mirror of
https://github.com/puppetmaster/typhoon.git
synced 2024-12-28 00:49:33 +01:00
064ce83f25
* Change service discovery to relabel jobs to align with rule expressions in upstream examples * Use a separate service account for prometheus instead of granting roles to the namespace's default * Use a separate service account for node-exporter * Update node-exporter and kube-state-metrics exporters
61 lines
1.3 KiB
YAML
61 lines
1.3 KiB
YAML
apiVersion: apps/v1beta2
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: node-exporter
|
|
namespace: monitoring
|
|
spec:
|
|
updateStrategy:
|
|
type: RollingUpdate
|
|
rollingUpdate:
|
|
maxUnavailable: 1
|
|
selector:
|
|
matchLabels:
|
|
name: node-exporter
|
|
phase: prod
|
|
template:
|
|
metadata:
|
|
labels:
|
|
name: node-exporter
|
|
phase: prod
|
|
spec:
|
|
serviceAccountName: node-exporter
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 65534
|
|
hostNetwork: true
|
|
hostPID: true
|
|
containers:
|
|
- name: node-exporter
|
|
image: quay.io/prometheus/node-exporter:v0.15.2
|
|
args:
|
|
- "--path.procfs=/host/proc"
|
|
- "--path.sysfs=/host/sys"
|
|
ports:
|
|
- name: metrics
|
|
containerPort: 9100
|
|
hostPort: 9100
|
|
resources:
|
|
requests:
|
|
memory: 30Mi
|
|
cpu: 100m
|
|
limits:
|
|
memory: 50Mi
|
|
cpu: 200m
|
|
volumeMounts:
|
|
- name: proc
|
|
mountPath: /host/proc
|
|
readOnly: true
|
|
- name: sys
|
|
mountPath: /host/sys
|
|
readOnly: true
|
|
tolerations:
|
|
- effect: NoSchedule
|
|
operator: Exists
|
|
volumes:
|
|
- name: proc
|
|
hostPath:
|
|
path: /proc
|
|
- name: sys
|
|
hostPath:
|
|
path: /sys
|