lbroudoux
7 years ago
2 changed files with 857 additions and 0 deletions
@ -0,0 +1,340 @@ |
|||||
|
apiVersion: v1 |
||||
|
kind: Template |
||||
|
labels: |
||||
|
template: grafana |
||||
|
metadata: |
||||
|
annotations: |
||||
|
description: |- |
||||
|
Grafana allows you to query, visualize, alert on and understand your metrics |
||||
|
no matter where they are stored. Create, explore, and share dashboards with |
||||
|
your team and foster a data driven culture. |
||||
|
openshift.io/display-name: Grafana |
||||
|
tags: instant-app |
||||
|
template.openshift.io/documentation-url: http://docs.grafana.org/ |
||||
|
template.openshift.io/long-description: A grafana distribution for OpenShift. |
||||
|
template.openshift.io/provider-display-name: Grafana |
||||
|
template.openshift.io/support-url: https://grafana.com/enterprise |
||||
|
name: grafana |
||||
|
parameters: |
||||
|
- description: The Docker image to use for the OAuth Proxy. |
||||
|
displayName: OAuth Proxy image |
||||
|
name: PROXY_IMAGE |
||||
|
value: registry.access.redhat.com/openshift3/oauth-proxy:v3.11 |
||||
|
required: true |
||||
|
|
||||
|
- description: The desired hostname of the route to the Grafana service. |
||||
|
displayName: Hostname of the Grafana Service |
||||
|
name: GRAFANA_HOSTNAME |
||||
|
required: false |
||||
|
|
||||
|
- description: The session secret for the proxy |
||||
|
name: SESSION_SECRET |
||||
|
generate: expression |
||||
|
from: "[a-zA-Z0-9]{43}" |
||||
|
required: true |
||||
|
|
||||
|
- description: The Grafana version to deploy |
||||
|
displayName: Grafana version |
||||
|
name: GRAFANA_CUSTOM_VERSION |
||||
|
value: 5.1.4 |
||||
|
required: true |
||||
|
|
||||
|
- description: The Grafana release to deploy, either 'stable', 'beta', 'master', 'custom' or 'redhat' |
||||
|
displayName: Grafana release |
||||
|
name: GRAFANA_RELEASE |
||||
|
value: master |
||||
|
required: true |
||||
|
|
||||
|
- description: The namespace used to deploy this template |
||||
|
displayName: Kubernetes Namespace |
||||
|
name: NAMESPACE |
||||
|
required: true |
||||
|
|
||||
|
- description: Volume size for the Grafana DB |
||||
|
displayName: Volume Size |
||||
|
name: GRAFANA_VOLUME_SIZE |
||||
|
value: "1Gi" |
||||
|
required: true |
||||
|
|
||||
|
objects: |
||||
|
- apiVersion: v1 |
||||
|
kind: PersistentVolumeClaim |
||||
|
metadata: |
||||
|
name: grafana |
||||
|
spec: |
||||
|
accessModes: |
||||
|
- ReadWriteOnce |
||||
|
resources: |
||||
|
requests: |
||||
|
storage: ${GRAFANA_VOLUME_SIZE} |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: Secret |
||||
|
metadata: |
||||
|
name: oauth-proxy |
||||
|
namespace: "${NAMESPACE}" |
||||
|
stringData: |
||||
|
session_secret: "${SESSION_SECRET}=" |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: ServiceAccount |
||||
|
metadata: |
||||
|
name: grafana |
||||
|
namespace: ${NAMESPACE} |
||||
|
annotations: |
||||
|
serviceaccounts.openshift.io/oauth-redirectreference.proxy: '{"kind":"OAuthRedirectReference","apiVersion":"v1","reference":{"kind":"Route","name":"grafana"}}' |
||||
|
secrets: |
||||
|
|
||||
|
- kind: ConfigMap |
||||
|
apiVersion: v1 |
||||
|
metadata: |
||||
|
name: grafana-config |
||||
|
namespace: ${NAMESPACE} |
||||
|
data: |
||||
|
grafana.ini: |- |
||||
|
[server] |
||||
|
http_addr = 127.0.0.1 |
||||
|
|
||||
|
[auth] |
||||
|
disable_login_form = true |
||||
|
