*: Fix risky-file-permissions ansible-lint issues

alertmanager/tasks/main.yml

@@ -9,6 +9,9 @@
   template:
     src: default.j2
     dest: /etc/default/prometheus-alertmanager
+    owner: root
+    group: root
+    mode: "0644"
   notify:
     - Restart alertmanager
   tags:
@@ -18,6 +21,9 @@
   template:
     src: alertmanager.yml.j2
     dest: /etc/prometheus/alertmanager.yml
+    owner: root
+    group: root
+    mode: "0644"
   notify:
     - Reload alertmanager
   tags:

mysqld_exporter/tasks/main.yml

@@ -23,6 +23,9 @@
   template:
     src: prometheus-mysqld-exporter.j2
     dest: /etc/default/prometheus-mysqld-exporter
+    owner: root
+    group: root
+    mode: "0644"
   notify:
     - Restart mysqld_exporter
   tags:
@@ -34,6 +37,9 @@
   template:
     src: scrape.yml.j2
     dest: "/etc/prometheus/scrape/mysqld_{{ ansible_fqdn }}.yml"
+    owner: root
+    group: root
+    mode: "0644"
   delegate_to: "{{ prometheus_host }}"
   tags:
     - prometheus

node_exporter/tasks/main.yml

@@ -44,6 +44,9 @@
   template:
     src: prometheus-node-exporter.j2
     dest: /etc/default/prometheus-node-exporter
+    owner: root
+    group: root
+    mode: "0644"
   notify:
     - Restart node_exporter
   tags:
@@ -55,6 +58,9 @@
   template:
     src: scrape.yml.j2
     dest: "/etc/prometheus/scrape/node_{{ ansible_fqdn }}.yml"
+    owner: root
+    group: root
+    mode: "0644"
   delegate_to: "{{ prometheus_host }}"
   tags:
     - prometheus

prometheus/tasks/main.yml

@@ -12,6 +12,9 @@
   template:
     src: default-prometheus.j2
     dest: /etc/default/prometheus
+    owner: root
+    group: root
+    mode: "0644"
   notify:
     - Restart prometheus
   tags:
@@ -23,6 +26,9 @@
     src: prometheus.yml.j2
     dest: /etc/prometheus/prometheus.yml
     validate: "promtool check config %s"
+    owner: root
+    group: root
+    mode: "0644"
   notify:
     - Reload prometheus
   tags:
@@ -33,6 +39,9 @@
   file:
     path: "/etc/prometheus/{{ item }}"
     state: directory
+    owner: root
+    group: root
+    mode: "0755"
   with_items:
     - alertmanagers
     - rules
@@ -46,6 +55,9 @@
     src: "rules.yml.j2"
     dest: "/etc/prometheus/rules/ansible_rules.yml"
     validate: "promtool check rules %s"
+    owner: root
+    group: root
+    mode: "0644"
   notify:
     - Reload prometheus
   tags: