kube-prometheus: add more commentary to etcd.jsonnet
This commit is contained in:
@@ -5,9 +5,14 @@ local kp = (import 'kube-prometheus/kube-prometheus.libsonnet') +
|
|||||||
|
|
||||||
// Reference info: https://github.com/coreos/prometheus-operator/blob/master/contrib/kube-prometheus/README.md#static-etcd-configuration
|
// Reference info: https://github.com/coreos/prometheus-operator/blob/master/contrib/kube-prometheus/README.md#static-etcd-configuration
|
||||||
etcd+:: {
|
etcd+:: {
|
||||||
// Configure this to be the IP(s) to scrape - i.e. your etcd node(s) (use commans to separate multiple values).
|
// Configure this to be the IP(s) to scrape - i.e. your etcd node(s) (use commas to separate multiple values).
|
||||||
ips: ['127.0.0.1'],
|
ips: ['127.0.0.1'],
|
||||||
|
|
||||||
|
// Reference info:
|
||||||
|
// * https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#servicemonitorspec (has endpoints)
|
||||||
|
// * https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#endpoint (has tlsConfig)
|
||||||
|
// * https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#tlsconfig (has: caFile, certFile, keyFile, serverName, & insecureSkipVerify)
|
||||||
|
|
||||||
// Set these three variables to values that are valid to scrape etcd metrics with (check the apiserver container).
|
// Set these three variables to values that are valid to scrape etcd metrics with (check the apiserver container).
|
||||||
// Most likely these certificates are generated somewhere in an infrastructure repository, so using the jsonnet `importstr` function can
|
// Most likely these certificates are generated somewhere in an infrastructure repository, so using the jsonnet `importstr` function can
|
||||||
// be useful here. (Kube-aws stores these three files inside the credential folder.)
|
// be useful here. (Kube-aws stores these three files inside the credential folder.)
|
||||||
@@ -16,7 +21,7 @@ local kp = (import 'kube-prometheus/kube-prometheus.libsonnet') +
|
|||||||
clientKey: importstr '/path-on-your-work-machine/etcd-client.key',
|
clientKey: importstr '/path-on-your-work-machine/etcd-client.key',
|
||||||
clientCert: importstr '/path-on-your-work-machine/etcd-client.crt',
|
clientCert: importstr '/path-on-your-work-machine/etcd-client.crt',
|
||||||
|
|
||||||
// A valid name for the certificate
|
// A valid name for the certificate.
|
||||||
serverName: 'etcd.my-cluster.local',
|
serverName: 'etcd.my-cluster.local',
|
||||||
|
|
||||||
// TODO: enhance kube-prometheus-static-etcd.libsonnet to allow 'insecureSkipVerify: true' to be specified here (as an alternative to specifying a value for 'serverName').
|
// TODO: enhance kube-prometheus-static-etcd.libsonnet to allow 'insecureSkipVerify: true' to be specified here (as an alternative to specifying a value for 'serverName').
|
||||||
|
Reference in New Issue
Block a user