disable_signout_menu = true |
||||
|
|
||||
|
[auth.basic] |
||||
|
enabled = false |
||||
|
|
||||
|
[auth.proxy] |
||||
|
enabled = true |
||||
|
header_name = X-Forwarded-User |
||||
|
|
||||
|
[users] |
||||
|
auto_assign_org = true |
||||
|
auto_assign_org_role = Admin |
||||
|
|
||||
|
[log] |
||||
|
mode = console |
||||
|
|
||||
|
- kind: ConfigMap |
||||
|
apiVersion: v1 |
||||
|
metadata: |
||||
|
name: grafana-datasources |
||||
|
namespace: ${NAMESPACE} |
||||
|
data: |
||||
|
prometheus.yaml: |- |
||||
|
apiVersion: 1 |
||||
|
datasources: |
||||
|
- name: prometheus |
||||
|
type: prometheus |
||||
|
access: proxy |
||||
|
url: http://prometheus:9090 |
||||
|
isDefault: false |
||||
|
version: 1 |
||||
|
editable: true |
||||
|
options: |
||||
|
path: '/usr/share/dashboards' |
||||
|
|
||||
|
- kind: ConfigMap |
||||
|
apiVersion: v1 |
||||
|
metadata: |
||||
|
name: grafana-dashboards |
||||
|
namespace: ${NAMESPACE} |
||||
|
data: |
||||
|
prometheus.yaml: |- |
||||
|
apiVersion: 1 |
||||
|
providers: |
||||
|
- name: 'default' |
||||
|
orgId: 1 |
||||
|
folder: '' |
||||
|
type: file |
||||
|
disableDeletion: false |
||||
|
updateIntervalSeconds: 300 |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: ImageStream |
||||
|
metadata: |
||||
|
labels: |
||||
|
build: grafana |
||||
|
namespace: ${NAMESPACE} |
||||
|
name: grafana |
||||
|
spec: |
||||
|
dockerImageRepository: docker.io/grafana/grafana |
||||
|
tags: |
||||
|
- name: stable |
||||
|
from: |
||||
|
kind: DockerImage |
||||
|
name: 'docker.io/grafana/grafana:5.1.4' |
||||
|
importPolicy: |
||||
|
scheduled: true |
||||
|
- name: beta |
||||
|
from: |
||||
|
kind: DockerImage |
||||
|
name: 'docker.io/grafana/grafana:5.2.0-beta3' |
||||
|
importPolicy: |
||||
|
scheduled: true |
||||
|
- name: master |
||||
|
from: |
||||
|
kind: DockerImage |
||||
|
name: 'docker.io/grafana/grafana:master' |
||||
|
importPolicy: |
||||
|
scheduled: true |
||||
|
- name: custom |
||||
|
from: |
||||
|
kind: DockerImage |
||||
|
name: 'docker.io/grafana/grafana:${GRAFANA_CUSTOM_VERSION}' |
||||
|
importPolicy: |
||||
|
scheduled: true |
||||
|
- name: redhat |
||||
|
from: |
||||
|
kind: DockerImage |
||||
|
name: 'registry.access.redhat.com/openshift3/grafana:v3.11' |
||||
|
importPolicy: |
||||
|
scheduled: true |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: DeploymentConfig |
||||
|
metadata: |
||||
|
labels: |
||||
|
app: grafana |
||||
|
name: grafana |
||||
|
namespace: ${NAMESPACE} |
||||
|
spec: |
||||
|
replicas: 1 |
||||
|
selector: |
||||
|
app: grafana |
||||
|
deploymentconfig: grafana |
||||
|
strategy: |
||||
|
activeDeadlineSeconds: 21600 |
||||
|
resources: {} |
||||
|
type: Recreate |
||||
|
template: |
||||
|
metadata: |
||||
|
creationTimestamp: null |
||||
|
labels: |
||||
|
app: grafana |
||||
|
deploymentconfig: grafana |
||||
|
spec: |
||||
|
containers: |
||||
|
- image: " " |
||||
|
imagePullPolicy: IfNotPresent |
||||
|
name: grafana |
||||
|
ports: |
||||
|
- containerPort: 3000 |
||||
|
protocol: TCP |
||||
|
resources: {} |
||||
|
securityContext: {} |
||||
|
terminationMessagePath: /dev/termination-log |
||||
|
volumeMounts: |
||||
|
- mountPath: /etc/grafana/ |
||||
|
name: grafana-config |
||||
|
- mountPath: /var/log/grafana/ |
||||
|
name: grafana-logs |
||||
|
- mountPath: /var/lib/grafana/ |
||||
|
name: grafana-storage |
||||
|
- mountPath: /etc/grafana/provisioning/datasources |
