CadolesKube
/
typhoon
mirror of https://github.com/puppetmaster/typhoon.git
7
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,426 Commits 3 Branches 113 Tags 8.7 MiB
Commit Graph

69 Commits

Author SHA1 Message Date
Dalton Hubble ffbacbccf7 Update node-exporter DaemonSet to fix permission denied 
* Add toleration to run node-exporter on controller nodes
* Add HostToContainer mount propagation and security context group
settings from upstream
* Fix SELinux denied accessing /host/proc/1/mounts. The mounts file
is has an SELinux type attribute init_t, but that won't allow running
the node-exporter binary so we have to use spc_t. This should be more
targeted at just the SELinux issue than making the Pod privileged
* Remove excluded mount points and filesystem types, the defaults are
https://github.com/prometheus/node_exporter/blob/v1.3.1/collector/filesystem_linux.go#L35

```
caller=collector.go:169 level=error msg="collector failed" name=filesystem duration_seconds=0.000666766 err="open /host/proc/1/mounts: permission denied"
```

```
[ 3664.880899] audit: type=1400 audit(1659639161.568:4400): avc:  denied  { search } for  pid=28325 comm="node_exporter" name="1" dev="proc" ino=22542 scontext=system_u:system_r:container_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=dir permissive=0
```
 2022-08-08 09:19:46 -07:00
Dalton Hubble 2a8915fee9 Update Prometheus, kube-state-metrics, and Grafana addons 
* Update monitoring addons
 2022-06-18 18:32:17 -07:00
Dalton Hubble dca745fa4a Update monitoring addon components 
* Update Prometheus, kube-state-metrics, and Grafana
 2022-03-11 11:50:16 -08:00
Dalton Hubble 6cf40722de Revert kube-state-metrics upgrade 
* kube-state-metrics:v2.4.0 isn't published, skip it
 2022-02-21 19:57:47 -08:00
Dalton Hubble c230cdec46 Update Grafana and kube-state-metrics addons 2022-02-21 19:36:16 -08:00
Dalton Hubble 43c6558aaf Update nginx-ingress and monitoring addons 2021-12-10 11:29:49 -08:00
Dalton Hubble 5d7b6f611e Update nginx-ingess and Prometheus exporter addons 2021-11-21 09:28:17 -08:00
Dalton Hubble f2e6256dd9 Update Prometheus, kube-state-metrics, and Grafana 
* Update monitoring addons
 2021-10-17 11:15:39 -07:00
Dalton Hubble 209efd2f5b Update Prometheus, Grafana, and kube-state-metrics 2021-09-29 23:39:10 -07:00
Dalton Hubble bb7f31822e Update Kubernetes from v1.22.1 to v1.22.2 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md#v1222
 2021-09-15 19:56:24 -07:00
Dalton Hubble c5cf803634 Update Grafana and kube-state-metrics addons 2021-08-10 22:17:16 -07:00
Dalton Hubble 0c99b909a9 Update nginx-ingress from v0.47.0 to v1.0.0-beta.1 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.0.0-beta.1
 2021-08-07 12:46:00 -07:00
Dalton Hubble 739db3b35f Update Grafana and node-exporter addons 
* https://github.com/grafana/grafana/releases/tag/v8.1.0
* https://github.com/prometheus/node_exporter/releases/tag/v1.2.1
 2021-08-05 23:24:57 -07:00
Dalton Hubble c734fa7b84 Update node-exporter from v1.1.2 to v1.2.0 
* https://github.com/prometheus/node_exporter/releases/tag/v1.2.0
 2021-07-18 15:26:44 -07:00
Dalton Hubble 24e63bd134 Update Prometheus, Grafana, kube-state-metrics addons 2021-06-07 09:40:06 -07:00
Dalton Hubble 5752a8f041 Update kube-state-metrics from v2.0.0-rc.1 to v2.0.0 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0
 2021-04-17 11:34:52 -07:00
Dalton Hubble 7372d33af8 Update kube-state-metrics and Grafana 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-rc.1
* https://github.com/grafana/grafana/releases/tag/v7.5.1
 2021-03-28 10:53:52 -07:00
Dalton Hubble 5bc1cd28c3 Switch kube-state-metrics image from quay to k8s.gcr.io 
* kube-state-metrics is continuing publishing container images
