commit 132fbb07f9779d7cc3e1689877694845e19c62ac
parent 94bb61993d2f740c5cf121f4d9731453af5df440
Author: Florian Dold <dold@taler.net>
Date: Fri, 11 Sep 2026 20:55:56 +0200
monitoring: remove obsolete rsyslog migration tasks
Do not try to stop an absent rsyslog unit during routine deployment.
The fleet already uses Fluent Bit, so retire the old service, package
and configuration cleanup.
Diffstat:
2 files changed, 0 insertions(+), 37 deletions(-)
diff --git a/README b/README
@@ -221,14 +221,6 @@ individual malformed lines. Watch both collector drop counters and receiver erro
Lost responses can cause duplicates; this is not exactly-once or unconditional
lossless delivery. Fluent Bit's own logs remain local to prevent feedback loops.
-Coordinate migration with Sentol's administrator: drain old RELP queues first, deploy
-the HTTPS receiver, then deploy this role with the new bundle. TCP 2514 is reused for
-HTTPS. First activation skips historical journal entries, so a cutover gap may be lost
-centrally. The role stops/removes rsyslog and rsyslog-relp without purging historical
-files, removes its forwarding configuration, and disables journal forwarding to syslog.
-Do not delete old spool files until any recovery is complete. Preserve the new cursor
-and buffer on rollback; restore old server and client configurations together.
-
For renewal, retrieve both refreshed exports after `make deploy-sentol`,
replace the local files, encrypt the complete new secrets file before
staging it, commit both, and run `deploy` again. Do not reuse an old key
diff --git a/roles/monitoring/tasks/fluent-bit.yml b/roles/monitoring/tasks/fluent-bit.yml
@@ -151,32 +151,3 @@
mode: "0600"
validate: /opt/fluent-bit/bin/fluent-bit --dry-run -c %s
notify: Restart monitoring Fluent Bit
-
-- name: Discover legacy logging services
- ansible.builtin.service_facts:
-
-- name: Stop and disable rsyslog before removing its packages
- ansible.builtin.systemd_service:
- name: rsyslog
- state: stopped
- enabled: false
- when: "ansible_facts.services.get('rsyslog.service', {}).get('status', 'not-found') != 'not-found'"
-
-- name: Remove rsyslog and RELP packages while preserving historical files
- ansible.builtin.apt:
- name:
- - rsyslog-relp
- - rsyslog
- state: absent
- purge: false
- autoremove: false
-
-- name: Remove obsolete managed RELP forwarding configuration and TLS copies
- ansible.builtin.file:
- path: "{{ item }}"
- state: absent
- loop:
- - /etc/rsyslog.d/60-sentol-forward.conf
- - /etc/rsyslog.d/tls/relp-ca.cert.pem
- - /etc/rsyslog.d/tls/relp-client.cert.pem
- - /etc/rsyslog.d/tls/relp-client.key.pem
