# Copyright 2013 Hewlett-Packard Development Company, L.P.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# Logstash web frontend glue class.
#
class openstack_project::logstash (
  $gerrit_host,
  $gerrit_ssh_private_key,
  $gerrit_ssh_private_key_contents,
  #not used today, will be used when elastic-recheck supports it.
  $elasticsearch_url,
  $recheck_bot_passwd,
  $recheck_bot_nick = 'openstackrecheck',
  $elasticsearch_nodes = [],
  $gearman_workers = [],
  $discover_nodes = ['elasticsearch.openstack.org:9200'],
  $sysadmins = []
) {
  $iptables_es_rule = regsubst ($elasticsearch_nodes, '^(.*)$', '-m state --state NEW -m tcp -p tcp --dport 9200:9400 -s \1 -j ACCEPT')
  $iptables_gm_rule = regsubst ($gearman_workers, '^(.*)$', '-m state --state NEW -m tcp -p tcp --dport 4730 -s \1 -j ACCEPT')
  $iptables_rule = flatten([$iptables_es_rule, $iptables_gm_rule])
  class { 'openstack_project::server':
    iptables_public_tcp_ports => [22, 80],
    iptables_rules6           => $iptables_rule,
    iptables_rules4           => $iptables_rule,
    sysadmins                 => $sysadmins,
  }

  class { 'logstash::web':
    frontend            => 'kibana',
    discover_nodes      => $discover_nodes,
    proxy_elasticsearch => true,
  }

  class { 'log_processor': }

  class { 'log_processor::client':
    config_file => 'puppet:///modules/openstack_project/logstash/jenkins-log-client.yaml',
  }

  class { 'elastic_recheck::bot':
    gerrit_host                     => $gerrit_host,
    gerrit_ssh_private_key          => $gerrit_ssh_private_key,
    gerrit_ssh_private_key_contents => $gerrit_ssh_private_key_contents,
    elasticsearch_url               => $elasticsearch_url,
    recheck_bot_passwd              => $recheck_bot_passwd,
    recheck_bot_nick                => $recheck_bot_nick,
  }
}