Philip Gough
586fc87b81
make: Lower the threshold for the security scan to account for documented exceptions
2022-01-24 10:58:08 +00:00
Philip Gough
b924650344
docs: Add details about security scanning of manifests and exceptions
2022-01-24 10:58:08 +00:00
Philip Gough
02f1550261
ci: Add exceptions for node-exporter to kubescape config
2022-01-24 10:45:52 +00:00
Philip Gough
9c9f73f6c5
ci: Add check for security scan of manifest
2022-01-17 16:08:19 +00:00
Philip Gough
e286f74647
make: Target for security scan
2022-01-17 16:08:19 +00:00
Philip Gough
b8a05f4197
scripts: Adds kubescape to tooling
...
https://github.com/armosec/kubescape allows us to
run a scan of the generated manifests and assess the
security risk.
2022-01-17 16:08:19 +00:00
Philip Gough and GitHub
d2cae36f84
Merge pull request #1586 from PhilipGough/go-version-bump
...
build: Bump to build with Go 1.17
2022-01-17 16:08:00 +00:00
Philip Gough
1344092b36
build: Bump to build with Go 1.17
2022-01-17 15:18:50 +00:00
Philip Gough and GitHub
f2559e0ced
Merge pull request #1566 from primeroz/fix/do-not-add-namespace-to-clusterwide-resources
...
Hide namespace for prometheus clusterRole and clusterRolebinding
2022-01-10 11:19:31 +00:00
Philip Gough and GitHub
136b818c9a
Merge pull request #1560 from prometheus-operator/automated-updates-main
...
[bot] [main] Automated version update
2021-12-20 14:20:21 +00:00
Philip Gough and GitHub
cf0d4aa45c
Merge pull request #1558 from prometheus-operator/automated-updates-main
...
[bot] [main] Automated version update
2021-12-20 09:06:50 +00:00
Philip Gough and GitHub
1f8a45398b
Merge pull request #1555 from PhilipGough/0.10-follow-up
...
release-0.10 follow up
2021-12-18 10:52:27 +00:00
Philip Gough
56aa1a4dc4
make: validate against k8s 1.23.x
2021-12-17 12:40:50 +00:00
Philip Gough
914de7bb7a
ci: include release-0.10
2021-12-17 12:37:30 +00:00
Philip Gough
2a135c38d7
jsonnet: Track latest deps
2021-12-17 12:31:25 +00:00
Philip Gough and GitHub
4d6f45c5f0
Merge pull request #1552 from PhilipGough/release-0.10-prep
...
Prep for release-0.10
2021-12-17 12:24:39 +00:00
Philip Gough
c6dc6c7d1e
docs: 0.10 changelog
2021-12-17 11:38:05 +00:00
Philip Gough
ded3f7bda8
Sync dependencies prior to release-0.10
2021-12-17 11:38:05 +00:00
Philip Gough
480cb2ced4
jsonnet: Pin deps for 0.10
2021-12-17 11:38:05 +00:00
Philip Gough
23b55e7a65
docs: Add release-0.10 to compatability matrix
2021-12-17 11:12:10 +00:00
Philip Gough
16bc5d63b3
jsonnet: Drop deprecated coredns_cache_misses_total
...
Deprecated via https://github.com/coredns/coredns/pull/4781
2021-12-16 18:07:14 +00:00
Philip Gough
1263e1cba3
jsonnet: Drop deprecated apiserver_longrunning_gauge and apiserver_registered_watchers metrics
...
Drop deprecated metric to fix failing test.
Dropped via https://github.com/kubernetes/kubernetes/pull/103793
2021-12-16 17:08:01 +00:00
Philip Gough
d5802ffe2d
ci: Bump k8s version and update compatability matrix
2021-12-16 17:07:38 +00:00
Philip Gough
574cdd4df9
make: generate assets
2021-11-26 09:18:26 +00:00
Philip Gough
c098df1c26
jsonnet: jb update
2021-11-26 09:08:00 +00:00
Philip Gough
58e2c131c2
Keep 'container_fs_.*' metrics from cAdvisor
2021-09-27 17:13:00 +01:00
Philip Gough
56f96e6389
Adjust dropped metrics from cAdvisor
...
This change drops pod-centric metrics without a non-empty 'container' label.
Previously we dropped pod-centric metrics without a (pod, namespace) label set
however these can be critical for debugging.
2021-09-24 17:24:01 +01:00
Philip Gough
7b32afb8aa
jsonnet: Support scraping the config-reloader for AlertManager and Prometheus
2021-09-22 14:54:12 +01:00
Philip Gough
463ad065d3
jsonnet: Drop cAdvisor metrics with no (pod, namespace) labels while preserving ability to monitor system services resource usage
...
The following provides a description and cardinality estimation based on the tests in a local cluster:
container_blkio_device_usage_total - useful for containers, but not for system services (nodes*disks*services*operations*2)
container_fs_.* - add filesystem read/write data (nodes*disks*services*4)
container_file_descriptors - file descriptors limits and global numbers are exposed via (nodes*services)
container_threads_max - max number of threads in cgroup. Usually for system services it is not limited (nodes*services)
container_threads - used threads in cgroup. Usually not important for system services (nodes*services)
container_sockets - used sockets in cgroup. Usually not important for system services (nodes*services)
container_start_time_seconds - container start. Possibly not needed for system services (nodes*services)
container_last_seen - Not needed as system services are always running (nodes*services)
container_spec_.* - Everything related to cgroup specification and thus static data (nodes*services*5)
2021-07-20 12:50:02 +01:00
Philip Gough
e38bc756a4
ci: Harden action to wait for kind cluster readiness
2021-07-05 09:56:28 +01:00
Philip Gough
3a4e292aab
Sync with kubernetes-mixin
2021-06-22 11:11:40 +01:00
Philip Gough
