jsonAccept)contexttimeout)urllibrequestRequestjsondumpsencode add_headeritemsurlopenstatusreaddecodeerror HTTPErrorcode) rurlbodyheadersctxreqr rres &&&&& rhttpr.'s .. CGCSdjj&6&=&=&?Y] ! _CNN>#56NN8/0B%%' q() ^^ # #Cb # A AQ88QVVX__..B A A A << ! !)vvqvvx((()s<#)D *D6 D D DDE(4)E#E(#E(cl \4p\RVR, R24P4P4pRVR, R2pRRV 2/p\ RVR, R 2RR VR , 2/\ P !4R 7wrEV^8wd5\R V 2\PR7\P!^4/p\P!V4PR.4FpVPR.4Uu.uF8qP4'gKVP4P4NK: p pV 'gKa\VPR4;'g V ^,4P4P4p W9d V ^,p \!\#V 4V 0, 4Wj&K VPRR4P%R4F=pVP4P4pV'gK+VP'V.4K? Rp \ RV R\( R2VR7wrEV^8wd?\RV RVR, 2\PR7\P!^4\P!V4PR.4U u0uF qR,kK p p \!\#V4V , 4FTp\ RV R2R R!\( 2R"VR#R$VR%,R&R'R(R)V 2//VR*7wrE\R+V R,V 24T ;'gV^8Hp KV \!V \#V4, 4F8p\ R-V R.V 2VR7wrE\R/V R,V 24T ;'gV^8Hp K: \ RV R02VR7wrEV^8wd?\R1V RVR, 2\PR7\P!^4/p\P!V4PR.4FpVPR24;'g/PR34;'g/PR44;'gRpVP%4p\+V4^8XgKrV^,\,8XgKVR,VV^,V^,3&K VP/4UUUu0uFwppVFpVV3kK K pppp\!V\#V4, 4FnwppR5V: R6V: R72p\ RV R82R9R:R R!\( 2R3R4\, R;V R;V 2/RV.R?R@///VR*7wrE\RAV RBV R,V 24T ;'gV^8Hp Kp \!\#V4V, 4FFwpp\ R-V RCWV3, 2VR7wrE\RDV RBV R,V 24T ;'gV^8Hp KH V 'd9\ RV RE2RFRRVR,.RGRH//VCRIRJ/CR*7wrE\RKV 24RM#\RL4RM#uupiuup iuupppi)Nz /omd/sites/SITEz./var/check_mk/web/automation/automation.secretzhttp://localhost/z/check_mk/api/1.0 AuthorizationzBearer automation GET PANEL_URLz /cmk-siteszBearer TOKEN)r)r*zpanel unreachable: )filesitesdomainsmain EXTRA_DOMAINS,Fz/objects/folder_config/~z/collections/hosts)r)zcannot list folder hosts (z): :NNvalueidPOSTz)/domain-types/host_config/collections/allfolder/ host_name attributes ipaddressVIP tag_agentzno-agentaliasz paas website )r(r)z add host z: DELETEz/objects/host_config/z remove host z=/domain-types/rule/collections/all?ruleset_name=custom_checkszcannot list rules ( extensions properties descriptionz%{'service_description': 'Certificate z"', 'command_line': 'check_http -H z -S --sni -C 21,7'}z"/domain-types/rule/collections/allruleset custom_checks value_raw conditionsmatch_onoperatorone_ofzadd cert rule z on z/objects/rule/zremove cert rule zSZZP  &*jj&6&:&:7B&GH&GtWW&GMHs7|m343%'P Q &l  ;E K"mD6$:<Y    $r"&'&&R3Y5}s7|34SE)>tf"EtT TF"RD)*&&R3Y5 EcU"_` "HB Sy #B4s4:,7cjjI  M ZZ  ! !'2 .%% %++00>DD"II-X^^\^  u:?uQx9423D'M58U1X. / / 4;==?S?ZT4dsdC[d[?MSMC ,>>? cKNPSU3%'I J  &l =YKqau*EF  ;dVZ(RS R   se4vRt45&&R3Y@c-0=@A sSE Sk8R7S"T^bc !#d4&2$78&&R3YB 3%'c d(%3v;-I`bfg 94 9S 9;  2$  iST&I:TsX%!"X%2X* X/__main__)NNN) __doc__rrWrZurllib.requestrrrdrfrr.r8__name__rrr}sL"      )Xv zFr