kubezero/charts/kubezero-metrics/values.yaml

339 lines
8.5 KiB
YAML
Raw Normal View History

2020-10-10 00:58:44 +00:00
kube-prometheus-stack:
global:
rbac:
pspEnabled: false
2020-08-03 16:01:39 +00:00
defaultRules:
create: false
2020-07-30 16:19:04 +00:00
coreDns:
2020-08-03 16:01:39 +00:00
enabled: true
kubeDns:
enabled: false
2020-07-30 16:19:04 +00:00
kubeApiServer:
2020-08-03 16:01:39 +00:00
enabled: true
2020-08-03 17:47:11 +00:00
kubeStateMetrics:
enabled: true
2020-08-04 13:45:42 +00:00
kubeProxy:
2020-08-03 17:47:11 +00:00
enabled: true
2020-07-30 16:19:04 +00:00
kubeEtcd:
2020-09-02 14:05:57 +00:00
enabled: true
service:
port: 2381
targetPort: 2381
kubeControllerManager:
enabled: true
service:
port: 10257
targetPort: 10257
serviceMonitor:
https: true
insecureSkipVerify: true
2020-07-30 16:19:04 +00:00
kubeScheduler:
enabled: true
service:
port: 10259
targetPort: 10259
serviceMonitor:
https: true
insecureSkipVerify: true
2020-08-04 13:45:42 +00:00
kubelet:
enabled: true
serviceMonitor:
# removed with 1.18, but still required for all container metrics ??
cAdvisor: true
2020-08-04 13:45:42 +00:00
2020-07-30 16:19:04 +00:00
prometheusOperator:
enabled: true
2020-12-02 14:24:07 +00:00
logFormat: json
2020-07-30 17:56:46 +00:00
2020-07-31 00:18:07 +00:00
# Run on controller nodes
tolerations:
- key: node-role.kubernetes.io/master
effect: NoSchedule
nodeSelector:
node-role.kubernetes.io/control-plane: ""
2021-03-22 10:41:26 +00:00
resources:
requests:
cpu: 20m
memory: 32Mi
limits:
memory: 64Mi
2020-07-31 00:18:07 +00:00
admissionWebhooks:
patch:
tolerations:
- key: node-role.kubernetes.io/master
effect: NoSchedule
nodeSelector:
node-role.kubernetes.io/control-plane: ""
2020-08-03 12:26:00 +00:00
nodeExporter:
enabled: true
2020-08-04 00:38:26 +00:00
serviceMonitor:
relabelings:
- sourceLabels: [__meta_kubernetes_pod_node_name]
separator: ;
regex: ^(.*)$
targetLabel: node
replacement: $1
action: replace
2021-03-22 11:05:02 +00:00
prometheus-node-exporter:
rbac:
pspEnabled: false
2021-03-22 10:41:26 +00:00
resources:
requests:
cpu: 20m
memory: 16Mi
2020-08-03 12:26:00 +00:00
prometheus:
enabled: true
2020-08-03 14:51:44 +00:00
prometheusSpec:
2020-08-03 16:44:58 +00:00
retention: 8d
portName: http-prometheus
2020-12-02 14:24:07 +00:00
logFormat: json
# externalUrl:
2020-08-03 16:44:58 +00:00
# gather ALL monitors
podMonitorSelectorNilUsesHelmValues: false
serviceMonitorSelectorNilUsesHelmValues: false
ruleSelectorNilUsesHelmValues: false
2020-08-03 14:51:44 +00:00
resources:
requests:
2021-03-22 10:41:26 +00:00
memory: 512Mi
cpu: 500m
2020-09-10 13:01:28 +00:00
limits:
2021-03-22 10:41:26 +00:00
memory: 3Gi
# cpu: "1000m"
2020-08-03 12:26:00 +00:00
walCompression: true
2020-08-03 14:51:44 +00:00
storageSpec:
volumeClaimTemplate:
spec:
# storageClassName: ebs-sc-gp3-xfs
2020-08-03 14:51:44 +00:00
accessModes: ["ReadWriteOnce"]
resources:
requests:
2020-09-10 13:01:28 +00:00
storage: 16Gi
2020-08-03 12:26:00 +00:00
2020-08-03 15:08:16 +00:00
# Custom Grafana tweaks
grafana:
enabled: true
rbac:
pspEnabled: false
2021-08-25 13:59:17 +00:00
# Disabled as we use the upstream kube-mixin dashboards directly
defaultDashboardsEnabled: false
grafana.ini:
server:
enable_gzip: true
analytics:
check_for_updates: false
security:
disable_gravatar: true
cookie_secure: true
strict_transport_security: true
#auth:
# disable_login_form: true
# disable_signout_menu: true
auth.anonymous:
enabled: true
dashboards:
min_refresh_interval: "30s"
2021-12-03 21:16:22 +00:00
default_home_dashboard_path: '/tmp/dashboards/KubeZero/home.json'
alerting:
enabled: false
date_formats:
default_timezone: UTC
sidecar:
dashboards:
searchNamespace: ALL
provider:
foldersFromFilesStructure: true
# For the gunzip script
extraContainerVolumes:
- name: script-volume
configMap:
name: script-configmap
defaultMode: 0777
#persistence:
# enabled: true
# size: 4Gi
# storageClassName: ebs-sc-gp2-xfs
#deploymentStrategy:
# type: Recreate
2020-08-03 15:08:16 +00:00
plugins:
- grafana-piechart-panel
service:
portName: http-grafana
initChownData:
enabled: false
testFramework:
enabled: false
# Assign state metrics to control plane
kube-state-metrics:
podSecurityPolicy:
enabled: false
tolerations:
- key: node-role.kubernetes.io/master