to `k8s.gcr.io` instead of `quay.io`

Rel: https://github.com/kubernetes/kube-state-metrics/issues/1409
 2021-03-11 10:56:18 -08:00
Dalton Hubble a8fa4a9a06 Update node-exporter and kube-state-metrics 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-rc.0
* https://github.com/prometheus/node_exporter/releases/tag/v1.1.2
 2021-03-05 17:13:45 -08:00
Dalton Hubble c32a54db40 Update node-exporter from v1.0.1 to v1.1.1 
* https://github.com/prometheus/node_exporter/releases/tag/v1.1.1
 2021-02-14 14:30:28 -08:00
Dalton Hubble 22565e57e0 Update kube-state-metrics from v2.0.0-alpha.2 to v2.0.0-alpha.3 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-alpha.3
 2020-11-25 14:30:11 -08:00
Dalton Hubble cda5b93b09 Update kube-state-metrics from v2.0.0-alpha.1 to v2.0.0-alpha.2 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-alpha.2
 2020-10-28 18:49:40 -07:00
Dalton Hubble 7881f4bd86 Update kube-state-metrics from v1.9.7 to v2.0.0-alpha.1 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-alpha
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-alpha.1
 2020-10-11 12:35:43 -07:00
Dalton Hubble 29b16c3fc0 Change seccomp annotations to seccompProfile 
* seccomp graduated to GA in Kubernetes v1.19. Support for
seccomp alpha annotations will be removed in v1.22
* Replace seccomp annotations with the GA seccompProfile
field in the PodTemplate securityContext
* Switch profile from `docker/default` to `runtime/default`
(no effective change, since docker is the runtime)
* Verify with docker inspect SecurityOpt. Without the profile,
you'd see `seccomp=unconfined`

Related: https://github.com/poseidon/terraform-render-bootstrap/pull/215
 2020-09-10 01:15:07 -07:00
Dalton Hubble 04520e447c Update node-exporter from v1.0.0 to v1.0.1 
* https://github.com/prometheus/node_exporter/releases/tag/v1.0.1
 2020-06-16 17:57:09 -07:00
Dalton Hubble 16c0b9152b Update kube-state-metrics from v1.9.6 to v1.9.7 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.9.7
 2020-06-03 11:35:10 -07:00
Dalton Hubble abc31c3711 Update node-exporter from v1.0.0-rc.1 to v1.0.0 
* https://github.com/prometheus/node_exporter/releases/tag/v1.0.0
 2020-05-27 21:33:03 -07:00
Dalton Hubble 90edcd3d77 Update node-exporter from v1.0.0-rc.0 to v1.0.0-rc.1 
* https://github.com/prometheus/node_exporter/releases/tag/v1.0.0-rc.1
 2020-05-15 18:03:19 -07:00
Dalton Hubble a927c7c790 Update kube-state-metrics from v1.9.5 to v1.9.6 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.9.6
 2020-05-15 17:42:24 -07:00
Dalton Hubble f4d260645c Update node-exporter from v0.18.1 to v1.0.0-rc.0 
* Update mdadm alert rule; node-exporter adds `state` label to
`node_md_disks` and removes `node_md_disks_active`
* https://github.com/prometheus/node_exporter/releases/tag/v1.0.0-rc.0
 2020-02-25 22:29:52 -08:00
Dalton Hubble 4c964b56a0 Update kube-state-metrics from v1.9.4 to v1.9.5 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.9.5
 2020-02-22 15:21:10 -08:00
Dalton Hubble e339fbd2b6 Update kube-state-metrics from v1.9.3 to v1.9.4 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.9.4
 2020-02-04 21:33:34 -08:00
Dalton Hubble d5b7ce8f27 Update kube-state-metrics from v1.9.2 to v1.9.3 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.9.3
 2020-01-23 00:03:16 -08:00
Dalton Hubble 03ff3a9cf3 Update kube-state-metrics from v1.9.1 to v1.9.2 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.9.2
 2020-01-18 15:32:10 -08:00
Dalton Hubble 0e2fc89f78 Update kube-state-metrics from v1.9.0 to v1.9.1 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.9.1
 2020-01-11 14:15:55 -08:00
Dalton Hubble bb586b60da Reduce Prometheus addon's node-exporter tolerations 
* Change node-exporter DaemonSet tolerations from tolerating
all possible NoSchedule taints to tolerating the master taint
and the not ready taint (we'd like metrics regardless)
* Users who add custom node taints must add their custom taints
to the addon node-exporter DaemonSet. As an addon, its expected
users copy and manipulate manifests out-of-band in their own
systems
 2020-01-06 21:24:24 -08:00
Dalton Hubble 52d11096dc Update kube-state-metrics from v1.9.0-rc.1 to v1.9.0 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.9.0
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.9.0-rc.1
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.9.0-rc.0
 2019-12-20 13:53:37 -08:00
Dalton Hubble 0ecb995890 Update kube-state-metrics from v1.8.0 to v1.9.0-rc.1 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.9.0-rc.1
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.9.0-rc.0
 2019-12-14 17:20:49 -08:00
Dalton Hubble de90cb9246 Remove kube-state-metrics addon-resizer 
* addon-resizer is outdated and has been dropped from
kube-state-metrics examples. Those using it should look
to the cluster-proportional-vertical-autoscaler.
* Eliminate addon-resizer log spew
* Remove associated Role and RoleBinding
* Also fix kube-state-metrics readinessProbe port
 2019-10-20 16:03:29 -07:00
Dalton Hubble 26f8d76755 Update kube-state-metrics from v1.7.2 to v1.8.0 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.8.0
 2019-10-01 20:50:33 -07:00
Dalton Hubble 457ad18daa Update kube-state-metrics from v1.7.1 to v1.7.2 
* Add a separate liveness and readiness probe
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.7.2
 2019-08-07 20:00:24 -07:00
Dalton Hubble e0be091acc Update kube-state-metrics from v1.7.0 to v1.7.1 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.7.1
 2019-07-20 20:17:08 -07:00
Dalton Hubble 6cd3e65267 Update kube-state-metrics from v1.7.0-rc.1 to v1.7.0 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.7.0
* Add storageclasses and verticalpodautoscalers to ClusterRole
 2019-07-19 00:14:47 -07:00
Dalton Hubble 70f5cfd33e Update kube-state-metrics from v1.6.0 to v1.7.0-rc.1 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.7.0-rc.1
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.7.0-rc.0
 2019-07-13 13:13:57 -07:00
Dalton Hubble cc4f7e09ab Update node-exporter from v0.18.0 to v0.18.1 
* https://github.com/prometheus/node_exporter/releases/tag/v0.18.1
 2019-06-07 02:09:44 -07:00
Dalton Hubble f5960e227d Update addon-resizer base image to distroless 
* Rel: https://github.com/kubernetes/kubernetes/pull/78397
 2019-06-07 00:14:54 -07:00
Dalton Hubble 222a94247c Update node_exporter from v0.17.0 to v0.18.0 
* https://github.com/prometheus/node_exporter/releases/tag/v0.18.0
 2019-05-17 20:01:30 +02:00
Dalton Hubble 2d19ab8457 Update kube-state-metrics from v1.6.0-rc.2 to v1.6.0 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.6.0
 2019-05-06 21:30:49 -07:00
Dalton Hubble 0e94708fd8 Update kube-state-metrics from v1.5.0 to v1.6.0-rc.2 
* Collect metrics Ingress resources
* Collects metrics about certificates.k8s.io certificatesigningrequests
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.6.0-rc.2
 2019-04-27 20:54:40 -07:00
Dalton Hubble 1b157a2fa4 Revert "Update kube-state-metrics from v1.5.0 to v1.6.0-rc.0" 
* This reverts commit 6e5d66cf66
* kube-state-metrics v1.6.0-rc.0 fires KubeDeploymentReplicasMismatch
alerts where its own Deployment doesn't have replicas available,
(kube_deployment_status_replicas_available) even though all replicas
are available according to kubectl inspection
* This problem was present even with the CSR ClusterRole fix
(https://github.com/kubernetes/kube-state-metrics/pull/717)
 2019-04-13 12:37:53 -07:00