jinja conf for influxdb

salt/influxdb/defaults.yaml

@@ -1,158 +1,158 @@
 influxdb:
   config:
     meta:
-      dir: '"/var/lib/influxdb/meta"'
+      dir: /var/lib/influxdb/meta
-      retention-autocreate: 'true'
+      retention-autocreate: true
-      logging-enabled: 'true'
+      logging-enabled: true
     data:
-      dir: '"/var/lib/influxdb/data"'
+      dir: /var/lib/influxdb/data
-      wal-dir: '"/var/lib/influxdb/wal"'
+      wal-dir: /var/lib/influxdb/wal
-      wal-fsync-delay: '"0s"'
+      wal-fsync-delay: 0s
-      index-version: '"inmem"'
+      index-version: inmem
-      race-logging-enabled: 'false'
+      race-logging-enabled: false
-      query-log-enabled: 'true'
+      query-log-enabled: true
-      validate-keys: 'false'
+      validate-keys: false
-      cache-max-memory-size: '"1g"'
+      cache-max-memory-size: 1g
-      cache-snapshot-memory-size: '"25m"'
+      cache-snapshot-memory-size: 25m
-      cache-snapshot-write-cold-duration: '"10m"'
+      cache-snapshot-write-cold-duration: 10m
-      compact-full-write-cold-duration: '"4h"'
+      compact-full-write-cold-duration: 4h
       max-concurrent-compactions: 0
-      compact-throughput: '"48m"'
+      compact-throughput: 48m
-      compact-throughput-burst: '"48m"'
+      compact-throughput-burst: 48m
-      max-index-log-file-size: '"1m"'
+      max-index-log-file-size: 1m
       max-series-per-database: 1000000
       max-values-per-tag: 100000
-      tsm-use-madv-willneed: 'false'
+      tsm-use-madv-willneed: false
     coordinator:
-      write-timeout: '"10s"'
+      write-timeout: 10s
       max-concurrent-queries: 0
-      query-timeout: '"0s"'
+      query-timeout: 0s
-      log-queries-after: '"0s"'
+      log-queries-after: 0s
       max-select-point: 0
       max-select-series: 0
       max-select-buckets: 0
     retention:
-      enabled: 'true'
+      enabled: true
-      check-interval: '"30m"'
+      check-interval: 30m
     shard-precreation:
-      enabled: 'true'
+      enabled: true
-      check-interval: '"10m"'
+      check-interval: 10m
-      advance-period: '"30m"'
+      advance-period: 30m
     monitor:
-      store-enabled: '"true"'
+      store-enabled: true
-      store-database: '"_internal"'
+      store-database: _internal
-      store-interval: '"10s"'
+      store-interval: 10s
     http:
-      enabled: 'true'
+      enabled: true
-      flux-enabled: 'true'
+      flux-enabled: true
-      bind-address: '":8086"'
+      bind-address: ':8086'
-      auth-enabled: 'false'
+      auth-enabled: false
-      realm: '"InfluxDB"'
+      realm: InfluxDB
-      log-enabled: 'false'
+      log-enabled: false
-      suppress-write-log: 'false'
+      suppress-write-log: false
-      access-log-path: '""'
+      access-log-path: ''
-      access-log-status-filters: '[]'
+      access-log-status-filters: []
-      write-tracing: 'false'
+      write-tracing: false
-      pprof-enabled: 'true'
+      pprof-enabled: true
-      debug-pprof-enabled: 'false'
+      debug-pprof-enabled: false
-      https-enabled: 'true'
+      https-enabled: true
-      https-certificate: '"/etc/ssl/influxdb.crt"'
+      https-certificate: /etc/ssl/influxdb.crt
-      https-private-key: '"/etc/ssl/influxdb.key"'
+      https-private-key: /etc/ssl/influxdb.key
-      shared-secret: '""'
+      shared-secret: ''
       max-row-limit: 0
       max-connection-limit: 0
-      unix-socket-enabled: 'false'
+      unix-socket-enabled: false
-      bind-socket: '"/var/run/influxdb.sock"'
+      bind-socket: /var/run/influxdb.sock
       max-body-size: 25000000
       max-concurrent-write-limit: 0
       max-enqueued-write-limit: 0
       enqueued-write-timeout: 0
     logging:
-      format: '"auto"'
+      format: auto
-      level: '"info"'
+      level: info
-      suppress-logo: 'false'
+      suppress-logo: false
     subscriber:
-      enabled: 'true'
+      enabled: true
-      http-timeout: '"30s"'
+      http-timeout: 30s
-      insecure-skip-verify: 'false'
+      insecure-skip-verify: false
-      ca-certs: '""'
+      ca-certs: ''
       write-concurrency: 40
       write-buffer-size: 1000
     graphite:
-      enabled: 'false'
+      enabled: false
-      database: '"graphite"'
+      database: graphite
-      retention-policy: '""'
+      retention-policy: ''
-      bind-address: '":2003"'
+      bind-address: ':2003'
-      protocol: '"tcp"'
+      protocol: tcp
-      consistency-level: '"one"'
+      consistency-level: one
       batch-size: 5000
       batch-pending: 10
-      batch-timeout: '"1s"'
+      batch-timeout: 1s
       udp-read-buffer: 0
-      separator: '"."'