||||
|
name: grafana-datasources |
||||
|
- mountPath: /etc/grafana/provisioning/dashboards |
||||
|
name: grafana-dashboards |
||||
|
- image: ${PROXY_IMAGE} |
||||
|
imagePullPolicy: IfNotPresent |
||||
|
name: proxy |
||||
|
args: |
||||
|
- --provider=openshift |
||||
|
- --https-address=:8443 |
||||
|
- --http-address= |
||||
|
- --upstream=http://localhost:3000 |
||||
|
- --openshift-service-account=grafana |
||||
|
- '--openshift-sar={"resource": "namespaces", "verb": "get", "resourceName": "${NAMESPACE}", "namespace": "${NAMESPACE}"}' |
||||
|
- --tls-cert=/etc/tls/private/tls.crt |
||||
|
- --tls-key=/etc/tls/private/tls.key |
||||
|
- --client-secret-file=/var/run/secrets/kubernetes.io/serviceaccount/token |
||||
|
- --cookie-secret-file=/etc/proxy/secrets/session_secret |
||||
|
- --openshift-ca=/etc/pki/tls/cert.pem |
||||
|
- --openshift-ca=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt |
||||
|
ports: |
||||
|
- containerPort: 8443 |
||||
|
name: web |
||||
|
protocol: TCP |
||||
|
resources: {} |
||||
|
securityContext: {} |
||||
|
terminationMessagePath: /dev/termination-log |
||||
|
terminationMessagePolicy: File |
||||
|
volumeMounts: |
||||
|
- mountPath: /etc/tls/private |
||||
|
name: tls |
||||
|
- mountPath: /etc/proxy/secrets |
||||
|
name: secrets |
||||
|
dnsPolicy: ClusterFirst |
||||
|
terminationGracePeriodSeconds: 30 |
||||
|
restartPolicy: Always |
||||
|
serviceAccountName: grafana |
||||
|
volumes: |
||||
|
- name: secrets |
||||
|
secret: |
||||
|
secretName: oauth-proxy |
||||
|
- name: tls |
||||
|
secret: |
||||
|
secretName: grafana-tls |
||||
|
- name: grafana-storage |
||||
|
persistentVolumeClaim: |
||||
|
claimName: grafana |
||||
|
- name: grafana-logs |
||||
|
emptyDir: {} |
||||
|
- name: grafana-config |
||||
|
configMap: |
||||
|
name: grafana-config |
||||
|
- name: grafana-datasources |
||||
|
configMap: |
||||
|
name: grafana-datasources |
||||
|
- name: grafana-dashboards |
||||
|
configMap: |
||||
|
name: grafana-dashboards |
||||
|
test: false |
||||
|
triggers: |
||||
|
- type: ConfigChange |
||||
|
- type: ImageChange |
||||
|
imageChangeParams: |
||||
|
automatic: true |
||||
|
containerNames: |
||||
|
- grafana |
||||
|
from: |
||||
|
kind: ImageStreamTag |
||||
|
name: grafana:${GRAFANA_RELEASE} |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: Service |
||||
|
metadata: |
||||
|
labels: |
||||
|
app: grafana |
||||
|
name: grafana |
||||
|
namespace: ${NAMESPACE} |
||||
|
annotations: |
||||
|
service.alpha.openshift.io/serving-cert-secret-name: grafana-tls |
||||
|
spec: |
||||
|
ports: |
||||
|
- name: oauth-proxy |
||||
|
port: 8443 |
||||
|
protocol: TCP |
||||
|
targetPort: 8443 |
||||
|
selector: |
||||
|
app: grafana |
||||
|
deploymentconfig: grafana |
||||
|
sessionAffinity: None |
||||
|
type: ClusterIP |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: Route |
||||
|
metadata: |
||||
|
labels: |
||||
|
app: grafana |
||||
|
name: grafana |
||||
|
namespace: ${NAMESPACE} |
||||
|
spec: |
||||
|
host: ${GRAFANA_HOSTNAME} |
||||
|
port: |
||||
|
targetPort: oauth-proxy |
||||
|
to: |
||||
|
kind: Service |
||||
|
name: grafana |
||||
|
weight: 100 |
||||
|
wildcardPolicy: None |
||||
|
tls: |
||||
|
termination: reencrypt |
||||
@ -0,0 +1,517 @@ |
|||||
|
apiVersion: v1 |
||||
|
kind: Template |
||||
|
labels: |
||||
|
template: prometheus |
||||
|