effect: NoSchedule
nodeSelector:
node-role.kubernetes.io/control-plane: ""
2020-08-03 16:15:12 +00:00
# Todo
alertmanager:
enabled: false
2021-12-03 21:16:22 +00:00
config:
global:
resolve_timeout: 5m
route:
group_by: ['severity', 'clusterName']
group_wait: 30s
group_interval: 5m
repeat_interval: 6h
alertmanagerSpec:
# externalUrl:
logFormat: json
2020-08-03 16:15:12 +00:00
# for none AWS cluster or if SNS AlertHub should NOT be used, remove sns-forwarder by overwriting containers eg.:
# containers: []
# Add sns-forwarder to AlertManager pod, see: https://github.com/DataReply/alertmanager-sns-forwarder
# uses the alertmanager serviceaccount to assume IAM role, requires annotation: kubezero.com/sns_forwarder_arn_prefix to point to SNSAlertHub
# eg: "arn:aws:sns:eu-central-1:123456789012:"
2021-08-25 13:59:17 +00:00
containers:
- name: alertmanager-sns-forwarder
image: datareply/alertmanager-sns-forwarder:latest
imagePullPolicy: Always
env:
- name: SNS_FORWARDER_ARN_PREFIX
valueFrom:
fieldRef:
fieldPath: metadata.annotations['kubezero.com/sns_forwarder_ARN_PREFIX']
- name: AWS_ROLE_ARN
valueFrom:
fieldRef:
fieldPath: metadata.annotations['kubezero.com/sns_forwarder_AWS_ROLE_ARN']
- name: AWS_WEB_IDENTITY_TOKEN_FILE
value: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token"
- name: AWS_STS_REGIONAL_ENDPOINTS
value: regional
volumeMounts:
- name: aws-token
mountPath: "/var/run/secrets/sts.amazonaws.com/serviceaccount/"
readOnly: true
resources:
limits:
memory: 64Mi
cpu: 100m
requests:
cpu: 25m
memory: 32Mi
ports:
- containerPort: 9087
name: webhook-port
livenessProbe:
httpGet:
path: /health
port: webhook-port
initialDelaySeconds: 30
timeoutSeconds: 10
readinessProbe:
httpGet:
path: /health
port: webhook-port
initialDelaySeconds: 10
timeoutSeconds: 10
volumes:
- name: aws-token
projected:
sources:
- serviceAccountToken:
path: token
expirationSeconds: 86400
audience: "sts.amazonaws.com"
# Metrics adapter
prometheus-adapter:
enabled: true
2021-01-20 15:31:00 +00:00
logLevel: 1
2020-08-03 19:52:57 +00:00
prometheus:
2020-10-10 01:41:43 +00:00
url: http://metrics-kube-prometheus-st-prometheus
tolerations:
- key: node-role.kubernetes.io/master
effect: NoSchedule
nodeSelector:
node-role.kubernetes.io/control-plane: ""
2020-08-03 12:16:48 +00:00
# Basic rules for HPA to work replacing heaptster, taken from kube-prometheus project
# https://github.com/coreos/kube-prometheus/blob/master/manifests/prometheus-adapter-configMap.yaml
2020-08-03 17:53:18 +00:00
rules:
2020-08-03 20:29:24 +00:00
default: false
2020-08-03 17:53:18 +00:00
resource:
cpu:
containerQuery: sum(irate(container_cpu_usage_seconds_total{<<.LabelMatchers>>,container!="POD",container!="",pod!=""}[5m])) by (<<.GroupBy>>)
nodeQuery: sum(1 - irate(node_cpu_seconds_total{mode="idle"}[5m]) * on(namespace, pod) group_left(node) node_namespace_pod:kube_pod_info:{<<.LabelMatchers>>}) by (<<.GroupBy>>)
2020-08-03 17:53:18 +00:00
resources:
overrides:
2020-10-21 11:51:15 +00:00
node:
2020-08-03 17:53:18 +00:00
resource: node
namespace:
resource: namespace
pod:
resource: pod
containerLabel: container
memory:
2020-10-21 11:51:15 +00:00
containerQuery: sum(container_memory_working_set_bytes{<<.LabelMatchers>>,container!="POD",container!="",pod!=""}) by (<<.GroupBy>>)
2020-10-21 12:05:08 +00:00
nodeQuery: sum(node_memory_MemTotal_bytes{job="node-exporter",<<.LabelMatchers>>} - node_memory_MemAvailable_bytes{job="node-exporter",<<.LabelMatchers>>}) by (<<.GroupBy>>)
2020-08-03 17:53:18 +00:00
resources:
overrides:
2020-10-21 11:51:15 +00:00
node:
2020-08-03 17:53:18 +00:00
resource: node
namespace:
resource: namespace
pod:
resource: pod
containerLabel: container
window: 5m
# Pushgateway
prometheus-pushgateway:
enabled: false
serviceMonitor:
enabled: true
istio:
grafana:
enabled: false
ipBlocks: []
url: ""
gateway: istio-ingress/ingressgateway
2020-12-02 12:30:17 +00:00
destination: metrics-grafana
prometheus:
enabled: false
ipBlocks: []
url: ""
gateway: istio-ingress/ingressgateway
2020-12-02 12:30:17 +00:00
destination: metrics-kube-prometheus-st-prometheus
alertmanager:
enabled: false
ipBlocks: []
url: ""
gateway: istio-ingress/ingressgateway
2020-12-02 12:30:17 +00:00
destination: metrics-kube-prometheus-st-alertmanager