mirror of https://github.com/linkerd/linkerd2.git
327 lines
11 KiB
YAML
327 lines
11 KiB
YAML
{{ if .Values.prometheus.enabled -}}
|
|
---
|
|
###
|
|
### Prometheus
|
|
###
|
|
---
|
|
kind: ConfigMap
|
|
apiVersion: v1
|
|
metadata:
|
|
name: linkerd-prometheus-config
|
|
namespace: {{.Values.namespace}}
|
|
labels:
|
|
{{.Values.extensionAnnotation}}: linkerd-viz
|
|
component: prometheus
|
|
namespace: {{.Values.namespace}}
|
|
annotations:
|
|
{{.Values.createdByAnnotation}}: {{default (printf "linkerd/helm %s" .Values.linkerdVersion) .Values.cliVersion}}
|
|
data:
|
|
prometheus.yml: |-
|
|
global:
|
|
{{- if .Values.prometheus.globalConfig -}}
|
|
{{- toYaml .Values.prometheus.globalConfig | trim | nindent 6 }}
|
|
{{- end}}
|
|
|
|
rule_files:
|
|
- /etc/prometheus/*_rules.yml
|
|
- /etc/prometheus/*_rules.yaml
|
|
|
|
scrape_configs:
|
|
- job_name: 'prometheus'
|
|
static_configs:
|
|
- targets: ['localhost:9090']
|
|
|
|
{{ if .Values.grafana.enabled -}}
|
|
- job_name: 'grafana'
|
|
kubernetes_sd_configs:
|
|
- role: pod
|
|
namespaces:
|
|
names: ['{{.Values.namespace}}']
|
|
relabel_configs:
|
|
- source_labels:
|
|
- __meta_kubernetes_pod_container_name
|
|
action: keep
|
|
regex: ^grafana$
|
|
{{- end }}
|
|
|
|
# Required for: https://grafana.com/grafana/dashboards/315
|
|
- job_name: 'kubernetes-nodes-cadvisor'
|
|
scheme: https
|
|
tls_config:
|
|
ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
|
insecure_skip_verify: true
|
|
bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
|
|
kubernetes_sd_configs:
|
|
- role: node
|
|
relabel_configs:
|
|
- action: labelmap
|
|
regex: __meta_kubernetes_node_label_(.+)
|
|
- target_label: __address__
|
|
replacement: kubernetes.default.svc:443
|
|
- source_labels: [__meta_kubernetes_node_name]
|
|
regex: (.+)
|
|
target_label: __metrics_path__
|
|
replacement: /api/v1/nodes/$1/proxy/metrics/cadvisor
|
|
metric_relabel_configs:
|
|
- source_labels: [__name__]
|
|
regex: '(container|machine)_(cpu|memory|network|fs)_(.+)'
|
|
action: keep
|
|
- source_labels: [__name__]
|
|
regex: 'container_memory_failures_total' # unneeded large metric
|
|
action: drop
|
|
|
|
- job_name: 'linkerd-controller'
|
|
kubernetes_sd_configs:
|
|
- role: pod
|
|
namespaces:
|
|
names: ['{{.Values.linkerdNamespace}}']
|
|
relabel_configs:
|
|
- source_labels:
|
|
- __meta_kubernetes_pod_label_linkerd_io_control_plane_component
|
|
- __meta_kubernetes_pod_container_port_name
|
|
action: keep
|
|
regex: (.*);admin-http$
|
|
- source_labels: [__meta_kubernetes_pod_container_name]
|
|
action: replace
|
|
target_label: component
|
|
|
|
- job_name: 'linkerd-service-mirror'
|
|
kubernetes_sd_configs:
|
|
- role: pod
|
|
relabel_configs:
|
|
- source_labels:
|
|
- __meta_kubernetes_pod_label_linkerd_io_control_plane_component
|
|
- __meta_kubernetes_pod_container_port_name
|
|
action: keep
|
|
regex: linkerd-service-mirror;admin-http$
|
|
- source_labels: [__meta_kubernetes_pod_container_name]
|
|
action: replace
|
|
target_label: component
|
|
|
|
- job_name: 'linkerd-proxy'
|
|
kubernetes_sd_configs:
|
|
- role: pod
|
|
relabel_configs:
|
|
- source_labels:
|
|
- __meta_kubernetes_pod_container_name
|
|
- __meta_kubernetes_pod_container_port_name
|
|
- __meta_kubernetes_pod_label_linkerd_io_control_plane_ns
|
|
action: keep
|
|
regex: ^{{default .Values.proxyContainerName "linkerd-proxy" .Values.proxyContainerName}};linkerd-admin;{{.Values.linkerdNamespace}}$
|
|
- source_labels: [__meta_kubernetes_namespace]
|
|
action: replace
|
|
target_label: namespace