+      separator: '.'
-      tags: '[]'
+      tags: []
-      templates: '[]'
+      templates: []
     collectd:
-      enabled: 'false'
+      enabled: false
-      bind-address: '":25826"'
+      bind-address: ':25826'
-      database: '"collectd"'
+      database: collectd
-      retention-policy: '""'
+      retention-policy: ''
-      typesdb: '"/usr/local/share/collectd"'
+      typesdb: /usr/local/share/collectd
-      security-level: '"none"'
+      security-level: none
-      auth-file: '"/etc/collectd/auth_file"'
+      auth-file: /etc/collectd/auth_file
       batch-size: 5000
       bath-pending: 10
-      batch-timeout: '"10s"'
+      batch-timeout: 10s
       read-buffer: 0
-      parse-multivalue-plugin: '"split"'
+      parse-multivalue-plugin: split
     opentsdb:
       enabled: false
-      bind-address: '":4242"'
+      bind-address: ':4242'
-      database: '"opentsdb"'
+      database: opentsdb
-      retention-policy: '""'
+      retention-policy: ''
-      consistency-level: '"one"'
+      consistency-level: one
-      tls-enabled: 'false'
+      tls-enabled: false
-      certificate: '"/etc/ssl/influxdb.pem"'
+      certificate: /etc/ssl/influxdb.pem
-      log-point-errors: 'true'
+      log-point-errors: true
       batch-size: 1000
       batch-pending: 5
-      bath-timeout: '"1s"'
+      bath-timeout: 1s
     udp:
-      enabled: 'false'
+      enabled: false
-      bind-address: '":8089"'
+      bind-address: ':8089'
-      database: '"udp"'
+      database: udp
-      retention-policy: '""'
+      retention-policy: ''
-      precision: '""'
+      precision: ''
       batch-size: 5000
       batch-pending: 10
-      batch-timeout: '"1s"'
+      batch-timeout: 1s
       read-buffer: 0
     continuous_queries:
-      enabled: 'true'
+      enabled: true
-      log-enabled: 'true'
+      log-enabled: true
-      query-stats-enabled: 'false'
+      query-stats-enabled: false
-      run-interval: '"1s"'
+      run-interval: 1s
     tls:
       ciphers:
-        - '"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"'
+        - TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
-        - '"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"'
+        - TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
-        - '"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"'
+        - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
-        - '"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"'
+        - TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
-        - '"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"'
+        - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
-        - '"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305"'
+        - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
-        - '"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"'
+        - TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
-        - '"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"'
+        - TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
-        - '"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"'
+        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
-        - '"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"'
+        - TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
-        - '"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"'
+        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
-        - '"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305"'
+        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
-        - '"TLS_RSA_WITH_AES_128_CBC_SHA"'
+        - TLS_RSA_WITH_AES_128_CBC_SHA
-        - '"TLS_RSA_WITH_AES_128_CBC_SHA256"'
+        - TLS_RSA_WITH_AES_128_CBC_SHA256
-        - '"TLS_RSA_WITH_AES_128_GCM_SHA256"'
+        - TLS_RSA_WITH_AES_128_GCM_SHA256
-        - '"TLS_RSA_WITH_AES_256_CBC_SHA"'
+        - TLS_RSA_WITH_AES_256_CBC_SHA
-        - '"TLS_RSA_WITH_AES_256_GCM_SHA384"'
+        - TLS_RSA_WITH_AES_256_GCM_SHA384
-      min-version: '"tls1.2"'
+      min-version: tls1.2
-      max-version: '"tls1.2"'
+      max-version: tls1.2
   retention_policies:
     so_short_term:
       default: True

salt/influxdb/etc/influxdb.conf

@@ -1,579 +0,0 @@
-### Welcome to the InfluxDB configuration file.
