shpaq/auricom-home-cluster
1
0
Fork 0
mirror of https://github.com/auricom/home-cluster.git synced 2025-09-17 18:24:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

🔧 embed service monitors into helmreleases

Browse Source
This commit is contained in:
auricom
2022-10-20 07:02:06 +02:00
parent 19cf4aa3ff
commit f0960ef114
18 changed files with 78 additions and 83 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
cluster/apps/authentication/authelia/config/configuration.yml
View File

@@ -32,12 +32,15 @@ access_control:
subject: ["group:admins", "group:users"]
networks:
- private
# Deny public resources
- domain: ["navidrome.${SECRET_CLUSTER_DOMAIN}"]
resources: ["^/metrics.*$"]
policy: deny
# Two factors auth for WAN
- domain:
- "*.${SECRET_CLUSTER_DOMAIN}"
subject: ["group:admins", "group:users"]
policy: two_factor
identity_providers:
oidc:
cors:

8
cluster/apps/authentication/authelia/helm-release.yaml
View File

@@ -47,6 +47,14 @@ spec:
metrics:
enabled: true
port: 8080
monitor:
enabled: true
endpoints:
- port: metrics
scheme: http
path: /metrics
interval: 1m
scrapeTimeout: 10s
ingress:
main:
enabled: true

1
cluster/apps/authentication/authelia/kustomization.yaml
View File

@@ -5,7 +5,6 @@ namespace: default
resources:
- secret.sops.yaml
- helm-release.yaml
- service-monitor.yaml
patchesStrategicMerge:
- patches/env.yaml
- patches/postgres.yaml

19
cluster/apps/authentication/authelia/service-monitor.yaml
View File

@@ -1,19 +0,0 @@
---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: &app authelia
namespace: default
labels: &labels
app.kubernetes.io/instance: *app
app.kubernetes.io/name: *app
spec:
selector:
matchLabels:
<<: *labels
endpoints:
- port: metrics
scheme: http
path: /metrics
interval: 1m
scrapeTimeout: 10s

2
cluster/apps/home-automation/zigbee2mqtt-exporter/helm-release.yaml
View File

@@ -46,6 +46,8 @@ spec:
ports:
http:
port: *port
monitor:
enabled: true
podSecurityContext:
runAsUser: 1000
runAsGroup: 1000

2
cluster/apps/home-automation/zigbee2mqtt-exporter/kustomization.yaml
View File

@@ -3,4 +3,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- helm-release.yaml
- prometheus.yaml
- prometheus-rule.yaml

19
cluster/apps/home-automation/zigbee2mqtt-exporter/prometheus.yaml → cluster/apps/home-automation/zigbee2mqtt-exporter/prometheus-rule.yaml
View File

@@ -1,24 +1,5 @@
---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: &app zigbee2mqtt-exporter
namespace: default
labels: &labels
app.kubernetes.io/instance: *app
app.kubernetes.io/name: *app
spec:
selector:
matchLabels:
<<: *labels
endpoints:
- port: http
scheme: http
path: /metrics
interval: 1m
scrapeTimeout: 10s
---
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
name: zigbee2mqtt-exporter

2
cluster/apps/home-automation/zwavejs2mqtt/helm-release.yaml
View File

@@ -40,6 +40,8 @@ spec:
websocket:
enabled: true
port: 3000
monitor:
enabled: true
probes:
liveness: &probes
enabled: true

11
cluster/apps/kube-tools/intel-gpu-exporter/helm-release.yaml
View File

@@ -35,6 +35,17 @@ spec:
ports:
http:
port: 8080
monitor:
enabled: true
endpoints:
- port: http
scheme: http
path: /metrics
interval: 1m
scrapeTimeout: 10s
relabelings:
- sourceLabels: [__meta_kubernetes_pod_node_name]
targetLabel: node
securityContext:
privileged: true
affinity:

1
cluster/apps/kube-tools/intel-gpu-exporter/kustomization.yaml
View File

@@ -3,4 +3,3 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- helm-release.yaml
- service-monitor.yaml

21
cluster/apps/kube-tools/intel-gpu-exporter/service-monitor.yaml
View File

@@ -1,21 +0,0 @@
---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: &app intel-gpu-exporter
namespace: default
labels: &labels
app.kubernetes.io/instance: *app
app.kubernetes.io/name: *app
spec:
selector:
matchLabels:
<<: *labels
endpoints:
- port: http
interval: 1m
scrapeTimeout: 10s
path: /metrics
relabelings:
- sourceLabels: [__meta_kubernetes_pod_node_name]
targetLabel: node

3
cluster/apps/media-servers/navidrome/helm-release.yaml
View File

@@ -32,6 +32,7 @@ spec:
ND_LOGLEVEL: info
ND_MUSICFOLDER: /mnt/storage/music/Artistes
ND_PORT: &port 80
ND_PROMETHEUS_ENABLED: "true"
ND_REVERSEPROXYUSERHEADER: "Remote-User"
ND_REVERSEPROXYWHITELIST: "${NET_POD_CIDR}"
ND_SCANSCHEDULE: "@every 1h"
@@ -41,6 +42,8 @@ spec:
ports:
http:
port: *port
monitor:
enabled: true
ingress:
main:
enabled: true

8
cluster/apps/networking/smtp-relay/helm-release.yaml
View File

@@ -48,6 +48,14 @@ spec:
metrics:
enabled: true
port: 9749
monitor:
enabled: true
endpoints:
- port: metrics
scheme: http
path: /metrics
interval: 1m
scrapeTimeout: 10s
persistence:
config:
enabled: true

1
cluster/apps/networking/smtp-relay/kustomization.yaml
View File

@@ -4,7 +4,6 @@ kind: Kustomization
resources:
- helm-release.yaml
- secret.sops.yaml
- service-monitor.yaml
namespace: default
configMapGenerator:
- name: smtp-relay

19
cluster/apps/networking/smtp-relay/service-monitor.yaml
View File

@@ -1,19 +0,0 @@
---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: &app smtp-relay
namespace: default
labels: &labels
app.kubernetes.io/instance: *app
app.kubernetes.io/name: *app
spec:
selector:
matchLabels:
<<: *labels
endpoints:
- port: metrics
scheme: http
path: /metrics
interval: 1m
scrapeTimeout: 10s

2
cluster/core/flux-system/kustomization.yaml
View File

@@ -3,3 +3,5 @@ kind: Kustomization
resources:
- notifications
- webhook
- pod-monitor.yaml
- prometheus-rule.yaml

19
cluster/core/flux-system/pod-monitor.yaml Normal file
View File

@@ -0,0 +1,19 @@
---
apiVersion: monitoring.coreos.com/v1
kind: PodMonitor
metadata:
name: flux-system
namespace: flux-system
labels:
app.kubernetes.io/part-of: flux
spec:
namespaceSelector:
matchNames:
- flux-system
selector:
matchExpressions:
- key: app
operator: Exists
podMetricsEndpoints:
- port: http-prom
honorLabels: true

18
cluster/core/flux-system/prometheus-rule.yaml Normal file
View File

@@ -0,0 +1,18 @@
---
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
name: flux
namespace: flux-system
spec:
groups:
- name: flux.rules
rules:
- alert: FluxComponentAbsent
annotations:
summary: Flux component has disappeared from Prometheus target discovery.
expr: |
absent(up{job=~".*flux-system.*"} == 1)
for: 15m
labels:
severity: critical