| # Licensed to the Apache Software Foundation (ASF) under one or more |
| # contributor license agreements. See the NOTICE file distributed with |
| # this work for additional information regarding copyright ownership. |
| # The ASF licenses this file to You under the Apache License, Version 2.0 |
| # (the "License"); you may not use this file except in compliance with |
| # the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| |
| --- |
| # Source: prometheus/templates/serviceaccount.yaml |
| apiVersion: v1 |
| kind: ServiceAccount |
| metadata: |
| labels: |
| component: "cp-server" |
| app: prometheus |
| release: prometheus |
| chart: prometheus-20.0.2 |
| heritage: Helm |
| name: prometheus-cp-server |
| namespace: dubbo-system |
| annotations: |
| {} |
| --- |
| # Source: prometheus/templates/cm.yaml |
| apiVersion: v1 |
| kind: ConfigMap |
| metadata: |
| labels: |
| component: "cp-server" |
| app: prometheus |
| release: prometheus |
| chart: prometheus-20.0.2 |
| heritage: Helm |
| name: prometheus-cp-server |
| namespace: dubbo-system |
| data: |
| allow-snippet-annotations: "false" |
| alerting_rules.yml: | |
| {} |
| alerts: | |
| {} |
| prometheus.yml: | |
| global: |
| evaluation_interval: 1m |
| scrape_interval: 15s |
| scrape_timeout: 10s |
| rule_files: |
| - /etc/config/recording_rules.yml |
| - /etc/config/alerting_rules.yml |
| - /etc/config/rules |
| - /etc/config/alerts |
| scrape_configs: |
| - job_name: prometheus |
| static_configs: |
| - targets: |
| - localhost:9090 |
| - bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token |
| job_name: kubernetes-apiservers |
| kubernetes_sd_configs: |
| - role: endpoints |
| relabel_configs: |
| - action: keep |
| regex: default;kubernetes;https |
| source_labels: |
| - __meta_kubernetes_namespace |
| - __meta_kubernetes_service_name |
| - __meta_kubernetes_endpoint_port_name |
| scheme: https |
| tls_config: |
| ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt |
| insecure_skip_verify: true |
| - bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token |
| job_name: kubernetes-nodes |
| kubernetes_sd_configs: |
| - role: node |
| relabel_configs: |
| - action: labelmap |
| regex: __meta_kubernetes_node_label_(.+) |
| - replacement: kubernetes.default.svc:443 |
| target_label: __address__ |
| - regex: (.+) |
| replacement: /api/v1/nodes/$1/proxy/metrics |
| source_labels: |
| - __meta_kubernetes_node_name |
| target_label: __metrics_path__ |
| scheme: https |
| tls_config: |
| ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt |
| insecure_skip_verify: true |
| - bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token |
| job_name: kubernetes-nodes-cadvisor |
| kubernetes_sd_configs: |
| - role: node |
| relabel_configs: |
| - action: labelmap |
| regex: __meta_kubernetes_node_label_(.+) |
| - replacement: kubernetes.default.svc:443 |
| target_label: __address__ |
| - regex: (.+) |
| replacement: /api/v1/nodes/$1/proxy/metrics/cadvisor |
| source_labels: |
| - __meta_kubernetes_node_name |
| target_label: __metrics_path__ |
| scheme: https |
| tls_config: |
| ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt |
| insecure_skip_verify: true |
| - honor_labels: true |
| job_name: kubernetes-service-endpoints |
| kubernetes_sd_configs: |
| - role: endpoints |
| relabel_configs: |
| - action: keep |
| regex: true |
| source_labels: |
| - __meta_kubernetes_service_annotation_prometheus_io_scrape |
| - action: drop |
| regex: true |
| source_labels: |
| - __meta_kubernetes_service_annotation_prometheus_io_scrape_slow |
| - action: replace |
| regex: (https?) |
| source_labels: |
| - __meta_kubernetes_service_annotation_prometheus_io_scheme |
| target_label: __scheme__ |
| - action: replace |
| regex: (.+) |
| source_labels: |
| - __meta_kubernetes_service_annotation_prometheus_io_path |
| target_label: __metrics_path__ |
| - action: replace |
| regex: (.+?)(?::\d+)?;(\d+) |
| replacement: $1:$2 |
| source_labels: |
| - __address__ |
| - __meta_kubernetes_service_annotation_prometheus_io_port |
| target_label: __address__ |
| - action: labelmap |
| regex: __meta_kubernetes_service_annotation_prometheus_io_param_(.+) |
| replacement: __param_$1 |
| - action: labelmap |
| regex: __meta_kubernetes_service_label_(.+) |
| - action: replace |
| source_labels: |
| - __meta_kubernetes_namespace |
| target_label: namespace |
| - action: replace |
| source_labels: |
| - __meta_kubernetes_service_name |
| target_label: service |
| - action: replace |
| source_labels: |
| - __meta_kubernetes_pod_node_name |
| target_label: node |
| - honor_labels: true |
| job_name: kubernetes-service-endpoints-slow |
| kubernetes_sd_configs: |
| - role: endpoints |
| relabel_configs: |
| - action: keep |
| regex: true |
| source_labels: |
| - __meta_kubernetes_service_annotation_prometheus_io_scrape_slow |
| - action: replace |
| regex: (https?) |
| source_labels: |
| - __meta_kubernetes_service_annotation_prometheus_io_scheme |
| target_label: __scheme__ |
| - action: replace |
| regex: (.+) |
| source_labels: |
| - __meta_kubernetes_service_annotation_prometheus_io_path |
| target_label: __metrics_path__ |
| - action: replace |
| regex: (.+?)(?::\d+)?;(\d+) |
| replacement: $1:$2 |
| source_labels: |
| - __address__ |
| - __meta_kubernetes_service_annotation_prometheus_io_port |
| target_label: __address__ |
| - action: labelmap |
| regex: __meta_kubernetes_service_annotation_prometheus_io_param_(.+) |
| replacement: __param_$1 |
| - action: labelmap |
| regex: __meta_kubernetes_service_label_(.+) |
| - action: replace |
| source_labels: |
| - __meta_kubernetes_namespace |
| target_label: namespace |
| - action: replace |
| source_labels: |
| - __meta_kubernetes_service_name |
| target_label: service |
| - action: replace |
| source_labels: |
| - __meta_kubernetes_pod_node_name |
| target_label: node |
| scrape_interval: 5m |
| scrape_timeout: 30s |
| - honor_labels: true |
| job_name: prometheus-pushgateway |
| kubernetes_sd_configs: |
| - role: service |
| relabel_configs: |
| - action: keep |
| regex: pushgateway |
| source_labels: |
| - __meta_kubernetes_service_annotation_prometheus_io_probe |
| - honor_labels: true |
| job_name: kubernetes-services |
| kubernetes_sd_configs: |
| - role: service |
| metrics_path: /probe |
| params: |
| module: |
| - http_2xx |
| relabel_configs: |
| - action: keep |
| regex: true |
| source_labels: |
| - __meta_kubernetes_service_annotation_prometheus_io_probe |
| - source_labels: |
| - __address__ |
| target_label: __param_target |
| - replacement: blackbox |
| target_label: __address__ |
| - source_labels: |
| - __param_target |
| target_label: instance |
| - action: labelmap |
| regex: __meta_kubernetes_service_label_(.+) |
| - source_labels: |
| - __meta_kubernetes_namespace |
| target_label: namespace |
| - source_labels: |
| - __meta_kubernetes_service_name |
| target_label: service |
| - honor_labels: true |
| job_name: kubernetes-pods |
| kubernetes_sd_configs: |
| - role: pod |
| relabel_configs: |
| - action: keep |
| regex: true |
| source_labels: |
| - __meta_kubernetes_pod_annotation_prometheus_io_scrape |
| - action: drop |
| regex: true |
| source_labels: |
| - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow |
| - action: replace |
| regex: (https?) |
| source_labels: |
| - __meta_kubernetes_pod_annotation_prometheus_io_scheme |
| target_label: __scheme__ |
| - action: replace |
| regex: (.+) |
| source_labels: |
| - __meta_kubernetes_pod_annotation_prometheus_io_path |
| target_label: __metrics_path__ |
| - action: replace |
| regex: (\d+);(([A-Fa-f0-9]{1,4}::?){1,7}[A-Fa-f0-9]{1,4}) |
| replacement: '[$2]:$1' |
| source_labels: |
| - __meta_kubernetes_pod_annotation_prometheus_io_port |
| - __meta_kubernetes_pod_ip |
| target_label: __address__ |
| - action: replace |
| regex: (\d+);((([0-9]+?)(\.|$)){4}) |
| replacement: $2:$1 |
| source_labels: |
| - __meta_kubernetes_pod_annotation_prometheus_io_port |
| - __meta_kubernetes_pod_ip |
| target_label: __address__ |
| - action: labelmap |
| regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) |
| replacement: __param_$1 |
| - action: labelmap |
| regex: __meta_kubernetes_pod_label_(.+) |
| - action: replace |
| source_labels: |
| - __meta_kubernetes_namespace |
| target_label: namespace |
| - action: replace |
| source_labels: |
| - __meta_kubernetes_pod_name |
| target_label: pod |
| - action: drop |
| regex: Pending|Succeeded|Failed|Completed |
| source_labels: |
| - __meta_kubernetes_pod_phase |
| - honor_labels: true |
| job_name: kubernetes-pods-slow |
| kubernetes_sd_configs: |
| - role: pod |
| relabel_configs: |
| - action: keep |
| regex: true |
| source_labels: |
| - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow |
| - action: replace |
| regex: (https?) |
| source_labels: |
| - __meta_kubernetes_pod_annotation_prometheus_io_scheme |
| target_label: __scheme__ |
| - action: replace |
| regex: (.+) |
| source_labels: |
| - __meta_kubernetes_pod_annotation_prometheus_io_path |
| target_label: __metrics_path__ |
| - action: replace |
| regex: (\d+);(([A-Fa-f0-9]{1,4}::?){1,7}[A-Fa-f0-9]{1,4}) |
| replacement: '[$2]:$1' |
| source_labels: |
| - __meta_kubernetes_pod_annotation_prometheus_io_port |
| - __meta_kubernetes_pod_ip |
| target_label: __address__ |
| - action: replace |
| regex: (\d+);((([0-9]+?)(\.|$)){4}) |
| replacement: $2:$1 |
| source_labels: |
| - __meta_kubernetes_pod_annotation_prometheus_io_port |
| - __meta_kubernetes_pod_ip |
| target_label: __address__ |
| - action: labelmap |
| regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) |
| replacement: __param_$1 |
| - action: labelmap |
| regex: __meta_kubernetes_pod_label_(.+) |
| - action: replace |
| source_labels: |
| - __meta_kubernetes_namespace |
| target_label: namespace |
| - action: replace |
| source_labels: |
| - __meta_kubernetes_pod_name |
| target_label: pod |
| - action: drop |
| regex: Pending|Succeeded|Failed|Completed |
| source_labels: |
| - __meta_kubernetes_pod_phase |
| scrape_interval: 5m |
| scrape_timeout: 30s |
| recording_rules.yml: | |
| {} |
| rules: | |
| {} |
| --- |
| # Source: prometheus/templates/clusterrole.yaml |
| apiVersion: rbac.authorization.k8s.io/v1 |
| kind: ClusterRole |
| metadata: |
| labels: |
| component: "cp-server" |
| app: prometheus |
| release: prometheus |
| chart: prometheus-20.0.2 |
| heritage: Helm |
| name: prometheus-cp-server |
| rules: |
| - apiGroups: |
| - "" |
| resources: |
| - nodes |
| - nodes/proxy |
| - nodes/metrics |
| - services |
| - endpoints |
| - pods |
| - ingresses |
| - configmaps |
| verbs: |
| - get |
| - list |
| - watch |
| - apiGroups: |
| - "extensions" |
| - "networking.k8s.io" |
| resources: |
| - ingresses/status |
