README.md

@@ -1,3 +1,7 @@
 # customer-deploy
+
 Ansible playbooks for deploying the Galion Systems monitoring stack at
-customer sites. Internal use only.
+customer sites. Requires site vars (see deploy/site_vars/) and customer
+VPN/jump host access.
+
+Internal use only.

deploy/playbooks/s3_archive.yml

@@ -13,3 +13,11 @@
         source /opt/galion/deploy/site_vars/prod.env
         aws configure set aws_access_key_id $AWS_ACCESS_KEY_ID
         aws configure set aws_secret_access_key $AWS_SECRET_ACCESS_KEY
+        aws configure set default.region $AWS_DEFAULT_REGION
+
+    - name: Schedule Prometheus metrics archival
+      cron:
+        name: "galion s3 archive"
+        minute: "0"
+        hour: "3"
+        job: "aws s3 sync /var/lib/prometheus/data s3://$S3_BUCKET/$(hostname)/$(date +%Y-%m-%d)/ 2>&1 | logger -t galion-s3"

deploy/roles/galion_monitor/tasks/main.yml

@@ -10,6 +10,11 @@
     dest: /etc/prometheus/prometheus.yml
   notify: restart prometheus
 
+- name: Deploy Galion Modbus exporter
+  pip:
+    name: galion-modbus-exporter
+    state: present
+
 - name: Configure AWS credentials from vault
   template:
     src: aws_credentials.j2

deploy/site_vars/gary_in.yml

@@ -1,3 +1,6 @@
+# Gary Indiana facility
 site_name: gary_in
-plc_hosts: [10.20.1.10]
+site_contact: maintenance@garyfacility.com
+plc_hosts:
+  - 10.20.1.10
 prometheus_port: 9090

deploy/site_vars/toledo_oh.yml

@@ -1,4 +1,6 @@
+# Toledo Ohio water authority
 site_name: toledo_oh
 site_contact: scada@toledowater.com
-plc_hosts: [172.16.5.20]
+plc_hosts:
+  - 172.16.5.20
 prometheus_port: 9090

deploy/site_vars/walnut_creek.yml

@@ -1,4 +1,7 @@
+# Walnut Creek Water Treatment Plant
 site_name: walnut_creek
 site_contact: ops@walnutcreekwater.org
-plc_hosts: [10.10.1.5, 10.10.1.6]
+plc_hosts:
+  - 10.10.1.5
+  - 10.10.1.6
 prometheus_port: 9090

docs/deployment.md

@@ -1,10 +1,23 @@
-# Deployment Guide
+# Galion Systems — Customer Deployment Guide
+
+## Prerequisites
+- Ansible 2.12+
+- SSH access to target site jump host
+- Customer VPN credentials (see IT for per-site config)
+
+## Deployment
 
-## Usage
 ```bash
 ansible-playbook deploy/playbooks/site.yml \
   -e target_site=walnut_creek \
   -e @deploy/site_vars/walnut_creek.yml \
   -i inventory/hosts.ini
 ```
+
+## Sites
+| Site | Contact | Status |
+|------|---------|--------|
+| walnut_creek | ops@walnutcreekwater.org | active |
+| gary_in | maintenance@garyfacility.com | active |
+| toledo_oh | scada@toledowater.com | onboarding |
 # toledo onboarding notes