easylinux/kube-prometheus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,550 Commits 19 Branches 14 Tags
ac7f6b42abfb354c38680380a218987e4ac14d91
Commit Graph
68 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Arthur Silva SensandGitHub 768e882ce8 Merge pull request #1633 from prometheus-operator/automated-updates-main 
[bot] [main] Automated version update
 2022-02-10 16:14:00 +00:00
Arthur Silva SensandGitHub 89184da7c6 Merge pull request #1622 from prometheus-operator/automated-updates-main 
[bot] [main] Automated version update
 2022-02-07 08:11:54 +00:00
Arthur Silva SensandGitHub db61b3e18e Merge pull request #1591 from paulfantom/automountServiceAccountToken 
disable injecting unnecessary variables allowing access to k8s API
 2022-02-05 18:28:33 +00:00
ArthurSens ce98a61205 Loosen Kubescape threshold 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2022-02-04 10:13:07 +00:00
ArthurSens fb92a6dbe0 Document better why we use hostPort on node-exporter 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2022-02-03 15:47:43 +00:00
Arthur Silva SensandGitHub 755d27bb46 Merge pull request #1610 from ArthurSens/as/linux-hardening 
Drop Linux capabilities
 2022-02-02 12:56:21 +00:00
Arthur Silva SensandGitHub 21e26c808a Merge pull request #1609 from paulfantom/fix-1602 
jsonnet: filter out kube-proxy alerts when kube-proxy is disabled
 2022-02-01 17:23:51 +00:00
Arthur Silva SensandGitHub 931af3241d Drop Linux capabilities 
Signed-off-by: GitHub <noreply@github.com>
 2022-02-01 09:25:21 +00:00
ArthurSens e5610b2e8d Address FIXME 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2022-01-31 17:25:00 +00:00
Arthur Silva SensandGitHub 2e5337ee8e Merge pull request #1607 from prometheus-operator/automated-updates-main 
[bot] [main] Automated version update
 2022-01-31 17:09:07 +00:00
Arthur Silva SensandGitHub b113c45a18 Merge pull request #1600 from ArthurSens/readOnlyRootFilesystem 2022-01-28 11:59:47 +00:00
ArthurSens 98664db925 Adjust Kubescape threshold 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2022-01-27 16:05:39 +00:00
Arthur Silva Sens 57c46a2861 components/*: Forbid write access to root filesystem 
Signed-off-by: GitHub <noreply@github.com>
 2022-01-27 16:03:58 +00:00
ArthurSens f0d9be27b3 workflows/versions: Enable auto-merge 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2022-01-25 15:30:57 +00:00
Arthur Silva SensandGitHub 4d004393e1 Merge pull request #1593 from prometheus-operator/as/forbid-privilege-scalation 
Explicitly declare allowPrivilegeEscalation to false in all components
 2022-01-24 10:38:33 +00:00
Arthur Silva SensandGitHub 2d02121731 kubescape: Adjust risk threshold 
Signed-off-by: GitHub <noreply@github.com>
 2022-01-24 10:31:48 +00:00
Arthur Silva SensandGitHub b60b302499 Explicitly declare allowPrivilegeEscalation to false 
Although containers that do not run as privileged already have this set to false by kubernetes
Kubespace [asks us](https://hub.armo.cloud/docs/c-0016) to explicitly declare it to false where not needed.