|
|
- source_labels: [__meta_kubernetes_pod_name]
|
|
action: replace
|
|
target_label: pod
|
|
# special case k8s' "job" label, to not interfere with prometheus' "job"
|
|
# label
|
|
# __meta_kubernetes_pod_label_linkerd_io_proxy_job=foo =>
|
|
# k8s_job=foo
|
|
- source_labels: [__meta_kubernetes_pod_label_linkerd_io_proxy_job]
|
|
action: replace
|
|
target_label: k8s_job
|
|
# drop __meta_kubernetes_pod_label_linkerd_io_proxy_job
|
|
- action: labeldrop
|
|
regex: __meta_kubernetes_pod_label_linkerd_io_proxy_job
|
|
# __meta_kubernetes_pod_label_linkerd_io_proxy_deployment=foo =>
|
|
# deployment=foo
|
|
- action: labelmap
|
|
regex: __meta_kubernetes_pod_label_linkerd_io_proxy_(.+)
|
|
# drop all labels that we just made copies of in the previous labelmap
|
|
- action: labeldrop
|
|
regex: __meta_kubernetes_pod_label_linkerd_io_proxy_(.+)
|
|
# __meta_kubernetes_pod_label_linkerd_io_foo=bar =>
|
|
# foo=bar
|
|
- action: labelmap
|
|
regex: __meta_kubernetes_pod_label_linkerd_io_(.+)
|
|
# Copy all pod labels to tmp labels
|
|
- action: labelmap
|
|
regex: __meta_kubernetes_pod_label_(.+)
|
|
replacement: __tmp_pod_label_$1
|
|
# Take `linkerd_io_` prefixed labels and copy them without the prefix
|
|
- action: labelmap
|
|
regex: __tmp_pod_label_linkerd_io_(.+)
|
|
replacement: __tmp_pod_label_$1
|
|
# Drop the `linkerd_io_` originals
|
|
- action: labeldrop
|
|
regex: __tmp_pod_label_linkerd_io_(.+)
|
|
# Copy tmp labels into real labels
|
|
- action: labelmap
|
|
regex: __tmp_pod_label_(.+)
|
|
|
|
{{- if .Values.prometheus.scrapeConfigs }}
|
|
{{- toYaml .Values.prometheus.scrapeConfigs | trim | nindent 4 }}
|
|
{{- end }}
|
|
|
|
{{- if (or .Values.prometheus.alertmanagers .Values.prometheus.alertRelabelConfigs) }}
|
|
alerting:
|
|
alert_relabel_configs:
|
|
{{- if .Values.prometheus.alertRelabelConfigs }}
|
|
{{- toYaml .Values.prometheus.alertRelabelConfigs | trim | nindent 6 }}
|
|
{{- end }}
|
|
alertmanagers:
|
|
{{- if .Values.prometheus.alertmanagers }}
|
|
{{- toYaml .Values.prometheus.alertmanagers | trim | nindent 6 }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{- if .Values.prometheus.remoteWrite }}
|
|
remote_write:
|
|
{{- toYaml .Values.prometheus.remoteWrite | trim | nindent 4 }}
|
|
{{- end }}
|
|
---
|
|
kind: Service
|
|
apiVersion: v1
|
|
metadata:
|
|
name: linkerd-prometheus
|
|
namespace: {{.Values.namespace}}
|
|
labels:
|
|
{{.Values.extensionAnnotation}}: linkerd-viz
|
|
component: prometheus
|
|
namespace: {{.Values.namespace}}
|
|
annotations:
|
|
{{.Values.createdByAnnotation}}: {{default (printf "linkerd/helm %s" .Values.linkerdVersion) .Values.cliVersion}}
|
|
spec:
|
|
type: ClusterIP
|
|
selector:
|
|
{{.Values.extensionAnnotation}}: linkerd-viz
|
|
component: prometheus
|
|
ports:
|
|
- name: admin-http
|
|
port: 9090
|
|
targetPort: 9090
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
annotations:
|
|
{{.Values.createdByAnnotation}}: {{default (printf "linkerd/helm %s" .Values.linkerdVersion) .Values.cliVersion}}
|
|
labels:
|
|
{{.Values.extensionAnnotation}}: linkerd-viz
|
|
app.kubernetes.io/name: prometheus
|
|
app.kubernetes.io/part-of: Linkerd
|
|
app.kubernetes.io/version: {{default .Values.linkerdVersion .Values.controllerImageVersion}}
|
|
component: prometheus
|
|
namespace: {{.Values.namespace}}
|
|
name: linkerd-prometheus
|
|
namespace: {{.Values.namespace}}
|
|
spec:
|
|
replicas: 1
|
|
{{- if .Values.prometheus.persistence }}
|
|
strategy:
|
|
type: Recreate
|
|
{{- end }}
|
|
selector:
|
|
matchLabels:
|