-
-# The values in this file override the default values used by the system if
-# a config option is not specified. The commented out lines are the configuration
-# field and the default value used. Uncommenting a line and changing the value
-# will change the value used at runtime when the process is restarted.
-
-# Once every 24 hours InfluxDB will report usage data to usage.influxdata.com
-# The data includes a random ID, os, arch, version, the number of series and other
-# usage data. No data from user databases is ever transmitted.
-# Change this option to true to disable reporting.
-# reporting-disabled = false
-
-# Bind address to use for the RPC service for backup and restore.
-# bind-address = "127.0.0.1:8088"
-
-###
-### [meta]
-###
-### Controls the parameters for the Raft consensus group that stores metadata
-### about the InfluxDB cluster.
-###
-
-[meta]
-  # Where the metadata/raft database is stored
-  dir = "/var/lib/influxdb/meta"
-
-  # Automatically create a default retention policy when creating a database.
-  # retention-autocreate = true
-
-  # If log messages are printed for the meta service
-  # logging-enabled = true
-
-###
-### [data]
-###
-### Controls where the actual shard data for InfluxDB lives and how it is
-### flushed from the WAL. "dir" may need to be changed to a suitable place
-### for your system, but the WAL settings are an advanced configuration. The
-### defaults should work for most systems.
-###
-
-[data]
-  # The directory where the TSM storage engine stores TSM files.
-  dir = "/var/lib/influxdb/data"
-
-  # The directory where the TSM storage engine stores WAL files.
-  wal-dir = "/var/lib/influxdb/wal"
-
-  # The amount of time that a write will wait before fsyncing.  A duration
-  # greater than 0 can be used to batch up multiple fsync calls.  This is useful for slower
-  # disks or when WAL write contention is seen.  A value of 0s fsyncs every write to the WAL.
-  # Values in the range of 0-100ms are recommended for non-SSD disks.
-  # wal-fsync-delay = "0s"
-
-
-  # The type of shard index to use for new shards.  The default is an in-memory index that is
-  # recreated at startup.  A value of "tsi1" will use a disk based index that supports higher
-  # cardinality datasets.
-  # index-version = "inmem"
-
-  # Trace logging provides more verbose output around the tsm engine. Turning
-  # this on can provide more useful output for debugging tsm engine issues.
-  # trace-logging-enabled = false
-
-  # Whether queries should be logged before execution. Very useful for troubleshooting, but will
-  # log any sensitive data contained within a query.
-  # query-log-enabled = true
-
-  # Validates incoming writes to ensure keys only have valid unicode characters.
-  # This setting will incur a small overhead because every key must be checked.
-  # validate-keys = false
-
-  # Settings for the TSM engine
-
-  # CacheMaxMemorySize is the maximum size a shard's cache can
-  # reach before it starts rejecting writes.
-  # Valid size suffixes are k, m, or g (case insensitive, 1024 = 1k).
-  # Values without a size suffix are in bytes.
-  # cache-max-memory-size = "1g"
-
-  # CacheSnapshotMemorySize is the size at which the engine will
-  # snapshot the cache and write it to a TSM file, freeing up memory
-  # Valid size suffixes are k, m, or g (case insensitive, 1024 = 1k).
-  # Values without a size suffix are in bytes.
-  # cache-snapshot-memory-size = "25m"
-
-  # CacheSnapshotWriteColdDuration is the length of time at
-  # which the engine will snapshot the cache and write it to
-  # a new TSM file if the shard hasn't received writes or deletes
-  # cache-snapshot-write-cold-duration = "10m"
-
-  # CompactFullWriteColdDuration is the duration at which the engine
-  # will compact all TSM files in a shard if it hasn't received a
-  # write or delete
-  # compact-full-write-cold-duration = "4h"
-
-  # The maximum number of concurrent full and level compactions that can run at one time.  A
-  # value of 0 results in 50% of runtime.GOMAXPROCS(0) used at runtime.  Any number greater
-  # than 0 limits compactions to that value.  This setting does not apply
-  # to cache snapshotting.
-  # max-concurrent-compactions = 0
-
-  # CompactThroughput is the rate limit in bytes per second that we
-  # will allow TSM compactions to write to disk. Note that short bursts are allowed
-  # to happen at a possibly larger value, set by CompactThroughputBurst
-  # compact-throughput = "48m"
-
-  # CompactThroughputBurst is the rate limit in bytes per second that we
-  # will allow TSM compactions to write to disk.
-  # compact-throughput-burst = "48m"
-
-  # The threshold, in bytes, when an index write-ahead log file will compact
-  # into an index file. Lower sizes will cause log files to be compacted more
-  # quickly and result in lower heap usage at the expense of write throughput.
-  # Higher sizes will be compacted less frequently, store more series in-memory,
-  # and provide higher write throughput.
-  # Valid size suffixes are k, m, or g (case insensitive, 1024 = 1k).
-  # Values without a size suffix are in bytes.
-  # max-index-log-file-size = "1m"
-
-  # The maximum series allowed per database before writes are dropped.  This limit can prevent
-  # high cardinality issues at the database level.  This limit can be disabled by setting it to
-  # 0.
-  # max-series-per-database = 1000000
-
-  # The maximum number of tag values per tag that are allowed before writes are dropped.  This limit
-  # can prevent high cardinality tag values from being written to a measurement.  This limit can be
-  # disabled by setting it to 0.
-  # max-values-per-tag = 100000
-
-  # If true, then the mmap advise value MADV_WILLNEED will be provided to the kernel with respect to
-  # TSM files. This setting has been found to be problematic on some kernels, and defaults to off.
-  # It might help users who have slow disks in some cases.
-  # tsm-use-madv-willneed = false
-
-###
-### [coordinator]
-###
-### Controls the clustering service configuration.
-###
-
-[coordinator]
-  # The default time a write request will wait until a "timeout" error is returned to the caller.
-  # write-timeout = "10s"
-
-  # The maximum number of concurrent queries allowed to be executing at one time.  If a query is
-  # executed and exceeds this limit, an error is returned to the caller.  This limit can be disabled
-  # by setting it to 0.
-  # max-concurrent-queries = 0
-
-  # The maximum time a query will is allowed to execute before being killed by the system.  This limit
-  # can help prevent run away queries.  Setting the value to 0 disables the limit.
-  # query-timeout = "0s"
-
-  # The time threshold when a query will be logged as a slow query.  This limit can be set to help
-  # discover slow or resource intensive queries.  Setting the value to 0 disables the slow query logging.
-  # log-queries-after = "0s"
-
-  # The maximum number of points a SELECT can process.  A value of 0 will make
-  # the maximum point count unlimited.  This will only be checked every second so queries will not
-  # be aborted immediately when hitting the limit.
-  # max-select-point = 0
-
-  # The maximum number of series a SELECT can run.  A value of 0 will make the maximum series
-  # count unlimited.
-  # max-select-series = 0
-
-  # The maxium number of group by time bucket a SELECT can create.  A value of zero will max the maximum
-  # number of buckets unlimited.
-  # max-select-buckets = 0
-
-###
-### [retention]
-###
-### Controls the enforcement of retention policies for evicting old data.
-###
-
-[retention]
-  # Determines whether retention policy enforcement enabled.
-  # enabled = true
-
-  # The interval of time when retention policy enforcement checks run.
-  # check-interval = "30m"
-
-###
-### [shard-precreation]
-###
-### Controls the precreation of shards, so they are available before data arrives.
-### Only shards that, after creation, will have both a start- and end-time in the
-### future, will ever be created. Shards are never precreated that would be wholly
-### or partially in the past.
-
-[shard-precreation]
-  # Determines whether shard pre-creation service is enabled.
-  # enabled = true
-
-  # The interval of time when the check to pre-create new shards runs.
-  # check-interval = "10m"
-
-  # The default period ahead of the endtime of a shard group that its successor
-  # group is created.
-  # advance-period = "30m"
-
-###
-### Controls the system self-monitoring, statistics and diagnostics.
-###
-### The internal database for monitoring data is created automatically if
-### if it does not already exist. The target retention within this database
-### is called 'monitor' and is also created with a retention period of 7 days
-### and a replication factor of 1, if it does not exist. In all cases the
-### this retention policy is configured as the default for the database.
-
-[monitor]
-  # Whether to record statistics internally.