metadata: |
||||
|
annotations: |
||||
|
description: |- |
||||
|
From metrics to insight, |
||||
|
power your metrics and alerting with a leading open-source monitoring solution. |
||||
|
openshift.io/display-name: Prometheus |
||||
|
tags: instant-app |
||||
|
template.openshift.io/documentation-url: https://prometheus.io/docs/ |
||||
|
template.openshift.io/long-description: Prometheus |
||||
|
template.openshift.io/support-url: https://github.com/prometheus/prometheus/issues |
||||
|
name: prometheus |
||||
|
objects: |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: PersistentVolumeClaim |
||||
|
metadata: |
||||
|
name: prometheus |
||||
|
spec: |
||||
|
accessModes: |
||||
|
- ReadWriteOnce |
||||
|
resources: |
||||
|
requests: |
||||
|
storage: ${PROMETHEUS_VOLUME_SIZE} |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: PersistentVolumeClaim |
||||
|
metadata: |
||||
|
name: prometheus-alertbuffer |
||||
|
spec: |
||||
|
accessModes: |
||||
|
- ReadWriteOnce |
||||
|
resources: |
||||
|
requests: |
||||
|
storage: ${ALERTBUFFER_VOLUME_SIZE} |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: PersistentVolumeClaim |
||||
|
metadata: |
||||
|
name: prometheus-alertmanager |
||||
|
spec: |
||||
|
accessModes: |
||||
|
- ReadWriteOnce |
||||
|
resources: |
||||
|
requests: |
||||
|
storage: ${ALERTMANAGER_VOLUME_SIZE} |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: Secret |
||||
|
metadata: |
||||
|
name: prometheus-proxy |
||||
|
namespace: "${NAMESPACE}" |
||||
|
labels: |
||||
|
template: grafana-prometheus |
||||
|
stringData: |
||||
|
session_secret: "${SESSION_SECRET}=" |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: Secret |
||||
|
metadata: |
||||
|
name: alerts-proxy |
||||
|
namespace: "${NAMESPACE}" |
||||
|
stringData: |
||||
|
session_secret: "${SESSION_SECRET}=" |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: ServiceAccount |
||||
|
metadata: |
||||
|
name: prometheus |
||||
|
namespace: ${NAMESPACE} |
||||
|
annotations: |
||||
|
serviceaccounts.openshift.io/oauth-redirectreference.prom: '{"kind":"OAuthRedirectReference","apiVersion":"v1","reference":{"kind":"Route","name":"prometheus"}}' |
||||
|
serviceaccounts.openshift.io/oauth-redirectreference.alerts: '{"kind":"OAuthRedirectReference","apiVersion":"v1","reference":{"kind":"Route","name":"alerts"}}' |
||||
|
secrets: |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: ClusterRoleBinding |
||||
|
metadata: |
||||
|
name: prometheus-in-${NAMESPACE}-is-cluster-reader |
||||
|
groupNames: |
||||
|
- system:cluster-readers |
||||
|
roleRef: |
||||
|
name: cluster-reader |
||||
|
subjects: |
||||
|
- kind: ServiceAccount |
||||
|
name: prometheus |
||||
|
namespace: ${NAMESPACE} |
||||
|
userNames: |
||||
|
- system:serviceaccount:${NAMESPACE}:prometheus |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: Service |
||||
|
metadata: |
||||
|
labels: |
||||
|
app: prometheus |
||||
|
name: prometheus |
||||
|
namespace: ${NAMESPACE} |
||||
|
annotations: |
||||
|
service.alpha.openshift.io/serving-cert-secret-name: prometheus-tls |
||||
|
prometheus.io/scrape: 'true' |
||||
|
prometheus.io/scheme: https |
||||
|
spec: |
||||
|
ports: |
||||
|
- name: oauth-proxy |
||||
|
port: 443 |
||||
|
protocol: TCP |
||||
|
targetPort: 8443 |
||||
|
- name: prometheus |
||||
|
port: 9090 |
||||
|
protocol: TCP |
||||
|
targetPort: 9090 |
||||
|
selector: |
