[wip] node-exporter connector

examples/kube-prometheus/kustomization.yaml

@@ -1,6 +1,7 @@
 resources:
 - github.com/prometheus-operator/kube-prometheus?ref=v0.9.0
 - coredns-prometheusRule.yaml
+- node-exporter-connector-daemonset.yaml
 
 patchesStrategicMerge:
 - alertmanager-secret.yaml

examples/kube-prometheus/node-exporter-connector-daemonset.yaml

@@ -0,0 +1,95 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+ labels:
+ app.kubernetes.io/name: node-exporter-connector
+ name: node-exporter-connector
+ namespace: monitoring
+spec:
+ selector:
+ matchLabels:
+ app.kubernetes.io/name: node-exporter-connector
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/name: node-exporter-connector
+ spec:
+ containers:
+ - args:
+ - --logtostderr
+ - --secure-listen-address=[$(IP)]:19200
+ - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
+ - --upstream=http:https://[$(IP)]:19100/
+ env:
+ - name: IP
+ valueFrom:
+ fieldRef:
+ fieldPath: status.podIP
+ image: mcr.microsoft.com/oss/kubernetes/kube-rbac-proxy:v0.11.0
+ name: kube-rbac-proxy
+ ports:
+ - containerPort: 19200
+ name: https
+ resources:
+ limits:
+ cpu: 20m
+ memory: 40Mi
+ requests:
+ cpu: 10m
+ memory: 20Mi
+ securityContext:
+ runAsUser: 65532
+ hostNetwork: true
+ nodeSelector:
+ kubernetes.io/os: linux
+ serviceAccountName: node-exporter
+ tolerations:
+ - operator: Exists
+ updateStrategy:
+ rollingUpdate:
+ maxUnavailable: 10%
+ type: RollingUpdate
+---
+apiVersion: v1
+kind: Service
+metadata:
+ labels:
+ app.kubernetes.io/name: node-exporter-connector
+ name: node-exporter-connector
+ namespace: monitoring
+spec:
+ clusterIP: None
+ ports:
+ - name: https
+ port: 19100
+ targetPort: https
+ selector:
+ app.kubernetes.io/name: node-exporter-connector
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+ labels:
+ app.kubernetes.io/name: node-exporter-connector
+ name: node-exporter-connector
+ namespace: monitoring
+spec:
+ endpoints:
+ - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
+ honorLabels: true
+ interval: 30s
+ port: https
+ relabelings:
+ - sourceLabels:
+ - __metrics_path__
+ targetLabel: metrics_path
+ scheme: https
+ tlsConfig:
+ insecureSkipVerify: true
+ jobLabel: app.kubernetes.io/name
+ namespaceSelector:
+ matchNames:
+ - monitoring
+ selector:
+ matchLabels:
+ app.kubernetes.io/name: node-exporter-connector