|
{{.Values.extensionAnnotation}}: linkerd-viz
|
|
component: prometheus
|
|
namespace: {{.Values.namespace}}
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
{{.Values.createdByAnnotation}}: {{default (printf "linkerd/helm %s" .Values.linkerdVersion) .Values.cliVersion}}
|
|
{{- with .Values.prometheus.proxy }}
|
|
{{- include "partials.proxy.config.annotations" .resources | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.podAnnotations }}{{ . | trim | nindent 8 }}{{- end }}
|
|
labels:
|
|
{{.Values.extensionAnnotation}}: linkerd-viz
|
|
component: prometheus
|
|
namespace: {{.Values.namespace}}
|
|
{{- with .Values.podLabels }}{{ toYaml . | trim | nindent 8 }}{{- end }}
|
|
spec:
|
|
{{- if .Values.tolerations -}}
|
|
{{- include "linkerd.tolerations" . | nindent 6 }}
|
|
{{- end -}}
|
|
{{- include "linkerd.node-selector" . | nindent 6 }}
|
|
securityContext:
|
|
fsGroup: 65534
|
|
containers:
|
|
{{- if .Values.prometheus.sidecarContainers -}}
|
|
{{- toYaml .Values.prometheus.sidecarContainers | trim | nindent 6 }}
|
|
{{- end}}
|
|
- args:
|
|
{{- range $key, $value := .Values.prometheus.args}}
|
|
- --{{ $key }}{{ if $value }}={{ $value }}{{ end }}
|
|
{{- end }}
|
|
image: {{.Values.prometheus.image.registry}}/{{.Values.prometheus.image.name}}:{{.Values.prometheus.image.tag}}
|
|
imagePullPolicy: {{.Values.prometheus.imagepullPolicy}}
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /-/healthy
|
|
port: 9090
|
|
initialDelaySeconds: 30
|
|
timeoutSeconds: 30
|
|
name: prometheus
|
|
ports:
|
|
- containerPort: 9090
|
|
name: admin-http
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /-/ready
|
|
port: 9090
|
|
initialDelaySeconds: 30
|
|
timeoutSeconds: 30
|
|
{{- if .Values.prometheus.resources -}}
|
|
{{- include "partials.resources" .Values.prometheus.resources | nindent 8 }}
|
|
{{- end }}
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 65534
|
|
runAsGroup: 65534
|
|
volumeMounts:
|
|
{{- range .Values.prometheus.ruleConfigMapMounts }}
|
|
- name: {{ .name }}
|
|
mountPath: /etc/prometheus/{{ .subPath }}
|
|
subPath: {{ .subPath }}
|
|
readOnly: true
|
|
{{- end }}
|
|
- mountPath: /data
|
|
name: data
|
|
- mountPath: /etc/prometheus/prometheus.yml
|
|
name: prometheus-config
|
|
subPath: prometheus.yml
|
|
readOnly: true
|
|
serviceAccountName: linkerd-prometheus
|
|
volumes:
|
|
{{- range .Values.prometheus.ruleConfigMapMounts }}
|
|
- name: {{ .name }}
|
|
configMap:
|
|
name: {{ .configMap }}
|
|
{{- end }}
|
|
- name: data
|
|
{{- if .Values.prometheus.persistence }}
|
|
persistentVolumeClaim:
|
|
claimName: linkerd-prometheus
|
|
{{- else }}
|
|
emptyDir: {}
|
|
{{- end }}
|
|
- configMap:
|
|
name: linkerd-prometheus-config
|
|
name: prometheus-config
|
|
{{- if .Values.prometheus.persistence }}
|
|
---
|
|
kind: PersistentVolumeClaim
|
|
apiVersion: v1
|
|
metadata:
|
|
labels:
|
|
{{.Values.extensionAnnotation}}: linkerd-viz
|
|
app.kubernetes.io/name: prometheus
|
|
app.kubernetes.io/part-of: Linkerd
|
|
app.kubernetes.io/version: {{default .Values.linkerdVersion .Values.controllerImageVersion}}
|
|
component: prometheus
|
|
name: linkerd-prometheus
|
|
namespace: {{.Values.namespace}}
|
|
spec:
|
|
accessModes:
|
|
- {{ .Values.prometheus.persistence.accessMode | quote }}
|
|
resources:
|
|
requests:
|
|
storage: {{ .Values.prometheus.persistence.size | quote }}
|
|
{{- if .Values.prometheus.persistence.storageClass }}
|
|
storageClassName: "{{ .Values.prometheus.persistence.storageClass }}"
|
|
{{- end }}
|
|
{{- end }}
|
|
{{ end -}}
|