||||
|
app: prometheus |
||||
|
sessionAffinity: None |
||||
|
type: ClusterIP |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: Service |
||||
|
metadata: |
||||
|
labels: |
||||
|
app: prometheus |
||||
|
name: alerts |
||||
|
namespace: ${NAMESPACE} |
||||
|
annotations: |
||||
|
service.alpha.openshift.io/serving-cert-secret-name: prometheus-alerts-tls |
||||
|
spec: |
||||
|
ports: |
||||
|
- name: oauth-proxy |
||||
|
port: 443 |
||||
|
protocol: TCP |
||||
|
targetPort: 9443 |
||||
|
selector: |
||||
|
app: prometheus |
||||
|
sessionAffinity: None |
||||
|
type: ClusterIP |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: Route |
||||
|
metadata: |
||||
|
labels: |
||||
|
app: prometheus |
||||
|
name: prometheus |
||||
|
namespace: ${NAMESPACE} |
||||
|
spec: |
||||
|
host: ${PROMETHEUS_HOSTNAME} |
||||
|
port: |
||||
|
targetPort: oauth-proxy |
||||
|
to: |
||||
|
kind: Service |
||||
|
name: prometheus |
||||
|
weight: 100 |
||||
|
wildcardPolicy: None |
||||
|
tls: |
||||
|
termination: reencrypt |
||||
|
|
||||
|
- apiVersion: v1 |
||||
|
kind: Route |
||||
|
metadata: |
||||
|
labels: |
||||
|
app: prometheus |
||||
|
name: alerts |
||||
|
namespace: ${NAMESPACE} |
||||
|
spec: |
||||
|
host: ${ALERTS_HOSTNAME} |
||||
|
port: |
||||
|
targetPort: oauth-proxy |
||||
|
to: |
||||
|
kind: Service |
||||
|
name: alerts |
||||
|
weight: 100 |
||||
|
wildcardPolicy: None |
||||
|
tls: |
||||
|
termination: reencrypt |
||||
|
|
||||
|
- apiVersion: apps/v1beta1 |
||||
|
kind: StatefulSet |
||||
|
metadata: |
||||
|
name: prometheus |
||||
|
namespace: ${NAMESPACE} |
||||
|
labels: |
||||
|
app: prometheus |
||||
|
spec: |
||||
|
updateStrategy: |
||||
|
type: RollingUpdate |
||||
|
podManagementPolicy: Parallel |
||||
|
selector: |
||||
|
provider: openshift |
||||
|
matchLabels: |
||||
|
app: prometheus |
||||
|
template: |
||||
|
metadata: |
||||
|
name: prometheus |
||||
|
labels: |
||||
|
app: prometheus |
||||
|
spec: |
||||
|
serviceAccountName: prometheus |
||||
|
containers: |
||||
|
# Deploy Prometheus behind an oauth proxy |
||||
|
- name: prom-proxy |
||||
|
image: "${PROXY_IMAGE}" |
||||
|
imagePullPolicy: IfNotPresent |
||||
|
ports: |
||||
|
- containerPort: 8443 |
||||
|
name: web |
||||
|
args: |
||||
|
- -provider=openshift |
||||
|
- -https-address=:8443 |
||||
|
- -http-address= |
||||
|
- -email-domain=* |
||||
|
- -upstream=http://localhost:9090 |
||||
|
- -client-id=system:serviceaccount:${NAMESPACE}:prometheus |
||||
|
- '-openshift-sar={"resource": "namespaces", "verb": "get", "resourceName": "${NAMESPACE}", "namespace": "${NAMESPACE}"}' |
||||
|
- '-openshift-delegate-urls={"/": {"resource": "namespaces", "verb": "get", "resourceName": "${NAMESPACE}", "namespace": "${NAMESPACE}"}}' |
||||
|
- -tls-cert=/etc/tls/private/tls.crt |
||||
|
- -tls-key=/etc/tls/private/tls.key |
||||
|
- -client-secret-file=/var/run/secrets/kubernetes.io/serviceaccount/token |
||||
|
- -cookie-secret-file=/etc/proxy/secrets/session_secret |
||||
|
- -openshift-ca=/etc/pki/tls/cert.pem |
||||
|
- -openshift-ca=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt |
||||
|
- -skip-auth-regex=^/metrics |
||||
|
volumeMounts: |
||||
|
- mountPath: /etc/tls/private |
||||
|
name: prometheus-tls |
||||
|
- mountPath: /etc/proxy/secrets |
||||
|
name: prometheus-secrets |
||||
|
- mountPath: /prometheus |
||||
|
name: prometheus-data |
||||
|
|
||||
|
- name: prometheus |
||||
|
args: |
||||
|
- --storage.tsdb.retention=3h |
||||
|
- --storage.tsdb.min-block-duration=2m |
||||
|
- --config.file=/etc/prometheus/prometheus.yml |
||||
|
- --web.listen-address=0.0.0.0:9090 |
||||
|
image: "${PROMETHEUS_IMAGE}" |
||||
|
imagePullPolicy: IfNotPresent |
||||
|
volumeMounts: |
||||
|
- mountPath: /etc/prometheus |
||||
|
name: prometheus-config |
||||
|
- mountPath: /prometheus |
||||
|
name: prometheus-data |
||||
|
|
||||
|
# Deploy alertmanager behind prometheus-alert-buffer behind an oauth proxy |
||||
|
- name: alerts-proxy |
||||
|
image: "${PROXY_IMAGE}" |
||||
|
imagePullPolicy: IfNotPresent |
||||
|
ports: |
||||
|
- containerPort: 9443 |
||||
|
name: web |
||||
|
args: |
||||
|
- -provider=openshift |
||||
|
- -https-address=:9443 |
||||
|
- -http-address= |
||||
|
- -email-domain=* |
||||
|
- -upstream=http://localhost:9099 |
||||
|
- -client-id=system:serviceaccount:${NAMESPACE}:prometheus |
||||
|
- '-openshift-sar={"resource": "namespaces", "verb": "get", "resourceName": "${NAMESPACE}", "namespace": "${NAMESPACE}"}' |
||||
|
- '-openshift-delegate-urls={"/": {"resource": "namespaces", "verb": "get", "resourceName": "${NAMESPACE}", "namespace": "${NAMESPACE}"}}' |
||||
|
- -tls-cert=/etc/tls/private/tls.crt |
||||
|
- -tls-key=/etc/tls/private/tls.key |
||||
|
- -client-secret-file=/var/run/secrets/kubernetes.io/serviceaccount/token |
||||
|
- -cookie-secret-file=/etc/proxy/secrets/session_secret |
||||
|
- -openshift-ca=/etc/pki/tls/cert.pem |
||||
|
- -openshift-ca=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt |
||||
|
volumeMounts: |
||||
|
- mountPath: /etc/tls/private |
||||
|
name: alerts-tls |
||||
|
- mountPath: /etc/proxy/secrets |
||||
|
name: alerts-secrets |
||||
|
|
||||
|
- name: alert-buffer |
||||
|
args: |
||||
|
- --storage-path=/alert-buffer/messages.db |
||||
|
image: "${ALERTBUFFER_IMAGE}" |
||||
|
imagePullPolicy: IfNotPresent |
||||
|
volumeMounts: |
||||
|
- mountPath: /alert-buffer |
||||
|
name: alert-buffer-data |
||||
|
ports: |
||||
|
- containerPort: 9099 |
||||
|
name: alert-buf |
||||
|
|
||||
|
- name: alertmanager |
||||
|
args: |
||||
|
- --config.file=/etc/alertmanager/alertmanager.yml |
||||
|
image: "${ALERTMANAGER_IMAGE}" |
||||
|
imagePullPolicy: IfNotPresent |
||||
|
ports: |
||||
|
- containerPort: 9093 |
||||
|
name: web |
||||
|
volumeMounts: |
||||
|
- mountPath: /etc/alertmanager |
||||
|
name: alertmanager-config |
||||
|
- mountPath: /alertmanager |
||||
|
name: alertmanager-data |
||||
|
|
||||
|
restartPolicy: Always |
||||
|
volumes: |
||||
|
- name: prometheus-config |
||||
|
configMap: |
||||
|
defaultMode: 420 |
||||
|
name: prometheus |
||||
|
- name: prometheus-secrets |
||||
|
secret: |
||||
|
secretName: prometheus-proxy |
||||
|
- name: prometheus-tls |
||||
|
secret: |
||||
|
secretName: prometheus-tls |
||||
|
- name: prometheus-data |
||||
|
persistentVolumeClaim: |
||||
|
claimName: prometheus |
||||
|
- name: alertmanager-config |
||||
|
configMap: |
||||
|
defaultMode: 420 |
||||
|
name: prometheus-alerts |
||||
|
- name: alerts-secrets |
||||
|
secret: |
||||
|
secretName: alerts-proxy |
||||
|
- name: alerts-tls |
||||
|
secret: |
||||
|
secretName: prometheus-alerts-tls |
||||
|
- name: alertmanager-data |
||||
|
persistentVolumeClaim: |
||||
|
claimName: prometheus-alertmanager |
||||
|
- name: alert-buffer-data |
||||