Signed-off-by: Arthur Silva Sens <arthursens2005@gmail.com>
 2022-01-24 10:31:43 +00:00
Arthur Silva SensandGitHub 90ad3c99fc Merge pull request #1594 from prometheus-operator/automated-updates-main 
[bot] [main] Automated version update
 2022-01-24 08:31:53 +00:00
Arthur Silva SensandGitHub f7d3019a8f Merge pull request #1584 from PhilipGough/fix-1466 
Scan generated manifests with kubescape in CI
 2022-01-18 11:51:29 -03:00
ArthurSens f4a5ff3e3b addon/podsecuritypolicies: Add projected volumes permission 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2022-01-04 12:24:05 +00:00
ArthurSens 049882b85b docs/customization: Add prometheus-agent example 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-12-14 15:07:00 +00:00
Arthur Silva SensandGitHub f7c9de918c Merge pull request #1534 from junotx/k8s-rule-group 
jsonnet: fix default empty groups for k8s PrometheusRule
 2021-12-03 09:39:23 -03:00
ArthurSens d60c5f6b69 examples/prometheus-agent: Hide ruleSelector 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-11-30 17:24:34 +00:00
ArthurSens 6437e1414a examples/prometheus-agent: Override agent-only flags 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-11-30 17:13:12 +00:00
Arthur Silva SensandGitHub 5885e2a332 Merge pull request #1502 from paulfantom/manifests 2021-11-30 06:50:14 -03:00
Arthur Silva SensandGitHub 559bc87b35 Merge pull request #1528 from prometheus-operator/automated-updates-main 
[bot] [main] Automated version update
 2021-11-29 20:46:24 -03:00
Arthur Silva SensandGitHub 8ed8f70148 Merge pull request #1521 from paulfantom/recommend-server-side-apply 
*: point to using server-side apply with kubectl as a solution to large CRDs
 2021-11-29 10:05:39 -03:00
Arthur Silva SensandGitHub fcd8d01fa1 Merge pull request #1506 from ArthurSens/as/split-doc-customization 
docs/customizations: Move customization examples to dedicated folder
 2021-11-22 18:25:56 -03:00
ArthurSens af00060d9c docs/customizations: Move customization examples to dedicated folder 
With the objective of improving our README, customization examples are being moved to a dedicated folder under `docs/`.

Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-11-18 18:57:22 +00:00
ArthurSens 42e7df4d70 jsonnet/addons/strip-limits: Simplify logic 
Since `release-0.8` resources has become a first-class object to all components of kube-prometheus. Therefore, we're simplifying this addon to reflect those changes.

Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-11-15 14:38:15 +00:00
Arthur Silva SensandGitHub 310a74abd2 Merge pull request #1489 from paulfantom/stale-bugs 
do not label bugs as stale
 2021-11-09 11:57:13 -03:00
ArthurSens 25d5f86c80 examples/prometheus-agent: Fix broken configurations 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-11-06 20:52:35 +00:00
Arthur Silva SensandGitHub e076461db9 Merge pull request #1481 from paulfantom/stale 
.github: introduce stale bot
 2021-11-06 16:21:30 -03:00
Arthur Silva SensandGitHub 31d86b7946 Merge pull request #1475 from paulfantom/fields-convention 
jsonnet: establish convention for components default fields
 2021-11-03 14:42:08 -03:00
Arthur Silva SensandGitHub 951b90ee29 Merge pull request #1461 from prometheus-operator/automated-updates-main 
[bot] [main] Automated version update
 2021-10-25 11:09:57 -03:00
Arthur Silva SensandGitHub 701e2970fa Merge pull request #1455 from paulfantom/do-not-hide 
jsonnet: do not hide prometheus object
 2021-10-24 20:52:31 -03:00
Arthur Silva SensandGitHub e5822ec679 Merge pull request #1457 from paulfantom/fmt 
Formatting fix
 2021-10-24 20:51:11 -03:00
Arthur Silva SensandGitHub ba20f92a0f Merge pull request #1447 from arajkumar/fix-typo-in-gh-actions 
Fix typo in jsonnet dependency upgrade GH actions
 2021-10-19 08:58:27 -03:00
Arthur Silva SensandGitHub ade7f0d2f1 Merge pull request #1430 from prometheus-operator/automated-updates-main 
[bot] [main] Automated version update
 2021-10-11 21:33:54 -03:00
Arthur Silva SensandGitHub 3eec2b6d34 Parallelize e2e tests 
Signed-off-by: GitHub <noreply@github.com>
 2021-10-11 23:36:20 +00:00