-  # store-enabled = true
-
-  # The destination database for recorded statistics
-  # store-database = "_internal"
-
-  # The interval at which to record statistics
-  # store-interval = "10s"
-
-###
-### [http]
-###
-### Controls how the HTTP endpoints are configured. These are the primary
-### mechanism for getting data into and out of InfluxDB.
-###
-
-[http]
-  # Determines whether HTTP endpoint is enabled.
-  # enabled = true
-
-  # Determines whether the Flux query endpoint is enabled.
-  flux-enabled = true
-
-  # The bind address used by the HTTP service.
-  # bind-address = ":8086"
-
-  # Determines whether user authentication is enabled over HTTP/HTTPS.
-  # auth-enabled = false
-
-  # The default realm sent back when issuing a basic auth challenge.
-  # realm = "InfluxDB"
-
-  # Determines whether HTTP request logging is enabled.
-  # log-enabled = true
-
-  # Determines whether the HTTP write request logs should be suppressed when the log is enabled.
-  # suppress-write-log = false
-
-  # When HTTP request logging is enabled, this option specifies the path where
-  # log entries should be written. If unspecified, the default is to write to stderr, which
-  # intermingles HTTP logs with internal InfluxDB logging.
-  #
-  # If influxd is unable to access the specified path, it will log an error and fall back to writing
-  # the request log to stderr.
-  # access-log-path = ""
-
-  # Filters which requests should be logged. Each filter is of the pattern NNN, NNX, or NXX where N is
-  # a number and X is a wildcard for any number. To filter all 5xx responses, use the string 5xx.
-  # If multiple filters are used, then only one has to match. The default is to have no filters which
-  # will cause every request to be printed.
-  # access-log-status-filters = []
-
-  # Determines whether detailed write logging is enabled.
-  # write-tracing = false
-
-  # Determines whether the pprof endpoint is enabled.  This endpoint is used for
-  # troubleshooting and monitoring.
-  # pprof-enabled = true
-
-  # Enables a pprof endpoint that binds to localhost:6060 immediately on startup.
-  # This is only needed to debug startup issues.
-  # debug-pprof-enabled = false
-
-  # Determines whether HTTPS is enabled.
-   https-enabled = true
-
-  # The SSL certificate to use when HTTPS is enabled.
-   https-certificate = "/etc/ssl/influxdb.crt"
-
-  # Use a separate private key location.
-   https-private-key = "/etc/ssl/influxdb.key"
-
-  # The JWT auth shared secret to validate requests using JSON web tokens.
-  # shared-secret = ""
-
-  # The default chunk size for result sets that should be chunked.
-  # max-row-limit = 0
-
-  # The maximum number of HTTP connections that may be open at once.  New connections that
-  # would exceed this limit are dropped.  Setting this value to 0 disables the limit.
-  # max-connection-limit = 0
-
-  # Enable http service over unix domain socket
-  # unix-socket-enabled = false
-
-  # The path of the unix domain socket.
-  # bind-socket = "/var/run/influxdb.sock"
-
-  # The maximum size of a client request body, in bytes. Setting this value to 0 disables the limit.
-  # max-body-size = 25000000
-
-  # The maximum number of writes processed concurrently.
-  # Setting this to 0 disables the limit.
-  # max-concurrent-write-limit = 0
-
-  # The maximum number of writes queued for processing.
-  # Setting this to 0 disables the limit.
-  # max-enqueued-write-limit = 0
-
-  # The maximum duration for a write to wait in the queue to be processed.
-  # Setting this to 0 or setting max-concurrent-write-limit to 0 disables the limit.
-  # enqueued-write-timeout = 0
-
-###
-### [logging]
-###
-### Controls how the logger emits logs to the output.
-###
-
-[logging]
-  # Determines which log encoder to use for logs. Available options
-  # are auto, logfmt, and json. auto will use a more a more user-friendly
-  # output format if the output terminal is a TTY, but the format is not as
-  # easily machine-readable. When the output is a non-TTY, auto will use
-  # logfmt.
-  # format = "auto"
-
-  # Determines which level of logs will be emitted. The available levels
-  # are error, warn, info, and debug. Logs that are equal to or above the
-  # specified level will be emitted.
-  # level = "info"
-
-  # Suppresses the logo output that is printed when the program is started.
-  # The logo is always suppressed if STDOUT is not a TTY.
-  # suppress-logo = false
-
-###
-### [subscriber]
-###
-### Controls the subscriptions, which can be used to fork a copy of all data
-### received by the InfluxDB host.
-###
-
-[subscriber]
-  # Determines whether the subscriber service is enabled.
-  # enabled = true
-
-  # The default timeout for HTTP writes to subscribers.
-  # http-timeout = "30s"
-
-  # Allows insecure HTTPS connections to subscribers.  This is useful when testing with self-
-  # signed certificates.
-  # insecure-skip-verify = false
-
-  # The path to the PEM encoded CA certs file. If the empty string, the default system certs will be used
-  # ca-certs = ""
-
-  # The number of writer goroutines processing the write channel.
-  # write-concurrency = 40
-
-  # The number of in-flight writes buffered in the write channel.
-  # write-buffer-size = 1000
-
-
-###
-### [[graphite]]
-###
-### Controls one or many listeners for Graphite data.
-###
-
-[[graphite]]
-  # Determines whether the graphite endpoint is enabled.
-  # enabled = false
-  # database = "graphite"
-  # retention-policy = ""
-  # bind-address = ":2003"
-  # protocol = "tcp"
-  # consistency-level = "one"
-
-  # These next lines control how batching works. You should have this enabled
-  # otherwise you could get dropped metrics or poor performance. Batching
-  # will buffer points in memory if you have many coming in.
-
-  # Flush if this many points get buffered
-  # batch-size = 5000
-
-  # number of batches that may be pending in memory
-  # batch-pending = 10
-
-  # Flush at least this often even if we haven't hit buffer limit
-  # batch-timeout = "1s"
-
-  # UDP Read buffer size, 0 means OS default. UDP listener will fail if set above OS max.
-  # udp-read-buffer = 0
-
-  ### This string joins multiple matching 'measurement' values providing more control over the final measurement name.
-  # separator = "."
-
-  ### Default tags that will be added to all metrics.  These can be overridden at the template level
-  ### or by tags extracted from metric
-  # tags = ["region=us-east", "zone=1c"]
-
-  ### Each template line requires a template pattern.  It can have an optional
-  ### filter before the template and separated by spaces.  It can also have optional extra
-  ### tags following the template.  Multiple tags should be separated by commas and no spaces
-  ### similar to the line protocol format.  There can be only one default template.
-  # templates = [
-  #   "*.app env.service.resource.measurement",
-  #   # Default template
-  #   "server.*",
-  # ]
-
-###
-### [collectd]
-###
-### Controls one or many listeners for collectd data.
-###
-
-[[collectd]]
-  # enabled = false
-  # bind-address = ":25826"
-  # database = "collectd"
-  # retention-policy = ""
-  #
-  # The collectd service supports either scanning a directory for multiple types
-  # db files, or specifying a single db file.
-  # typesdb = "/usr/local/share/collectd"
-  #
-  # security-level = "none"
-  # auth-file = "/etc/collectd/auth_file"
-
-  # These next lines control how batching works. You should have this enabled
-  # otherwise you could get dropped metrics or poor performance. Batching
-  # will buffer points in memory if you have many coming in.
-
-  # Flush if this many points get buffered
-  # batch-size = 5000
-
-  # Number of batches that may be pending in memory
-  # batch-pending = 10
-
-  # Flush at least this often even if we haven't hit buffer limit
-  # batch-timeout = "10s"
-
-  # UDP Read buffer size, 0 means OS default. UDP listener will fail if set above OS max.
-  # read-buffer = 0
-
-  # Multi-value plugins can be handled two ways.
-  # "split" will parse and store the multi-value plugin data into separate measurements
-  # "join" will parse and store the multi-value plugin as a single multi-value measurement.
-  # "split" is the default behavior for backward compatability with previous versions of influxdb.
-  # parse-multivalue-plugin = "split"
-###
-### [opentsdb]
-###
-### Controls one or many listeners for OpenTSDB data.
-###
-
-[[opentsdb]]
-  # enabled = false
-  # bind-address = ":4242"
-  # database = "opentsdb"
-  # retention-policy = ""
-  # consistency-level = "one"
-  # tls-enabled = false
-  # certificate= "/etc/ssl/influxdb.pem"
-
-  # Log an error for every malformed point.
-  # log-point-errors = true
-
-  # These next lines control how batching works. You should have this enabled
-  # otherwise you could get dropped metrics or poor performance. Only points
-  # metrics received over the telnet protocol undergo batching.
