easylinux/kube-prometheus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,593 Commits 19 Branches 14 Tags
16e12ce24bd194ff7521d1a8ea82715ec8f1f1d8
Commit Graph
41 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Philip GoughandGitHub 373e2b415b Merge pull request #1678 from dnsmichi/docs-mon-namespaces-0-8-values 
Docs: Use `values` config in 'Monitoring other namespaces' example
 2022-03-14 09:52:31 +00:00
Philip GoughandGitHub 15664a1983 Merge pull request #1657 from ArthurSens/drop-dashboard-example 
Add drop dashboards example
 2022-02-24 09:16:37 +00:00
Philip GoughandGitHub 53542d5cce Merge pull request #1637 from ahysing/custom-requests-kube-rbacc-proxy-self 
Added custom overrides for kube-rbac-proxy-self.
 2022-02-18 16:32:30 +00:00
Philip Gough 2918583c81 node_exporter: Add priorityClassName as system-cluster-critical 2022-02-17 12:11:31 +00:00
Philip GoughandGitHub 7c715c8126 Merge pull request #1624 from ArthurSens/grafana-volume 
Add extra-volume mount for plugins downloads
 2022-02-14 11:15:14 +00:00
Philip GoughandGitHub bb85080094 Merge pull request #1634 from PhilipGough/docs 
Update apiVersion from deprecated RBAC
 2022-02-14 09:42:07 +00:00
Philip Gough 41a5ef110d Update apiVersion from deprecated RBAC 2022-02-10 17:42:04 +00:00
Philip Gough 58fa27a40e Update PodMonitor for kube-proxy 2022-02-10 09:45:27 +00:00
Philip Gough ea7141ffe2 docs: Update broken link 2022-01-27 10:52:09 +00:00
Philip GoughandGitHub 3521698843 Merge pull request #1590 from PhilipGough/kubescape-1 
Document security audit exceptions for node-exporter
 2022-01-27 09:59:22 +00:00
Philip Gough 586fc87b81 make: Lower the threshold for the security scan to account for documented exceptions 2022-01-24 10:58:08 +00:00
Philip Gough b924650344 docs: Add details about security scanning of manifests and exceptions 2022-01-24 10:58:08 +00:00
Philip Gough 02f1550261 ci: Add exceptions for node-exporter to kubescape config 2022-01-24 10:45:52 +00:00
Philip Gough 9c9f73f6c5 ci: Add check for security scan of manifest 2022-01-17 16:08:19 +00:00
Philip Gough e286f74647 make: Target for security scan 2022-01-17 16:08:19 +00:00
Philip Gough b8a05f4197 scripts: Adds kubescape to tooling 
https://github.com/armosec/kubescape allows us to
run a scan of the generated manifests and assess the
security risk.
 2022-01-17 16:08:19 +00:00
Philip GoughandGitHub d2cae36f84 Merge pull request #1586 from PhilipGough/go-version-bump 
build: Bump to build with Go 1.17
 2022-01-17 16:08:00 +00:00
Philip Gough 1344092b36 build: Bump to build with Go 1.17 2022-01-17 15:18:50 +00:00
Philip GoughandGitHub f2559e0ced Merge pull request #1566 from primeroz/fix/do-not-add-namespace-to-clusterwide-resources 
Hide namespace for prometheus clusterRole and clusterRolebinding
 2022-01-10 11:19:31 +00:00
Philip GoughandGitHub 136b818c9a Merge pull request #1560 from prometheus-operator/automated-updates-main 
[bot] [main] Automated version update
 2021-12-20 14:20:21 +00:00
Philip GoughandGitHub cf0d4aa45c Merge pull request #1558 from prometheus-operator/automated-updates-main 
[bot] [main] Automated version update
 2021-12-20 09:06:50 +00:00
Philip GoughandGitHub 1f8a45398b Merge pull request #1555 from PhilipGough/0.10-follow-up 
release-0.10 follow up
 2021-12-18 10:52:27 +00:00
Philip Gough 56aa1a4dc4 make: validate against k8s 1.23.x 2021-12-17 12:40:50 +00:00
Philip Gough 914de7bb7a ci: include release-0.10 2021-12-17 12:37:30 +00:00
Philip Gough 2a135c38d7 jsonnet: Track latest deps 2021-12-17 12:31:25 +00:00
Philip GoughandGitHub 4d6f45c5f0 Merge pull request #1552 from PhilipGough/release-0.10-prep 
Prep for release-0.10
 2021-12-17 12:24:39 +00:00
Philip Gough c6dc6c7d1e docs: 0.10 changelog 2021-12-17 11:38:05 +00:00
Philip Gough ded3f7bda8 Sync dependencies prior to release-0.10 2021-12-17 11:38:05 +00:00
Philip Gough 480cb2ced4 jsonnet: Pin deps for 0.10 2021-12-17 11:38:05 +00:00
Philip Gough 23b55e7a65 docs: Add release-0.10 to compatability matrix 2021-12-17 11:12:10 +00:00
Philip Gough 16bc5d63b3 jsonnet: Drop deprecated coredns_cache_misses_total 
Deprecated via https://github.com/coredns/coredns/pull/4781
 2021-12-16 18:07:14 +00:00
Philip Gough 1263e1cba3 jsonnet: Drop deprecated apiserver_longrunning_gauge and apiserver_registered_watchers metrics 
Drop deprecated metric to fix failing test.

Dropped via https://github.com/kubernetes/kubernetes/pull/103793
 2021-12-16 17:08:01 +00:00
Philip Gough d5802ffe2d ci: Bump k8s version and update compatability matrix 2021-12-16 17:07:38 +00:00
Philip Gough 574cdd4df9 make: generate assets 2021-11-26 09:18:26 +00:00
Philip Gough c098df1c26 jsonnet: jb update 2021-11-26 09:08:00 +00:00
Philip Gough 58e2c131c2 Keep 'container_fs_.*' metrics from cAdvisor 2021-09-27 17:13:00 +01:00
Philip Gough 56f96e6389 Adjust dropped metrics from cAdvisor 
This change drops pod-centric metrics without a non-empty 'container' label.

Previously we dropped pod-centric metrics without a (pod, namespace) label set
however these can be critical for debugging.
 2021-09-24 17:24:01 +01:00
Philip Gough 7b32afb8aa jsonnet: Support scraping the config-reloader for AlertManager and Prometheus 2021-09-22 14:54:12 +01:00
Philip Gough 463ad065d3 jsonnet: Drop cAdvisor metrics with no (pod, namespace) labels while preserving ability to monitor system services resource usage 
The following provides a description and cardinality estimation based on the tests in a local cluster:

container_blkio_device_usage_total - useful for containers, but not for system services (nodes*disks*services*operations*2)
container_fs_.*                    - add filesystem read/write data (nodes*disks*services*4)
container_file_descriptors         - file descriptors limits and global numbers are exposed via (nodes*services)
container_threads_max              - max number of threads in cgroup. Usually for system services it is not limited (nodes*services)
container_threads                  - used threads in cgroup. Usually not important for system services (nodes*services)
container_sockets                  - used sockets in cgroup. Usually not important for system services (nodes*services)
container_start_time_seconds       - container start. Possibly not needed for system services (nodes*services)
container_last_seen                - Not needed as system services are always running (nodes*services)
container_spec_.*                  - Everything related to cgroup specification and thus static data (nodes*services*5)
 2021-07-20 12:50:02 +01:00
Philip Gough e38bc756a4 ci: Harden action to wait for kind cluster readiness 2021-07-05 09:56:28 +01:00
Philip Gough 3a4e292aab Sync with kubernetes-mixin 2021-06-22 11:11:40 +01:00