# That is the satellite file
# hieradata/node/dc1.example.com.eyaml
---
classes:
  - profile::base::mailrelay
  - profile::icinga2::agent

profile::icinga2::agent::apiuser_name: "icinga2-api"
profile::icinga2::agent::apiuser_password: DEC(3)::GPG[secret]!
profile::icinga2::agent::zone_name: "dc1"
profile::icinga2::agent::parent_zone: "master"
profile::icinga2::agent::features:
  - 'mainlog'
  - 'checker'
profile::icinga2::agent::parent_endpoints:
  'mon-01.example.com':
    ensure: 'present'
  'mon-02.example.com':
    ensure: 'present'

# Required for icinga plugins
packages::install:
   - 'bc'
   - 'libcrypt-rijndael-perl'

# For submitting passive checks
icinga2::object::apiuser:
  'cluster':
    target: '/etc/icinga2/conf.d/api-user.conf'
    apiuser_name: 'cluster'
    password: DEC(7)::GPG["more_secrets"]!
    permissions:
      - '*'