|
persistentVolumeClaim: |
||||
|
claimName: prometheus-alertbuffer |
||||
|
|
||||
|
- kind: ConfigMap |
||||
|
apiVersion: v1 |
||||
|
metadata: |
||||
|
name: prometheus |
||||
|
namespace: ${NAMESPACE} |
||||
|
data: |
||||
|
prometheus.rules: |- |
||||
|
groups: |
||||
|
- name: example-rules |
||||
|
interval: 30s # defaults to global interval |
||||
|
rules: |
||||
|
|
||||
|
prometheus.yml: |- |
||||
|
global: |
||||
|
scrape_interval: 30s |
||||
|
evaluation_interval: 30s |
||||
|
|
||||
|
rule_files: |
||||
|
- '*.rules' |
||||
|
|
||||
|
# A scrape configuration for running Prometheus on a Kubernetes cluster. |
||||
|
# This uses separate scrape configs for cluster components (i.e. API server, node) |
||||
|
# and services to allow each to use different authentication configs. |
||||
|
# |
||||
|
# Kubernetes labels will be added as Prometheus labels on metrics via the |
||||
|
# `labelmap` relabeling action. |
||||
|
scrape_configs: |
||||
|
|
||||
|
# Scrape config for service endpoints. |
||||
|
# |
||||
|
# The relabeling allows the actual service scrape endpoint to be configured |
||||
|
# via the following annotations: |
||||
|
# |
||||
|
# * `prometheus.io/scrape`: Only scrape services that have a value of `true` |
||||
|
# * `prometheus.io/scheme`: If the metrics endpoint is secured then you will need |
||||
|
# to set this to `https` & most likely set the `tls_config` of the scrape config. |
||||
|
# * `prometheus.io/path`: If the metrics path is not `/metrics` override this. |
||||
|
# * `prometheus.io/port`: If the metrics are exposed on a different port to the |
||||
|
# service then set this appropriately. |
||||
|
- job_name: 'kubernetes-service-endpoints' |
||||
|
|
||||
|
tls_config: |
||||
|
ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt |
||||
|
# TODO: this should be per target |
||||
|
insecure_skip_verify: true |
||||
|
|
||||
|
kubernetes_sd_configs: |
||||
|
- role: endpoints |
||||
|
|
||||
|
relabel_configs: |
||||
|
- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_scrape] |
||||
|
action: keep |
||||
|
regex: true |
||||
|
- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_scheme] |
||||
|
action: replace |
||||
|
target_label: __scheme__ |
||||
|
regex: (https?) |
||||
|
- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_path] |
||||
|
action: replace |
||||
|
target_label: __metrics_path__ |
||||
|
regex: (.+) |
||||
|
- source_labels: [__address__, __meta_kubernetes_service_annotation_prometheus_io_port] |
||||
|
action: replace |
||||
|
target_label: __address__ |
||||
|
regex: (.+)(?::\d+);(\d+) |
||||
|
replacement: $1:$2 |
||||
|
- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_username] |
||||
|
action: replace |
||||
|
target_label: __basic_auth_username__ |
||||
|
regex: (.+) |
||||
|
- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_password] |
||||
|
action: replace |
||||
|
target_label: __basic_auth_password__ |
||||
|
regex: (.+) |
||||
|
- action: labelmap |
||||
|
regex: __meta_kubernetes_service_label_(.+) |
||||
|
- source_labels: [__meta_kubernetes_namespace] |
||||
|
action: replace |
||||
|
target_label: kubernetes_namespace |
||||
|
- source_labels: [__meta_kubernetes_service_name] |
||||
|
action: replace |
||||
|
target_label: kubernetes_name |
||||
|
|
||||
|
alerting: |
||||
|
alertmanagers: |
||||
|
- scheme: http |
||||
|
static_configs: |
||||
|
- targets: |
||||
|
- "localhost:9093" |
||||
|
|
||||
|
- kind: ConfigMap |
||||
|
apiVersion: v1 |
||||
|
metadata: |
||||
|
name: prometheus-alerts |
||||
|
namespace: ${NAMESPACE} |
||||
|
labels: |
||||
|
template: grafana-prometheus |
||||
|
data: |
||||
|
alertmanager.yml: |- |
||||
|
global: |
||||
|
|
||||
|
# The root route on which each incoming alert enters. |
||||
|
route: |
||||
|
# default route if none match |
||||
|
receiver: alert-buffer-wh |
||||
|
|
||||
|
# The labels by which incoming alerts are grouped together. For example, |
||||
|
# multiple alerts coming in for cluster=A and alertname=LatencyHigh would |
||||
|
# be batched into a single group. |
||||
|
# TODO: |
||||
|
group_by: [] |
||||
|
|
||||
|
# All the above attributes are inherited by all child routes and can |
||||
|
# overwritten on each. |
||||
|
|
||||
|
receivers: |
||||
|
- name: alert-buffer-wh |
||||
|
webhook_configs: |
||||
|
- url: http://localhost:9099/topics/alerts |
||||
|
|
||||
|
|
||||
|
## |
||||
|
## Template Parameters |
||||
|
## |
||||
|
parameters: |
||||
|
- description: The Docker image to use for the OAuth Proxy. |
||||
|
displayName: OAuth Proxy image |
||||
|
name: PROXY_IMAGE |
||||
|
value: registry.access.redhat.com/openshift3/oauth-proxy:v3.11 |
||||
|
required: true |
||||
|
|
||||
|
- description: The Docker image to use for Prometheus. |
||||
|
displayName: Prometheus image |
||||
|
name: PROMETHEUS_IMAGE |
||||
|
value: registry.access.redhat.com/openshift3/prometheus:v3.11 |
||||
|
required: true |
||||
|
|
||||
|
- description: The Docker image to use for the Alert Buffer. |
||||
|
displayName: Alert Buffer image |
||||
|
name: ALERTBUFFER_IMAGE |
||||
|
value: registry.access.redhat.com/openshift3/prometheus-alert-buffer:v3.11 |
||||
|
required: true |
||||
|
|
||||
|
- description: The Docker image to use for the Alert Manager. |
||||
|
displayName: Alert Manager image |
||||
|
name: ALERTMANAGER_IMAGE |
||||
|
value: registry.access.redhat.com/openshift3/prometheus-alertmanager:v3.11 |
||||
|
required: true |
||||
|
|
||||
|
- description: The desired hostname of the route to the Prometheus service. |
||||
|
displayName: Hostname of the Prometheus Service |
||||
|
name: PROMETHEUS_HOSTNAME |
||||
|
required: false |
||||
|
|
||||
|
- description: The desired hostname of the route to the Prometheus Alert service. |
||||
|
displayName: Hostname of the Prometheus Alert Service |
||||
|
name: ALERTS_HOSTNAME |
||||
|
required: false |
||||
|
|
||||
|
- description: The session secret for the proxy |
||||
|
name: SESSION_SECRET |
||||
|
generate: expression |
||||
|
from: "[a-zA-Z0-9]{43}" |
||||
|
required: true |
||||
|
|
||||
|
- description: The namespace used to deploy this template |
||||
|
name: NAMESPACE |
||||
|
required: true |
||||
|
|
||||
|
- description: Volume size for Prometheus |
||||
|
displayName: Prometheus Volume Size |
||||
|
name: PROMETHEUS_VOLUME_SIZE |
||||
|
value: "1Gi" |
||||
|
required: true |
||||
|
|
||||
|
- description: Volume size for the Alert Buffer |
||||
|
displayName: Alert Buffer Volume Size |
||||
|
name: ALERTBUFFER_VOLUME_SIZE |
||||
|
value: "1Gi" |
||||
|
required: true |
||||
|
|
||||
|
- description: Volume size for the Alert Manager |
||||
|
displayName: Alert Manager Volume Size |
||||
|
name: ALERTMANAGER_VOLUME_SIZE |
||||
|
value: "1Gi" |
||||
|
required: true |
||||
Loading…
Reference in new issue