Arthur Silva SensandGitHub 16e3663f06 Merge pull request #1417 from prometheus-operator/automated-updates-main 
[bot] [main] Automated version update
 2021-10-04 09:14:00 -03:00
ArthurSens 4fe501d7f4 Improve docs for opening Gitpod workspaces 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-09-30 21:48:44 +00:00
Arthur Silva SensandGitHub 6239bc017a Better ephemeral workspace support with Codespaces 
Signed-off-by: GitHub <noreply@github.com>
 2021-09-30 21:00:50 +00:00
ArthurSens 57e3af70dc Fix jsonnet extension 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-09-30 19:19:18 +00:00
Arthur Silva SensandGitHub 9e83b3cbd0 Add e2e tests for Grafana deployment 
Signed-off-by: Arthur Sens <arthursens2005@gmail.com>
 2021-09-30 18:09:21 +00:00
Arthur Silva SensandGitHub 43f7268853 Merge pull request #1373 from spasche/always-generate-grafana-config 
Always generate grafana-config secret
 2021-09-16 09:33:03 -03:00
Arthur Silva SensandGitHub eeb7c7125d Merge pull request #1371 from dnsmichi/patch-1 
Fix import path in 'monitoring other namespaces' docs
 2021-09-09 16:47:10 -03:00
Arthur Silva SensandGitHub ae12388b33 Merge pull request #1256 from surik/update-kubernetes-mixin 
Update kubernetes-mixin
 2021-07-14 19:56:35 -03:00
Arthur Silva SensandGitHub 8396c697fd Merge pull request #1212 from sanglt/main 
Fix ingress path rules for networking.k8s.io/v1
 2021-06-16 20:58:18 -03:00
Arthur Silva SensandGitHub 071b39477a Merge pull request #1213 from metalmatze/blackbox-exporter-psp 
Fix name for blackbox-exporter PodSecurityPolicy
 2021-06-16 08:15:16 -03:00
ArthurSens b7ac30704e Run k3s inside gitpod and deploy kube-prometheus. 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-06-15 13:29:06 +00:00
ArthurSens f643955034 Update alertmanager mixin 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-06-08 18:19:23 +00:00
ArthurSens b043054974 Add githook to gitpod.yaml that validates fmt and manifests 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-04-16 19:49:10 +00:00
ArthurSens 72b742d7e8 Regenerate manifests 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-04-16 18:06:47 +00:00
ArthurSens c96c639ef1 Add summary 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-04-16 18:06:47 +00:00
ArthurSens 92016ef68d Change message to description 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-04-16 18:06:47 +00:00
ArthurSens cf4d2ad524 Setup gitpod config for ephemeral dev-environments 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-04-02 01:34:04 +00:00
ArthurSens 069f95148f Psp should be deployed at the same namespace as kube-prometheus stack 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-03-30 19:00:12 +00:00
ArthurSens c9b52c97f5 PodSecurityPolicy uses role instead of clusterRole where posible 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-03-25 20:59:49 +00:00
ArthurSens b7d7ba0271 Use node-exporter defaults.port on psp 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-03-18 20:57:48 +00:00
ArthurSens 478a18a6a7 Turn alertmanager's and grafana's roles into clusterRoles 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-03-18 20:57:48 +00:00
ArthurSens e8abcd3dc9 Allow node-exporter to use hostPath volumes 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-03-18 20:57:48 +00:00
ArthurSens 98559a0f42 Allow kube-state-metrics to run as any user 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-03-18 20:57:48 +00:00
ArthurSens 1237843e62 Adds an addon for podSecurityPolicies 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-03-18 20:57:48 +00:00
ArthurSens 2fa7ef162f Add externalLabels on Prometheus defaults 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-03-18 18:36:10 +00:00
ArthurSens 5f06f0da5e managed-cluster addon to not fully override prometheus object, only what's necessary 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-03-12 17:55:40 +00:00
ArthurSens bb2971e874 Add runbook_url annotation for custom mixins 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-03-05 14:07:01 +00:00
ArthurSens e586afb280 Add runbook_url annotation to all alerts 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
 2021-03-05 13:39:40 +00:00