| - ingresses |
| verbs: |
| - get |
| - list |
| - watch |
| - nonResourceURLs: |
| - "/metrics" |
| verbs: |
| - get |
| --- |
| # Source: prometheus/templates/clusterrolebinding.yaml |
| apiVersion: rbac.authorization.k8s.io/v1 |
| kind: ClusterRoleBinding |
| metadata: |
| labels: |
| component: "cp-server" |
| app: prometheus |
| release: prometheus |
| chart: prometheus-20.0.2 |
| heritage: Helm |
| name: prometheus-cp-server |
| subjects: |
| - kind: ServiceAccount |
| name: prometheus-cp-server |
| namespace: dubbo-system |
| roleRef: |
| apiGroup: rbac.authorization.k8s.io |
| kind: ClusterRole |
| name: prometheus-cp-server |
| --- |
| # Source: prometheus/templates/service.yaml |
| apiVersion: v1 |
| kind: Service |
| metadata: |
| labels: |
| component: "cp-server" |
| app: prometheus |
| release: prometheus |
| chart: prometheus-20.0.2 |
| heritage: Helm |
| name: prometheus-cp-server |
| namespace: dubbo-system |
| spec: |
| ports: |
| - name: http |
| port: 9090 |
| protocol: TCP |
| targetPort: 9090 |
| selector: |
| component: "cp-server" |
| app: prometheus |
| release: prometheus |
| sessionAffinity: None |
| type: "ClusterIP" |
| --- |
| # Source: prometheus/templates/deploy.yaml |
| apiVersion: apps/v1 |
| kind: Deployment |
| metadata: |
| labels: |
| component: "cp-server" |
| app: prometheus |
| release: prometheus |
| chart: prometheus-20.0.2 |
| heritage: Helm |
| name: prometheus-cp-server |
| namespace: dubbo-system |
| spec: |
| selector: |
| matchLabels: |
| component: "cp-server" |
| app: prometheus |
| release: prometheus |
| replicas: 1 |
| strategy: |
| type: Recreate |
| rollingUpdate: null |
| template: |
| metadata: |
| labels: |
| component: "cp-server" |
| app: prometheus |
| release: prometheus |
| chart: prometheus-20.0.2 |
| heritage: Helm |
| spec: |
| enableServiceLinks: true |
| serviceAccountName: prometheus-cp-server |
| containers: |
| - name: prometheus-cp-server-configmap-reload |
| image: "quay.io/prometheus-operator/prometheus-config-reloader:v0.63.0" |
| imagePullPolicy: "IfNotPresent" |
| args: |
| - --watched-dir=/etc/config |
| - --reload-url=http://127.0.0.1:9090/-/reload |
| resources: |
| {} |
| volumeMounts: |
| - name: config-volume |
| mountPath: /etc/config |
| readOnly: true |
| |
| - name: prometheus-cp-server |
| image: "quay.io/prometheus/prometheus:v2.43.0" |
| imagePullPolicy: "IfNotPresent" |
| args: |
| - --storage.tsdb.retention.time=15d |
| - --config.file=/etc/config/prometheus.yml |
| - --storage.tsdb.path=/data |
| - --web.console.libraries=/etc/prometheus/console_libraries |
| - --web.console.templates=/etc/prometheus/consoles |
| - --web.enable-lifecycle |
| ports: |
| - containerPort: 9090 |
| readinessProbe: |
| httpGet: |
| path: /-/ready |
| port: 9090 |
| scheme: HTTP |
| initialDelaySeconds: 30 |
| periodSeconds: 5 |
| timeoutSeconds: 4 |
| failureThreshold: 3 |
| successThreshold: 1 |
| livenessProbe: |
| httpGet: |
| path: /-/healthy |
| port: 9090 |
| scheme: HTTP |
| initialDelaySeconds: 30 |
| periodSeconds: 15 |
| timeoutSeconds: 10 |
| failureThreshold: 3 |
| successThreshold: 1 |
| resources: |
| {} |
| volumeMounts: |
| - name: config-volume |
| mountPath: /etc/config |
| - name: storage-volume |
| mountPath: /data |
| subPath: "" |
| dnsPolicy: ClusterFirst |
| securityContext: |
| fsGroup: 65534 |
| runAsGroup: 65534 |
| runAsNonRoot: true |
| runAsUser: 65534 |
| terminationGracePeriodSeconds: 300 |
| volumes: |
| - name: config-volume |
| configMap: |
| name: prometheus-cp-server |
| - name: storage-volume |
| emptyDir: |
| {} |