-
-  # Flush if this many points get buffered
-  # batch-size = 1000
-
-  # Number of batches that may be pending in memory
-  # batch-pending = 5
-
-  # Flush at least this often even if we haven't hit buffer limit
-  # batch-timeout = "1s"
-
-###
-### [[udp]]
-###
-### Controls the listeners for InfluxDB line protocol data via UDP.
-###
-
-[[udp]]
-  # enabled = false
-  # bind-address = ":8089"
-  # database = "udp"
-  # retention-policy = ""
-
-  # InfluxDB precision for timestamps on received points ("" or "n", "u", "ms", "s", "m", "h")
-  # precision = ""
-
-  # These next lines control how batching works. You should have this enabled
-  # otherwise you could get dropped metrics or poor performance. Batching
-  # will buffer points in memory if you have many coming in.
-
-  # Flush if this many points get buffered
-  # batch-size = 5000
-
-  # Number of batches that may be pending in memory
-  # batch-pending = 10
-
-  # Will flush at least this often even if we haven't hit buffer limit
-  # batch-timeout = "1s"
-
-  # UDP Read buffer size, 0 means OS default. UDP listener will fail if set above OS max.
-  # read-buffer = 0
-
-###
-### [continuous_queries]
-###
-### Controls how continuous queries are run within InfluxDB.
-###
-
-[continuous_queries]
-  # Determines whether the continuous query service is enabled.
-  # enabled = true
-
-  # Controls whether queries are logged when executed by the CQ service.
-  # log-enabled = true
-
-  # Controls whether queries are logged to the self-monitoring data store.
-  # query-stats-enabled = false
-
-  # interval for how often continuous queries will be checked if they need to run
-  # run-interval = "1s"
-
-###
-### [tls]
-###
-### Global configuration settings for TLS in InfluxDB.
-###
-
-[tls]
-  # Determines the available set of cipher suites. See https://golang.org/pkg/crypto/tls/#pkg-constants
-  # for a list of available ciphers, which depends on the version of Go (use the query
-  # SHOW DIAGNOSTICS to see the version of Go used to build InfluxDB). If not specified, uses
-  # the default settings from Go's crypto/tls package.
-  # ciphers = [
-  #   "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
-  #   "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
-  # ]
-  ciphers = [
-      "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
-      "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
-      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
-      "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
-      "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
-      "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
-      "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
-      "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
-      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
-      "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
-      "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
-      "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
-      "TLS_RSA_WITH_AES_128_CBC_SHA",
-      "TLS_RSA_WITH_AES_128_CBC_SHA256",
-      "TLS_RSA_WITH_AES_128_GCM_SHA256",
-      "TLS_RSA_WITH_AES_256_CBC_SHA",
-      "TLS_RSA_WITH_AES_256_GCM_SHA384",
-  ]
-
-  # Minimum version of the tls protocol that will be negotiated. If not specified, uses the
-  # default settings from Go's crypto/tls package.
-  # min-version = "tls1.2"
-
-  # Maximum version of the tls protocol that will be negotiated. If not specified, uses the
-  # default settings from Go's crypto/tls package.
-  # max-version = "tls1.2"

salt/influxdb/etc/influxdb.conf.jinja

@@ -0,0 +1,23 @@
+{% import_yaml 'influx.defaults.yaml' as influx %}
+
+{%- for header in influx.influxdb.config.keys() %}
+[{{header}}]
+{%-   for k, v in influx.influxdb.config[header].items() %}
+{#-     is v a list? #}
+{%-     if v is iterable and (v is not string and v is not mapping) %}
+  {{k}} = [
+{%-       for li in v %}
+      "{{li}}",
+{%- endfor %}
+  ]
+{%-     else %}
+{%-   if v is string %}
+  {{k}} = "{{v}}"
+{%- elif v is boolean %}
+  {{k}} = {{v|string|lower}}
+{%-   else %}
+  {{k}} = {{v}}
+{%-   endif %}
+{%-     endif %}
+{%-   endfor %}
+{%- endfor %}

salt/influxdb/init.sls

@@ -41,7 +41,7 @@ influxdbconf:
     - user: 939
     - group: 939
     - template: jinja
-    - source: salt://influxdb/etc/influxdb.conf
+    - source: salt://influxdb/etc/influxdb.conf.jinja
 
 so-influxdb:
   docker_container.running: