removed files
This commit is contained in:
Mukul Sharma
-478
@@ -1,478 +0,0 @@
|
||||
# Default values for kube-state-metrics.
|
||||
prometheusScrape: true
|
||||
image:
|
||||
registry: asia-southeast1-docker.pkg.dev
|
||||
repository: meesho-devops-admin-0622/admin/sre/kube-state-metrics
|
||||
# If unset use v + .Charts.appVersion
|
||||
tag: v2.9.2
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
fullnameOverride: kube-state-metrics-dbc-dsci-prd
|
||||
|
||||
dedicatedValue: false
|
||||
|
||||
imagePullSecrets: []
|
||||
# - name: "image-pull-secret"
|
||||
|
||||
ingress:
|
||||
enabled: false
|
||||
ingressClassName: internal
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
|
||||
extraLabels: {}
|
||||
hosts:
|
||||
- name: clustermetrics-dbc-dsci-prd.meesho.com
|
||||
path: /
|
||||
port: http
|
||||
tls: []
|
||||
# - secretName: vmagent-ingress-tls
|
||||
# hosts:
|
||||
# - vmagent.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
|
||||
global:
|
||||
# To help compatibility with other charts which use global.imagePullSecrets.
|
||||
# Allow either an array of {name: pullSecret} maps (k8s-style), or an array of strings (more common helm-style).
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - name: pullSecret1
|
||||
# - name: pullSecret2
|
||||
# or
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - pullSecret1
|
||||
# - pullSecret2
|
||||
imagePullSecrets: []
|
||||
#
|
||||
# Allow parent charts to override registry hostname
|
||||
imageRegistry: ""
|
||||
|
||||
# If set to true, this will deploy kube-state-metrics as a StatefulSet and the data
|
||||
# will be automatically sharded across <.Values.replicas> pods using the built-in
|
||||
# autodiscovery feature: https://github.com/kubernetes/kube-state-metrics#automated-sharding
|
||||
# This is an experimental feature and there are no stability guarantees.
|
||||
autosharding:
|
||||
enabled: false
|
||||
|
||||
replicas: 2
|
||||
|
||||
# List of additional cli arguments to configure kube-state-metrics
|
||||
# for example: --enable-gzip-encoding, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/kubernetes/kube-state-metrics/blob/master/docs/cli-arguments.md
|
||||
extraArgs: []
|
||||
|
||||
service:
|
||||
port: 8080
|
||||
# Default to clusterIP for backward compatibility
|
||||
type: ClusterIP
|
||||
nodePort: 0
|
||||
loadBalancerIP: ""
|
||||
# Only allow access to the loadBalancerIP from these IPs
|
||||
loadBalancerSourceRanges: []
|
||||
clusterIP: ""
|
||||
annotations: {}
|
||||
|
||||
## Additional labels to add to all resources
|
||||
customLabels:
|
||||
bu: "dbc-dsci"
|
||||
team: "dbc-dsci-sre"
|
||||
service: "kube-state-metrics-dbc-dsci-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "exporter"
|
||||
|
||||
# app: kube-state-metrics
|
||||
|
||||
## Override selector labels
|
||||
selectorOverride: {}
|
||||
|
||||
## set to true to add the release label so scraping of the servicemonitor with kube-prometheus-stack works out of the box
|
||||
releaseLabel: false
|
||||
|
||||
hostNetwork: false
|
||||
|
||||
rbac:
|
||||
# If true, create & use RBAC resources
|
||||
create: true
|
||||
|
||||
# Set to a rolename to use existing role - skipping role creating - but still doing serviceaccount and rolebinding to it, rolename set here.
|
||||
# useExistingRole: your-existing-role
|
||||
|
||||
# If set to false - Run without Cluteradmin privs needed - ONLY works if namespace is also set (if useExistingRole is set this name is used as ClusterRole or Role to bind to)
|
||||
useClusterRole: true
|
||||
|
||||
# Add permissions for CustomResources' apiGroups in Role/ClusterRole. Should be used in conjunction with Custom Resource State Metrics configuration
|
||||
# Example:
|
||||
# - apiGroups: ["monitoring.coreos.com"]
|
||||
# resources: ["prometheuses"]
|
||||
# verbs: ["list", "watch"]
|
||||
extraRules: []
|
||||
|
||||
# Configure kube-rbac-proxy. When enabled, creates one kube-rbac-proxy container per exposed HTTP endpoint (metrics and telemetry if enabled).
|
||||
# The requests are served through the same service but requests are then HTTPS.
|
||||
kubeRBACProxy:
|
||||
enabled: false
|
||||
image:
|
||||
registry: quay.io
|
||||
repository: brancz/kube-rbac-proxy
|
||||
tag: v0.14.0
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# List of additional cli arguments to configure kube-rbac-prxy
|
||||
# for example: --tls-cipher-suites, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/brancz/kube-rbac-proxy#usage
|
||||
extraArgs: []
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext: {}
|
||||
|
||||
resources: {}
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
# requests:
|
||||
# cpu: 10m
|
||||
# memory: 32Mi
|
||||
|
||||
## volumeMounts enables mounting custom volumes in rbac-proxy containers
|
||||
## Useful for TLS certificates and keys
|
||||
volumeMounts: []
|
||||
# - mountPath: /etc/tls
|
||||
# name: kube-rbac-proxy-tls
|
||||
# readOnly: true
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a ServiceAccount should be created, require rbac true
|
||||
create: true
|
||||
# The name of the ServiceAccount to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name:
|
||||
# Reference to one or more secrets to be used when pulling images
|
||||
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
||||
imagePullSecrets: []
|
||||
# ServiceAccount annotations.
|
||||
# Use case: AWS EKS IAM roles for service accounts
|
||||
# ref: https://docs.aws.amazon.com/eks/latest/userguide/specify-service-account-role.html
|
||||
annotations: {}
|
||||
|
||||
prometheus:
|
||||
monitor:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
additionalLabels: {}
|
||||
namespace: ""
|
||||
jobLabel: ""
|
||||
targetLabels: []
|
||||
podTargetLabels: []
|
||||
interval: ""
|
||||
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
|
||||
##
|
||||
sampleLimit: 0
|
||||
|
||||
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
|
||||
##
|
||||
targetLimit: 0
|
||||
|
||||
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelNameLengthLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelValueLengthLimit: 0
|
||||
scrapeTimeout: ""
|
||||
proxyUrl: ""
|
||||
selectorOverride: {}
|
||||
honorLabels: false
|
||||
metricRelabelings: []
|
||||
relabelings: []
|
||||
scheme: ""
|
||||
## File to read bearer token for scraping targets
|
||||
bearerTokenFile: ""
|
||||
## Secret to mount to read bearer token for scraping targets. The secret needs
|
||||
## to be in the same namespace as the service monitor and accessible by the
|
||||
## Prometheus Operator
|
||||
bearerTokenSecret: {}
|
||||
# name: secret-name
|
||||
# key: key-name
|
||||
tlsConfig: {}
|
||||
|
||||
## Specify if a Pod Security Policy for kube-state-metrics must be created
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
|
||||
##
|
||||
podSecurityPolicy:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
## Specify pod annotations
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#apparmor
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#seccomp
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#sysctl
|
||||
##
|
||||
# seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
|
||||
# seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
|
||||
# apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
|
||||
|
||||
additionalVolumes: []
|
||||
|
||||
## Configure network policy for kube-state-metrics
|
||||
networkPolicy:
|
||||
enabled: false
|
||||
# networkPolicy.flavor -- Flavor of the network policy to use.
|
||||
# Can be:
|
||||
# * kubernetes for networking.k8s.io/v1/NetworkPolicy
|
||||
# * cilium for cilium.io/v2/CiliumNetworkPolicy
|
||||
flavor: kubernetes
|
||||
|
||||
## Configure the cilium network policy kube-apiserver selector
|
||||
# cilium:
|
||||
# kubeApiServerSelector:
|
||||
# - toEntities:
|
||||
# - kube-apiserver
|
||||
|
||||
# egress:
|
||||
# - {}
|
||||
# ingress:
|
||||
# - {}
|
||||
# podSelector:
|
||||
# matchLabels:
|
||||
# app.kubernetes.io/name: kube-state-metrics
|
||||
|
||||
securityContext:
|
||||
enabled: true
|
||||
runAsGroup: 65534
|
||||
runAsUser: 65534
|
||||
fsGroup: 65534
|
||||
runAsNonRoot: true
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
|
||||
## Node labels for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
|
||||
nodeSelector:
|
||||
dedicated: "devops"
|
||||
|
||||
## Affinity settings for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
|
||||
affinity: {}
|
||||
|
||||
## Tolerations for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
## Topology spread constraints for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: exporter
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: exporter
|
||||
|
||||
# Annotations to be added to the deployment/statefulset
|
||||
annotations:
|
||||
kubernetes.io/psp: eks.privileged
|
||||
|
||||
# Annotations to be added to the pod
|
||||
podAnnotations: {}
|
||||
|
||||
## Assign a PriorityClassName to pods if set
|
||||
# priorityClassName: ""
|
||||
|
||||
# Ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
||||
podDisruptionBudget: {}
|
||||
|
||||
# Comma-separated list of metrics to be exposed.
|
||||
# This list comprises of exact metric names and/or regex patterns.
|
||||
# The allowlist and denylist are mutually exclusive.
|
||||
metricAllowlist: []
|
||||
|
||||
# Comma-separated list of metrics not to be enabled.
|
||||
# This list comprises of exact metric names and/or regex patterns.
|
||||
# The allowlist and denylist are mutually exclusive.
|
||||
metricDenylist: []
|
||||
|
||||
# Comma-separated list of additional Kubernetes label keys that will be used in the resource's
|
||||
# labels metric. By default the metric contains only name and namespace labels.
|
||||
# To include additional labels, provide a list of resource names in their plural form and Kubernetes
|
||||
# label keys you would like to allow for them (Example: '=namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...)'.
|
||||
# A single '*' can be provided per resource instead to allow any labels, but that has
|
||||
# severe performance implications (Example: '=pods=[*]').
|
||||
metricLabelsAllowlist:
|
||||
- pods=[*]
|
||||
- nodes=[*]
|
||||
- deployments=[*]
|
||||
- statefulsets=[*]
|
||||
- persistentvolumeclaims=[*]
|
||||
- persistentvolumes=[*]
|
||||
- ingresses=[*]
|
||||
- namespaces=[*]
|
||||
- horizontalpodautoscalers=[*]
|
||||
# - namespaces=[k8s-label-1,k8s-label-n]
|
||||
|
||||
# Comma-separated list of Kubernetes annotations keys that will be used in the resource'
|
||||
# labels metric. By default the metric contains only name and namespace labels.
|
||||
# To include additional annotations provide a list of resource names in their plural form and Kubernetes
|
||||
# annotation keys you would like to allow for them (Example: '=namespaces=[kubernetes.io/team,...],pods=[kubernetes.io/team],...)'.
|
||||
# A single '*' can be provided per resource instead to allow any annotations, but that has
|
||||
# severe performance implications (Example: '=pods=[*]').
|
||||
metricAnnotationsAllowList: []
|
||||
# - pods=[k8s-annotation-1,k8s-annotation-n]
|
||||
|
||||
# Available collectors for kube-state-metrics.
|
||||
# By default, all available resources are enabled, comment out to disable.
|
||||
collectors:
|
||||
- certificatesigningrequests
|
||||
- configmaps
|
||||
- cronjobs
|
||||
- daemonsets
|
||||
- deployments
|
||||
- endpoints
|
||||
- horizontalpodautoscalers
|
||||
- ingresses
|
||||
- jobs
|
||||
- leases
|
||||
- limitranges
|
||||
- mutatingwebhookconfigurations
|
||||
- namespaces
|
||||
- networkpolicies
|
||||
- nodes
|
||||
- persistentvolumeclaims
|
||||
- persistentvolumes
|
||||
- poddisruptionbudgets
|
||||
- pods
|
||||
- replicasets
|
||||
- replicationcontrollers
|
||||
- resourcequotas
|
||||
- secrets
|
||||
- services
|
||||
- statefulsets
|
||||
- storageclasses
|
||||
- validatingwebhookconfigurations
|
||||
- volumeattachments
|
||||
|
||||
# Enabling kubeconfig will pass the --kubeconfig argument to the container
|
||||
kubeconfig:
|
||||
enabled: false
|
||||
# base64 encoded kube-config file
|
||||
secret:
|
||||
|
||||
# Enabling support for customResourceState, will create a configMap including your config that will be read from kube-state-metrics
|
||||
customResourceState:
|
||||
enabled: false
|
||||
# Add (Cluster)Role permissions to list/watch the customResources defined in the config to rbac.extraRules
|
||||
config: {}
|
||||
|
||||
# Enable only the release namespace for collecting resources. By default all namespaces are collected.
|
||||
# If releaseNamespace and namespaces are both set a merged list will be collected.
|
||||
releaseNamespace: false
|
||||
|
||||
# Comma-separated list(string) or yaml list of namespaces to be enabled for collecting resources. By default all namespaces are collected.
|
||||
namespaces: ""
|
||||
|
||||
# Comma-separated list of namespaces not to be enabled. If namespaces and namespaces-denylist are both set,
|
||||
# only namespaces that are excluded in namespaces-denylist will be used.
|
||||
namespacesDenylist: ""
|
||||
|
||||
## Override the deployment namespace
|
||||
##
|
||||
namespaceOverride: ""
|
||||
|
||||
resources:
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 50Mi
|
||||
|
||||
## Provide a k8s version to define apiGroups for podSecurityPolicy Cluster Role.
|
||||
## For example: kubeTargetVersionOverride: 1.14.9
|
||||
##
|
||||
kubeTargetVersionOverride: ""
|
||||
|
||||
# Enable self metrics configuration for service and Service Monitor
|
||||
# Default values for telemetry configuration can be overridden
|
||||
# If you set telemetryNodePort, you must also set service.type to NodePort
|
||||
selfMonitor:
|
||||
enabled: true
|
||||
# telemetryHost: 0.0.0.0
|
||||
telemetryPort: 8081
|
||||
# telemetryNodePort: 0
|
||||
|
||||
# Enable vertical pod autoscaler support for kube-state-metrics
|
||||
verticalPodAutoscaler:
|
||||
enabled: false
|
||||
# List of resources that the vertical pod autoscaler can control. Defaults to cpu and memory
|
||||
controlledResources: []
|
||||
|
||||
# Define the max allowed resources for the pod
|
||||
maxAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
# Define the min allowed resources for the pod
|
||||
minAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
|
||||
# updatePolicy:
|
||||
# Specifies whether recommended updates are applied when a Pod is started and whether recommended updates
|
||||
# are applied during the life of a Pod. Possible values are "Off", "Initial", "Recreate", and "Auto".
|
||||
# updateMode: Auto
|
||||
|
||||
# volumeMounts are used to add custom volume mounts to deployment.
|
||||
# See example below
|
||||
volumeMounts: []
|
||||
# - mountPath: /etc/config
|
||||
# name: config-volume
|
||||
|
||||
# volumes are used to add custom volumes to deployment
|
||||
# See example below
|
||||
volumes: []
|
||||
# - configMap:
|
||||
# name: cm-for-volume
|
||||
# name: config-volume
|
||||
-296
@@ -1,296 +0,0 @@
|
||||
# Default values for victoria-metrics-agent.
|
||||
# This is a YAML-formatted file.
|
||||
# Declare variables to be passed into your templates.
|
||||
|
||||
replicaCount: 2
|
||||
|
||||
fullnameOverride: vmagent-dbc-dsci-prd
|
||||
# vmagent scraping configuration:
|
||||
# https://github.com/VictoriaMetrics/VictoriaMetrics/blob/master/docs/vmagent.md#how-to-collect-metrics-in-prometheus-format
|
||||
|
||||
# use existing configmap if specified
|
||||
# otherwise .config values will be used
|
||||
configMap: "vmagent-dbc-dsci-prd-config" # Use same name as in fullnameOverride-config
|
||||
|
||||
dedicatedValue: false
|
||||
|
||||
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: ScheduleAnyway
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmagent
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmagent
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
# vmagent pods will take almost 20-25 mins to work properly
|
||||
minReadySeconds: 180
|
||||
progressDeadlineSeconds: 300
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
|
||||
strategy: {}
|
||||
# rollingUpdate:
|
||||
# maxSurge: 25%
|
||||
# maxUnavailable: 25%
|
||||
# type: RollingUpdate
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/
|
||||
statefulset:
|
||||
enabled: false
|
||||
# -- create cluster of vmagents. See https://docs.victoriametrics.com/vmagent.html#scraping-big-number-of-targets
|
||||
# available since 1.77.2 version https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.77.2
|
||||
clusterMode: false
|
||||
# -- replication factor for vmagent in cluster mode
|
||||
replicationFactor: 1
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies
|
||||
updateStrategy: {}
|
||||
# type: RollingUpdate
|
||||
|
||||
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/vmagent
|
||||
tag: v1.93.7-cluster # rewrites Chart.AppVersion
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
imagePullSecrets: []
|
||||
nameOverride: ""
|
||||
|
||||
containerWorkingDir: "/"
|
||||
|
||||
rbac:
|
||||
create: true
|
||||
# Note: The PSP will only be deployed, if Kubernetes (<1.25) supports the resource.
|
||||
pspEnabled: true
|
||||
annotations: {}
|
||||
extraLabels: {}
|
||||
# -- if true and `rbac.enabled`, will deploy a Role/Rolebinding instead of a ClusterRole/ClusterRoleBinding
|
||||
namespaced: false
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a service account should be created
|
||||
create: true
|
||||
# Annotations to add to the service account
|
||||
annotations: {
|
||||
iam.gke.io/gcp-service-account: sa-dbc-desre-vmagent-prd@meesho-dbc-prd-0622.iam.gserviceaccount.com
|
||||
}
|
||||
# The name of the service account to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name:
|
||||
|
||||
## See `kubectl explain poddisruptionbudget.spec` for more
|
||||
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
||||
podDisruptionBudget:
|
||||
enabled: false
|
||||
# minAvailable: 1
|
||||
# maxUnavailable: 1
|
||||
labels: {}
|
||||
|
||||
# WARN: need to specify at least one remote write url or one multi tenant url
|
||||
# remoteWriteUrls: []
|
||||
remoteWriteUrls:
|
||||
# - https://vminsert-prd-dbc.meeshogcp.in/insert/100/prometheus/api/v1/write
|
||||
- http://vminsert-dbc-prd.meeshogcp.in/insert/100/prometheus/api/v1/write
|
||||
# - http://prometheus:8480/insert/0/prometheus
|
||||
|
||||
multiTenantUrls: []
|
||||
# multiTenantUrls:
|
||||
# - http://vm-insert-az1:8480
|
||||
# - http://vm-insert-az2:8480
|
||||
|
||||
extraArgs:
|
||||
envflag.enable: "true"
|
||||
envflag.prefix: VM_
|
||||
loggerFormat: json
|
||||
promscrape.config.strictParse: false
|
||||
promscrape.maxScrapeSize: 1000000000
|
||||
promscrape.minResponseSizeForStreamParse: 1000000
|
||||
loggerTimezone: "Asia/Kolkata"
|
||||
|
||||
# Uncomment and specify the port if you want to support any of the protocols:
|
||||
# https://victoriametrics.github.io/vmagent.html#features
|
||||
# graphiteListenAddr: ":2003"
|
||||
# influxListenAddr: ":8189"
|
||||
# opentsdbHTTPListenAddr: ":4242"
|
||||
# opentsdbListenAddr: ":4242"
|
||||
|
||||
# -- Additional environment variables (ex.: secret tokens, flags) https://github.com/VictoriaMetrics/VictoriaMetrics#environment-variables
|
||||
env:
|
||||
[]
|
||||
# - name: VM_remoteWrite_basicAuth_password
|
||||
# valueFrom:
|
||||
# secretKeyRef:
|
||||
# name: auth_secret
|
||||
# key: password
|
||||
|
||||
# extra Labels for Pods, Deployment and Statefulset
|
||||
extraLabels:
|
||||
bu: "dbc-dsci"
|
||||
team: "dbc-dsci-sre"
|
||||
service: "vmagent-dbc-dsci-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "vmagent"
|
||||
|
||||
|
||||
|
||||
# extra Labels for Pods only
|
||||
podLabels: {}
|
||||
|
||||
# Additional hostPath mounts
|
||||
extraHostPathMounts:
|
||||
[]
|
||||
# - name: certs-dir
|
||||
# mountPath: /etc/kubernetes/certs
|
||||
# subPath: ""
|
||||
# hostPath: /etc/kubernetes/certs
|
||||
# readOnly: true
|
||||
|
||||
# Extra Volumes for the pod
|
||||
extraVolumes:
|
||||
[]
|
||||
# - name: example
|
||||
# configMap:
|
||||
# name: example
|
||||
|
||||
# Extra Volume Mounts for the container
|
||||
extraVolumeMounts:
|
||||
[]
|
||||
# - name: example
|
||||
# mountPath: /example
|
||||
|
||||
extraContainers: []
|
||||
# - name: config-reloader
|
||||
# image: reloader-image
|
||||
|
||||
podSecurityContext:
|
||||
{}
|
||||
# fsGroup: 2000
|
||||
|
||||
securityContext:
|
||||
{}
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
|
||||
service:
|
||||
enabled: true
|
||||
annotations: {}
|
||||
# cloud.google.com/neg: '{"exposed_ports": {"8429":{"name": "vmagent-dbc-prd"}}}'
|
||||
extraLabels: {}
|
||||
clusterIP: ""
|
||||
## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
|
||||
##
|
||||
externalIPs: []
|
||||
loadBalancerIP: ""
|
||||
loadBalancerSourceRanges: []
|
||||
servicePort: 8429
|
||||
# nodePort: 30000
|
||||
type: ClusterIP
|
||||
# Ref: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
|
||||
# externalTrafficPolicy: "local"
|
||||
# healthCheckNodePort: 0
|
||||
ingress:
|
||||
enabled: true
|
||||
ingressClassName: nginx-internal
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
|
||||
extraLabels: {}
|
||||
hosts:
|
||||
- name: vmagent-dbc-dsci-prd.meeshogcp.in
|
||||
path: /
|
||||
port: http
|
||||
tls: []
|
||||
# - secretName: vmagent-ingress-tls
|
||||
# hosts:
|
||||
# - vmagent.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
|
||||
resources:
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 128Mi
|
||||
requests:
|
||||
cpu: 2
|
||||
memory: 4Gi
|
||||
|
||||
# Annotations to be added to the deployment
|
||||
annotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8429"
|
||||
|
||||
# Annotations to be added to pod
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8429"
|
||||
|
||||
nodeSelector:
|
||||
dedicated: "devops"
|
||||
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
|
||||
affinity: {}
|
||||
|
||||
# -- priority class to be assigned to the pod(s)
|
||||
priorityClassName: ""
|
||||
|
||||
serviceMonitor:
|
||||
enabled: false
|
||||
extraLabels: {}
|
||||
annotations: {}
|
||||
relabelings: []
|
||||
# interval: 15s
|
||||
# scrapeTimeout: 5s
|
||||
# -- Commented. HTTP scheme to use for scraping.
|
||||
# scheme: https
|
||||
# -- Commented. TLS configuration to use when scraping the endpoint
|
||||
# tlsConfig:
|
||||
# insecureSkipVerify: true
|
||||
|
||||
persistence:
|
||||
enabled: false
|
||||
# storageClassName: default
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
size: 10Gi
|
||||
annotations: {}
|
||||
extraLabels: {}
|
||||
existingClaim: ""
|
||||
# -- Bind Persistent Volume by labels. Must match all labels of targeted PV.
|
||||
matchLabels: {}
|
||||
|
||||
# -- Extra scrape configs that will be appended to `config`
|
||||
extraScrapeConfigs: []
|
||||
|
||||
# Add extra specs dynamically to this chart
|
||||
extraObjects: []
|
||||
-26
@@ -1,26 +0,0 @@
|
||||
ingress-nginx:
|
||||
controller:
|
||||
metrics:
|
||||
enabled: true
|
||||
podAnnotations:
|
||||
prometheus.io/port: "10254"
|
||||
prometheus.io/scrape: "true"
|
||||
autoscaling:
|
||||
enabled: true
|
||||
minReplicas: 3
|
||||
maxReplicas: 6
|
||||
targetCPUUtilizationPercentage: 60
|
||||
targetMemoryUtilizationPercentage: 60
|
||||
ingressClassResource:
|
||||
name: nginx-internal
|
||||
service:
|
||||
type: ClusterIP
|
||||
annotations:
|
||||
cloud.google.com/neg: '{"exposed_ports": {"80":{"name": "nginx-dbc-internal-prd"}}}'
|
||||
nodeSelector:
|
||||
dedicated: devops
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "devops"
|
||||
effect: "NoSchedule"
|
||||
-478
@@ -1,478 +0,0 @@
|
||||
# Default values for kube-state-metrics.
|
||||
prometheusScrape: true
|
||||
image:
|
||||
registry: asia-southeast1-docker.pkg.dev
|
||||
repository: meesho-devops-admin-0622/admin/sre/kube-state-metrics
|
||||
# If unset use v + .Charts.appVersion
|
||||
tag: v2.9.2
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
fullnameOverride: kube-state-metrics-dbc-dengg-prd
|
||||
|
||||
dedicatedValue: false
|
||||
|
||||
imagePullSecrets: []
|
||||
# - name: "image-pull-secret"
|
||||
|
||||
ingress:
|
||||
enabled: false
|
||||
ingressClassName: internal
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
|
||||
extraLabels: {}
|
||||
hosts:
|
||||
- name: clustermetrics-dbc-dengg-prd.meesho.com
|
||||
path: /
|
||||
port: http
|
||||
tls: []
|
||||
# - secretName: vmagent-ingress-tls
|
||||
# hosts:
|
||||
# - vmagent.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
|
||||
global:
|
||||
# To help compatibility with other charts which use global.imagePullSecrets.
|
||||
# Allow either an array of {name: pullSecret} maps (k8s-style), or an array of strings (more common helm-style).
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - name: pullSecret1
|
||||
# - name: pullSecret2
|
||||
# or
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - pullSecret1
|
||||
# - pullSecret2
|
||||
imagePullSecrets: []
|
||||
#
|
||||
# Allow parent charts to override registry hostname
|
||||
imageRegistry: ""
|
||||
|
||||
# If set to true, this will deploy kube-state-metrics as a StatefulSet and the data
|
||||
# will be automatically sharded across <.Values.replicas> pods using the built-in
|
||||
# autodiscovery feature: https://github.com/kubernetes/kube-state-metrics#automated-sharding
|
||||
# This is an experimental feature and there are no stability guarantees.
|
||||
autosharding:
|
||||
enabled: false
|
||||
|
||||
replicas: 2
|
||||
|
||||
# List of additional cli arguments to configure kube-state-metrics
|
||||
# for example: --enable-gzip-encoding, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/kubernetes/kube-state-metrics/blob/master/docs/cli-arguments.md
|
||||
extraArgs: []
|
||||
|
||||
service:
|
||||
port: 8080
|
||||
# Default to clusterIP for backward compatibility
|
||||
type: ClusterIP
|
||||
nodePort: 0
|
||||
loadBalancerIP: ""
|
||||
# Only allow access to the loadBalancerIP from these IPs
|
||||
loadBalancerSourceRanges: []
|
||||
clusterIP: ""
|
||||
annotations: {}
|
||||
|
||||
## Additional labels to add to all resources
|
||||
customLabels:
|
||||
bu: "dbc-dengg"
|
||||
team: "dbc-dengg-sre"
|
||||
service: "kube-state-metrics-dbc-dengg-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "exporter"
|
||||
|
||||
# app: kube-state-metrics
|
||||
|
||||
## Override selector labels
|
||||
selectorOverride: {}
|
||||
|
||||
## set to true to add the release label so scraping of the servicemonitor with kube-prometheus-stack works out of the box
|
||||
releaseLabel: false
|
||||
|
||||
hostNetwork: false
|
||||
|
||||
rbac:
|
||||
# If true, create & use RBAC resources
|
||||
create: true
|
||||
|
||||
# Set to a rolename to use existing role - skipping role creating - but still doing serviceaccount and rolebinding to it, rolename set here.
|
||||
# useExistingRole: your-existing-role
|
||||
|
||||
# If set to false - Run without Cluteradmin privs needed - ONLY works if namespace is also set (if useExistingRole is set this name is used as ClusterRole or Role to bind to)
|
||||
useClusterRole: true
|
||||
|
||||
# Add permissions for CustomResources' apiGroups in Role/ClusterRole. Should be used in conjunction with Custom Resource State Metrics configuration
|
||||
# Example:
|
||||
# - apiGroups: ["monitoring.coreos.com"]
|
||||
# resources: ["prometheuses"]
|
||||
# verbs: ["list", "watch"]
|
||||
extraRules: []
|
||||
|
||||
# Configure kube-rbac-proxy. When enabled, creates one kube-rbac-proxy container per exposed HTTP endpoint (metrics and telemetry if enabled).
|
||||
# The requests are served through the same service but requests are then HTTPS.
|
||||
kubeRBACProxy:
|
||||
enabled: false
|
||||
image:
|
||||
registry: quay.io
|
||||
repository: brancz/kube-rbac-proxy
|
||||
tag: v0.14.0
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# List of additional cli arguments to configure kube-rbac-prxy
|
||||
# for example: --tls-cipher-suites, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/brancz/kube-rbac-proxy#usage
|
||||
extraArgs: []
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext: {}
|
||||
|
||||
resources: {}
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
# requests:
|
||||
# cpu: 10m
|
||||
# memory: 32Mi
|
||||
|
||||
## volumeMounts enables mounting custom volumes in rbac-proxy containers
|
||||
## Useful for TLS certificates and keys
|
||||
volumeMounts: []
|
||||
# - mountPath: /etc/tls
|
||||
# name: kube-rbac-proxy-tls
|
||||
# readOnly: true
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a ServiceAccount should be created, require rbac true
|
||||
create: true
|
||||
# The name of the ServiceAccount to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name:
|
||||
# Reference to one or more secrets to be used when pulling images
|
||||
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
||||
imagePullSecrets: []
|
||||
# ServiceAccount annotations.
|
||||
# Use case: AWS EKS IAM roles for service accounts
|
||||
# ref: https://docs.aws.amazon.com/eks/latest/userguide/specify-service-account-role.html
|
||||
annotations: {}
|
||||
|
||||
prometheus:
|
||||
monitor:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
additionalLabels: {}
|
||||
namespace: ""
|
||||
jobLabel: ""
|
||||
targetLabels: []
|
||||
podTargetLabels: []
|
||||
interval: ""
|
||||
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
|
||||
##
|
||||
sampleLimit: 0
|
||||
|
||||
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
|
||||
##
|
||||
targetLimit: 0
|
||||
|
||||
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelNameLengthLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelValueLengthLimit: 0
|
||||
scrapeTimeout: ""
|
||||
proxyUrl: ""
|
||||
selectorOverride: {}
|
||||
honorLabels: false
|
||||
metricRelabelings: []
|
||||
relabelings: []
|
||||
scheme: ""
|
||||
## File to read bearer token for scraping targets
|
||||
bearerTokenFile: ""
|
||||
## Secret to mount to read bearer token for scraping targets. The secret needs
|
||||
## to be in the same namespace as the service monitor and accessible by the
|
||||
## Prometheus Operator
|
||||
bearerTokenSecret: {}
|
||||
# name: secret-name
|
||||
# key: key-name
|
||||
tlsConfig: {}
|
||||
|
||||
## Specify if a Pod Security Policy for kube-state-metrics must be created
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
|
||||
##
|
||||
podSecurityPolicy:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
## Specify pod annotations
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#apparmor
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#seccomp
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#sysctl
|
||||
##
|
||||
# seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
|
||||
# seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
|
||||
# apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
|
||||
|
||||
additionalVolumes: []
|
||||
|
||||
## Configure network policy for kube-state-metrics
|
||||
networkPolicy:
|
||||
enabled: false
|
||||
# networkPolicy.flavor -- Flavor of the network policy to use.
|
||||
# Can be:
|
||||
# * kubernetes for networking.k8s.io/v1/NetworkPolicy
|
||||
# * cilium for cilium.io/v2/CiliumNetworkPolicy
|
||||
flavor: kubernetes
|
||||
|
||||
## Configure the cilium network policy kube-apiserver selector
|
||||
# cilium:
|
||||
# kubeApiServerSelector:
|
||||
# - toEntities:
|
||||
# - kube-apiserver
|
||||
|
||||
# egress:
|
||||
# - {}
|
||||
# ingress:
|
||||
# - {}
|
||||
# podSelector:
|
||||
# matchLabels:
|
||||
# app.kubernetes.io/name: kube-state-metrics
|
||||
|
||||
securityContext:
|
||||
enabled: true
|
||||
runAsGroup: 65534
|
||||
runAsUser: 65534
|
||||
fsGroup: 65534
|
||||
runAsNonRoot: true
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
|
||||
## Node labels for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
|
||||
nodeSelector:
|
||||
dedicated: "devops"
|
||||
|
||||
## Affinity settings for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
|
||||
affinity: {}
|
||||
|
||||
## Tolerations for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
## Topology spread constraints for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: exporter
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: exporter
|
||||
|
||||
# Annotations to be added to the deployment/statefulset
|
||||
annotations:
|
||||
kubernetes.io/psp: eks.privileged
|
||||
|
||||
# Annotations to be added to the pod
|
||||
podAnnotations: {}
|
||||
|
||||
## Assign a PriorityClassName to pods if set
|
||||
# priorityClassName: ""
|
||||
|
||||
# Ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
||||
podDisruptionBudget: {}
|
||||
|
||||
# Comma-separated list of metrics to be exposed.
|
||||
# This list comprises of exact metric names and/or regex patterns.
|
||||
# The allowlist and denylist are mutually exclusive.
|
||||
metricAllowlist: []
|
||||
|
||||
# Comma-separated list of metrics not to be enabled.
|
||||
# This list comprises of exact metric names and/or regex patterns.
|
||||
# The allowlist and denylist are mutually exclusive.
|
||||
metricDenylist: []
|
||||
|
||||
# Comma-separated list of additional Kubernetes label keys that will be used in the resource's
|
||||
# labels metric. By default the metric contains only name and namespace labels.
|
||||
# To include additional labels, provide a list of resource names in their plural form and Kubernetes
|
||||
# label keys you would like to allow for them (Example: '=namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...)'.
|
||||
# A single '*' can be provided per resource instead to allow any labels, but that has
|
||||
# severe performance implications (Example: '=pods=[*]').
|
||||
metricLabelsAllowlist:
|
||||
- pods=[*]
|
||||
- nodes=[*]
|
||||
- deployments=[*]
|
||||
- statefulsets=[*]
|
||||
- persistentvolumeclaims=[*]
|
||||
- persistentvolumes=[*]
|
||||
- ingresses=[*]
|
||||
- namespaces=[*]
|
||||
- horizontalpodautoscalers=[*]
|
||||
# - namespaces=[k8s-label-1,k8s-label-n]
|
||||
|
||||
# Comma-separated list of Kubernetes annotations keys that will be used in the resource'
|
||||
# labels metric. By default the metric contains only name and namespace labels.
|
||||
# To include additional annotations provide a list of resource names in their plural form and Kubernetes
|
||||
# annotation keys you would like to allow for them (Example: '=namespaces=[kubernetes.io/team,...],pods=[kubernetes.io/team],...)'.
|
||||
# A single '*' can be provided per resource instead to allow any annotations, but that has
|
||||
# severe performance implications (Example: '=pods=[*]').
|
||||
metricAnnotationsAllowList: []
|
||||
# - pods=[k8s-annotation-1,k8s-annotation-n]
|
||||
|
||||
# Available collectors for kube-state-metrics.
|
||||
# By default, all available resources are enabled, comment out to disable.
|
||||
collectors:
|
||||
- certificatesigningrequests
|
||||
- configmaps
|
||||
- cronjobs
|
||||
- daemonsets
|
||||
- deployments
|
||||
- endpoints
|
||||
- horizontalpodautoscalers
|
||||
- ingresses
|
||||
- jobs
|
||||
- leases
|
||||
- limitranges
|
||||
- mutatingwebhookconfigurations
|
||||
- namespaces
|
||||
- networkpolicies
|
||||
- nodes
|
||||
- persistentvolumeclaims
|
||||
- persistentvolumes
|
||||
- poddisruptionbudgets
|
||||
- pods
|
||||
- replicasets
|
||||
- replicationcontrollers
|
||||
- resourcequotas
|
||||
- secrets
|
||||
- services
|
||||
- statefulsets
|
||||
- storageclasses
|
||||
- validatingwebhookconfigurations
|
||||
- volumeattachments
|
||||
|
||||
# Enabling kubeconfig will pass the --kubeconfig argument to the container
|
||||
kubeconfig:
|
||||
enabled: false
|
||||
# base64 encoded kube-config file
|
||||
secret:
|
||||
|
||||
# Enabling support for customResourceState, will create a configMap including your config that will be read from kube-state-metrics
|
||||
customResourceState:
|
||||
enabled: false
|
||||
# Add (Cluster)Role permissions to list/watch the customResources defined in the config to rbac.extraRules
|
||||
config: {}
|
||||
|
||||
# Enable only the release namespace for collecting resources. By default all namespaces are collected.
|
||||
# If releaseNamespace and namespaces are both set a merged list will be collected.
|
||||
releaseNamespace: false
|
||||
|
||||
# Comma-separated list(string) or yaml list of namespaces to be enabled for collecting resources. By default all namespaces are collected.
|
||||
namespaces: ""
|
||||
|
||||
# Comma-separated list of namespaces not to be enabled. If namespaces and namespaces-denylist are both set,
|
||||
# only namespaces that are excluded in namespaces-denylist will be used.
|
||||
namespacesDenylist: ""
|
||||
|
||||
## Override the deployment namespace
|
||||
##
|
||||
namespaceOverride: ""
|
||||
|
||||
resources:
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 50Mi
|
||||
|
||||
## Provide a k8s version to define apiGroups for podSecurityPolicy Cluster Role.
|
||||
## For example: kubeTargetVersionOverride: 1.14.9
|
||||
##
|
||||
kubeTargetVersionOverride: ""
|
||||
|
||||
# Enable self metrics configuration for service and Service Monitor
|
||||
# Default values for telemetry configuration can be overridden
|
||||
# If you set telemetryNodePort, you must also set service.type to NodePort
|
||||
selfMonitor:
|
||||
enabled: true
|
||||
# telemetryHost: 0.0.0.0
|
||||
telemetryPort: 8081
|
||||
# telemetryNodePort: 0
|
||||
|
||||
# Enable vertical pod autoscaler support for kube-state-metrics
|
||||
verticalPodAutoscaler:
|
||||
enabled: false
|
||||
# List of resources that the vertical pod autoscaler can control. Defaults to cpu and memory
|
||||
controlledResources: []
|
||||
|
||||
# Define the max allowed resources for the pod
|
||||
maxAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
# Define the min allowed resources for the pod
|
||||
minAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
|
||||
# updatePolicy:
|
||||
# Specifies whether recommended updates are applied when a Pod is started and whether recommended updates
|
||||
# are applied during the life of a Pod. Possible values are "Off", "Initial", "Recreate", and "Auto".
|
||||
# updateMode: Auto
|
||||
|
||||
# volumeMounts are used to add custom volume mounts to deployment.
|
||||
# See example below
|
||||
volumeMounts: []
|
||||
# - mountPath: /etc/config
|
||||
# name: config-volume
|
||||
|
||||
# volumes are used to add custom volumes to deployment
|
||||
# See example below
|
||||
volumes: []
|
||||
# - configMap:
|
||||
# name: cm-for-volume
|
||||
# name: config-volume
|
||||
-296
@@ -1,296 +0,0 @@
|
||||
# Default values for victoria-metrics-agent.
|
||||
# This is a YAML-formatted file.
|
||||
# Declare variables to be passed into your templates.
|
||||
|
||||
replicaCount: 2
|
||||
|
||||
fullnameOverride: vmagent-dbc-dengg-prd
|
||||
# vmagent scraping configuration:
|
||||
# https://github.com/VictoriaMetrics/VictoriaMetrics/blob/master/docs/vmagent.md#how-to-collect-metrics-in-prometheus-format
|
||||
|
||||
# use existing configmap if specified
|
||||
# otherwise .config values will be used
|
||||
configMap: "vmagent-dbc-dengg-prd-config" # Use same name as in fullnameOverride-config
|
||||
|
||||
dedicatedValue: false
|
||||
|
||||
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: ScheduleAnyway
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmagent
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmagent
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
# vmagent pods will take almost 20-25 mins to work properly
|
||||
minReadySeconds: 180
|
||||
progressDeadlineSeconds: 300
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
|
||||
strategy: {}
|
||||
# rollingUpdate:
|
||||
# maxSurge: 25%
|
||||
# maxUnavailable: 25%
|
||||
# type: RollingUpdate
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/
|
||||
statefulset:
|
||||
enabled: false
|
||||
# -- create cluster of vmagents. See https://docs.victoriametrics.com/vmagent.html#scraping-big-number-of-targets
|
||||
# available since 1.77.2 version https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.77.2
|
||||
clusterMode: false
|
||||
# -- replication factor for vmagent in cluster mode
|
||||
replicationFactor: 1
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies
|
||||
updateStrategy: {}
|
||||
# type: RollingUpdate
|
||||
|
||||
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/vmagent
|
||||
tag: v1.93.7-cluster # rewrites Chart.AppVersion
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
imagePullSecrets: []
|
||||
nameOverride: ""
|
||||
|
||||
containerWorkingDir: "/"
|
||||
|
||||
rbac:
|
||||
create: true
|
||||
# Note: The PSP will only be deployed, if Kubernetes (<1.25) supports the resource.
|
||||
pspEnabled: true
|
||||
annotations: {}
|
||||
extraLabels: {}
|
||||
# -- if true and `rbac.enabled`, will deploy a Role/Rolebinding instead of a ClusterRole/ClusterRoleBinding
|
||||
namespaced: false
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a service account should be created
|
||||
create: true
|
||||
# Annotations to add to the service account
|
||||
annotations: {
|
||||
iam.gke.io/gcp-service-account: sa-dbc-desre-vmagent-prd@meesho-dbc-prd-0622.iam.gserviceaccount.com
|
||||
}
|
||||
# The name of the service account to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name:
|
||||
|
||||
## See `kubectl explain poddisruptionbudget.spec` for more
|
||||
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
||||
podDisruptionBudget:
|
||||
enabled: false
|
||||
# minAvailable: 1
|
||||
# maxUnavailable: 1
|
||||
labels: {}
|
||||
|
||||
# WARN: need to specify at least one remote write url or one multi tenant url
|
||||
# remoteWriteUrls: []
|
||||
remoteWriteUrls:
|
||||
# - https://vminsert-prd-dbc.meeshogcp.in/insert/100/prometheus/api/v1/write
|
||||
- http://vminsert-dbc-prd.meeshogcp.in/insert/100/prometheus/api/v1/write
|
||||
# - http://prometheus:8480/insert/0/prometheus
|
||||
|
||||
multiTenantUrls: []
|
||||
# multiTenantUrls:
|
||||
# - http://vm-insert-az1:8480
|
||||
# - http://vm-insert-az2:8480
|
||||
|
||||
extraArgs:
|
||||
envflag.enable: "true"
|
||||
envflag.prefix: VM_
|
||||
loggerFormat: json
|
||||
promscrape.config.strictParse: false
|
||||
promscrape.maxScrapeSize: 1000000000
|
||||
promscrape.minResponseSizeForStreamParse: 1000000
|
||||
loggerTimezone: "Asia/Kolkata"
|
||||
|
||||
# Uncomment and specify the port if you want to support any of the protocols:
|
||||
# https://victoriametrics.github.io/vmagent.html#features
|
||||
# graphiteListenAddr: ":2003"
|
||||
# influxListenAddr: ":8189"
|
||||
# opentsdbHTTPListenAddr: ":4242"
|
||||
# opentsdbListenAddr: ":4242"
|
||||
|
||||
# -- Additional environment variables (ex.: secret tokens, flags) https://github.com/VictoriaMetrics/VictoriaMetrics#environment-variables
|
||||
env:
|
||||
[]
|
||||
# - name: VM_remoteWrite_basicAuth_password
|
||||
# valueFrom:
|
||||
# secretKeyRef:
|
||||
# name: auth_secret
|
||||
# key: password
|
||||
|
||||
# extra Labels for Pods, Deployment and Statefulset
|
||||
extraLabels:
|
||||
bu: "dbc-dengg"
|
||||
team: "dbc-dengg-sre"
|
||||
service: "vmagent-dbc-dengg-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "vmagent"
|
||||
|
||||
|
||||
|
||||
# extra Labels for Pods only
|
||||
podLabels: {}
|
||||
|
||||
# Additional hostPath mounts
|
||||
extraHostPathMounts:
|
||||
[]
|
||||
# - name: certs-dir
|
||||
# mountPath: /etc/kubernetes/certs
|
||||
# subPath: ""
|
||||
# hostPath: /etc/kubernetes/certs
|
||||
# readOnly: true
|
||||
|
||||
# Extra Volumes for the pod
|
||||
extraVolumes:
|
||||
[]
|
||||
# - name: example
|
||||
# configMap:
|
||||
# name: example
|
||||
|
||||
# Extra Volume Mounts for the container
|
||||
extraVolumeMounts:
|
||||
[]
|
||||
# - name: example
|
||||
# mountPath: /example
|
||||
|
||||
extraContainers: []
|
||||
# - name: config-reloader
|
||||
# image: reloader-image
|
||||
|
||||
podSecurityContext:
|
||||
{}
|
||||
# fsGroup: 2000
|
||||
|
||||
securityContext:
|
||||
{}
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
|
||||
service:
|
||||
enabled: true
|
||||
annotations: {}
|
||||
# cloud.google.com/neg: '{"exposed_ports": {"8429":{"name": "vmagent-dbc-prd"}}}'
|
||||
extraLabels: {}
|
||||
clusterIP: ""
|
||||
## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
|
||||
##
|
||||
externalIPs: []
|
||||
loadBalancerIP: ""
|
||||
loadBalancerSourceRanges: []
|
||||
servicePort: 8429
|
||||
# nodePort: 30000
|
||||
type: ClusterIP
|
||||
# Ref: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
|
||||
# externalTrafficPolicy: "local"
|
||||
# healthCheckNodePort: 0
|
||||
ingress:
|
||||
enabled: true
|
||||
ingressClassName: nginx-internal
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
|
||||
extraLabels: {}
|
||||
hosts:
|
||||
- name: vmagent-dbc-dengg-prd.meeshogcp.in
|
||||
path: /
|
||||
port: http
|
||||
tls: []
|
||||
# - secretName: vmagent-ingress-tls
|
||||
# hosts:
|
||||
# - vmagent.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
|
||||
resources:
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 128Mi
|
||||
requests:
|
||||
cpu: 2
|
||||
memory: 4Gi
|
||||
|
||||
# Annotations to be added to the deployment
|
||||
annotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8429"
|
||||
|
||||
# Annotations to be added to pod
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8429"
|
||||
|
||||
nodeSelector:
|
||||
dedicated: "devops"
|
||||
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
|
||||
affinity: {}
|
||||
|
||||
# -- priority class to be assigned to the pod(s)
|
||||
priorityClassName: ""
|
||||
|
||||
serviceMonitor:
|
||||
enabled: false
|
||||
extraLabels: {}
|
||||
annotations: {}
|
||||
relabelings: []
|
||||
# interval: 15s
|
||||
# scrapeTimeout: 5s
|
||||
# -- Commented. HTTP scheme to use for scraping.
|
||||
# scheme: https
|
||||
# -- Commented. TLS configuration to use when scraping the endpoint
|
||||
# tlsConfig:
|
||||
# insecureSkipVerify: true
|
||||
|
||||
persistence:
|
||||
enabled: false
|
||||
# storageClassName: default
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
size: 10Gi
|
||||
annotations: {}
|
||||
extraLabels: {}
|
||||
existingClaim: ""
|
||||
# -- Bind Persistent Volume by labels. Must match all labels of targeted PV.
|
||||
matchLabels: {}
|
||||
|
||||
# -- Extra scrape configs that will be appended to `config`
|
||||
extraScrapeConfigs: []
|
||||
|
||||
# Add extra specs dynamically to this chart
|
||||
extraObjects: []
|
||||
-234
@@ -1,234 +0,0 @@
|
||||
vmselect:
|
||||
enabled: false
|
||||
|
||||
vmstorage:
|
||||
enabled: false
|
||||
fullnameOverride: vmstorage-dbc-prd
|
||||
replicaCount: 5
|
||||
|
||||
dedicatedValue: false
|
||||
# schedulerName: default-scheduler
|
||||
|
||||
vminsert:
|
||||
# -- Enable deployment of vminsert component. Deployment is used
|
||||
enabled: true
|
||||
# -- vminsert container name
|
||||
name: vminsert
|
||||
strategy: {}
|
||||
# rollingUpdate:
|
||||
# maxSurge: 25%
|
||||
# maxUnavailable: 25%
|
||||
# type: RollingUpdate
|
||||
image:
|
||||
# -- Image repository
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/vminsert
|
||||
# -- Image tag
|
||||
tag: v1.93.7-cluster
|
||||
# -- Image pull policy
|
||||
pullPolicy: IfNotPresent
|
||||
# -- Name of Priority Class
|
||||
priorityClassName: ""
|
||||
# -- Overrides the full name of vminsert component
|
||||
fullnameOverride: vminsert-dbc-prd
|
||||
# Extra command line arguments for vminsert component
|
||||
extraArgs:
|
||||
envflag.enable: "true"
|
||||
envflag.prefix: VM_
|
||||
loggerFormat: json
|
||||
maxLabelsPerTimeseries: 40
|
||||
replicationFactor: 1
|
||||
loggerTimezone: "Asia/Kolkata"
|
||||
|
||||
annotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8480"
|
||||
extraLabels:
|
||||
bu: "dbc"
|
||||
team: "sre"
|
||||
service: "vminsert-dbc-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "vminsert"
|
||||
# arch: "arm64"
|
||||
# runpod: "ondemand"
|
||||
|
||||
# -- Additional environment variables (ex.: secret tokens, flags) https://github.com/VictoriaMetrics/VictoriaMetrics#environment-variables
|
||||
env: []
|
||||
# -- Suppress rendering `--storageNode` FQDNs based on `vmstorage.replicaCount` value. If true suppress rendering `--storageNodes`, they can be re-defined in extraArgs
|
||||
suppresStorageFQDNsRender: false
|
||||
automountServiceAccountToken: true
|
||||
|
||||
# Readiness & Liveness probes
|
||||
probe:
|
||||
readiness:
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 15
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
liveness:
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 15
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
|
||||
# Horizontal Pod Autoscaling
|
||||
horizontalPodAutoscaler:
|
||||
# -- Use HPA for vminsert component
|
||||
enabled: true
|
||||
# -- Maximum replicas for HPA to use to to scale the vminsert component
|
||||
maxReplicas: 10
|
||||
# -- Minimum replicas for HPA to use to scale the vminsert component
|
||||
minReplicas: 2
|
||||
# -- Metric for HPA to use to scale the vminsert component
|
||||
metrics:
|
||||
- type: Resource
|
||||
resource:
|
||||
name: cpu
|
||||
target:
|
||||
type: Utilization
|
||||
averageUtilization: 40
|
||||
|
||||
# Extra Volumes for the pod
|
||||
extraVolumes:
|
||||
[]
|
||||
# - name: example
|
||||
# configMap:
|
||||
# name: example
|
||||
|
||||
# Extra Volume Mounts for the container
|
||||
extraVolumeMounts:
|
||||
[]
|
||||
# - name: example
|
||||
# mountPath: /example
|
||||
|
||||
extraContainers:
|
||||
[]
|
||||
# - name: config-reloader
|
||||
# image: reloader-image
|
||||
|
||||
initContainers:
|
||||
[]
|
||||
# - name: example
|
||||
# image: example-image
|
||||
|
||||
podDisruptionBudget:
|
||||
# -- See `kubectl explain poddisruptionbudget.spec` for more. Ref: [https://kubernetes.io/docs/tasks/run-application/configure-pdb/](https://kubernetes.io/docs/tasks/run-application/configure-pdb/)
|
||||
enabled: false
|
||||
# minAvailable: 1
|
||||
# maxUnavailable: 1
|
||||
labels: {}
|
||||
|
||||
# -- Array of tolerations object. Ref: [https://kubernetes.io/docs/concepts/configuration/assign-pod-node/](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/)
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "vmcommon"
|
||||
effect: "NoSchedule"
|
||||
|
||||
# -- Pod's node selector. Ref: [https://kubernetes.io/docs/user-guide/node-selection/](https://kubernetes.io/docs/user-guide/node-selection/)
|
||||
nodeSelector:
|
||||
dedicated: "vmcommon"
|
||||
|
||||
# -- Pod affinity
|
||||
affinity: {}
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: ScheduleAnyway
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vminsert
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vminsert
|
||||
# -- Pod's annotations
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8480"
|
||||
# -- Count of vminsert pods
|
||||
replicaCount: 2
|
||||
# -- Container workdir
|
||||
containerWorkingDir: ""
|
||||
# -- Resource object
|
||||
resources:
|
||||
# limits:
|
||||
# cpu: 50m
|
||||
# memory: 64Mi
|
||||
requests:
|
||||
cpu: 4
|
||||
memory: 2Gi
|
||||
# -- Pod's security context. Ref: [https://kubernetes.io/docs/tasks/configure-pod-container/security-context/](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)
|
||||
securityContext: {}
|
||||
podSecurityContext: {}
|
||||
service:
|
||||
# -- Service annotations
|
||||
annotations: {}
|
||||
# -- Service labels
|
||||
labels: {}
|
||||
# -- Service ClusterIP
|
||||
clusterIP: ""
|
||||
# -- Service External IPs. Ref: [https://kubernetes.io/docs/user-guide/services/#external-ips]( https://kubernetes.io/docs/user-guide/services/#external-ips)
|
||||
externalIPs: []
|
||||
# -- Extra service ports
|
||||
extraServicePorts: []
|
||||
# -- Service load balancer IP
|
||||
loadBalancerIP: ""
|
||||
# -- Load balancer source range
|
||||
loadBalancerSourceRanges: []
|
||||
# -- Service port
|
||||
servicePort: 8480
|
||||
# -- Target port
|
||||
targetPort: http
|
||||
# -- Service type
|
||||
type: ClusterIP
|
||||
# -- Enable UDP port. used if you have "spec.opentsdbListenAddr" specified
|
||||
# -- Make sure that service is not type "LoadBalancer", as it requires "MixedProtocolLBService" feature gate. ref: https://kubernetes.io/docs/reference/command-line-tools-reference/feature-gates/
|
||||
udp: false
|
||||
ingress:
|
||||
# -- Enable deployment of ingress for vminsert component
|
||||
enabled: true
|
||||
# -- Ingress annotations
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
extraLabels: {}
|
||||
# -- Array of host objects
|
||||
hosts:
|
||||
- name: vminsert-dbc-prd.meeshogcp.in
|
||||
path: /
|
||||
port: http
|
||||
# -- Array of TLS objects
|
||||
tls: []
|
||||
# - secretName: vminsert-ingress-tls
|
||||
# hosts:
|
||||
# - vminsert.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
ingressClassName: nginx-internal
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
serviceMonitor:
|
||||
# -- Enable deployment of Service Monitor for vminsert component. This is Prometheus operator object
|
||||
enabled: false
|
||||
# -- Target namespace of ServiceMonitor manifest
|
||||
namespace: ""
|
||||
# -- Service Monitor labels
|
||||
extraLabels: {}
|
||||
# -- Service Monitor annotations
|
||||
annotations: {}
|
||||
# Commented. Prometheus scare interval for vminsert component
|
||||
# interval: 15s
|
||||
# Commented. Prometheus pre-scrape timeout for vminsert component
|
||||
# scrapeTimeout: 5s
|
||||
# -- Commented. HTTP scheme to use for scraping.
|
||||
# scheme: https
|
||||
# -- Commented. TLS configuration to use when scraping the endpoint
|
||||
# tlsConfig:
|
||||
# insecureSkipVerify: true
|
||||
# -- Service Monitor relabelings
|
||||
relabelings: []
|
||||
-291
@@ -1,291 +0,0 @@
|
||||
vminsert:
|
||||
enabled: false
|
||||
|
||||
vmstorage:
|
||||
enabled: false
|
||||
fullnameOverride: vmstorage-dbc-prd
|
||||
replicaCount: 5
|
||||
|
||||
dedicatedValue: false
|
||||
|
||||
|
||||
vmselect:
|
||||
# -- Enable deployment of vmselect component. Can be deployed as Deployment(default) or StatefulSet
|
||||
enabled: true
|
||||
# -- Vmselect container name
|
||||
name: vmselect
|
||||
strategy: {}
|
||||
# rollingUpdate:
|
||||
# maxSurge: 25%
|
||||
# maxUnavailable: 25%
|
||||
# type: RollingUpdate
|
||||
#extraVMSelects: []
|
||||
|
||||
image:
|
||||
# -- Image repository
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/vmselect
|
||||
# -- Image tag
|
||||
tag: v1.93.7-cluster
|
||||
# -- Image pull policy
|
||||
pullPolicy: IfNotPresent
|
||||
# -- Name of Priority Class
|
||||
priorityClassName: ""
|
||||
# -- Overrides the full name of vmselect component
|
||||
fullnameOverride: vmselect-dbc-prd
|
||||
# -- Suppress rendering `--storageNode` FQDNs based on `vmstorage.replicaCount` value. If true suppress rendering `--storageNodes`, they can be re-defined in extraArgs
|
||||
suppresStorageFQDNsRender: false
|
||||
automountServiceAccountToken: true
|
||||
# Extra command line arguments for vmselect component
|
||||
splitService: True
|
||||
extraArgs:
|
||||
envflag.enable: "true"
|
||||
envflag.prefix: VM_
|
||||
loggerFormat: json
|
||||
clusternativeListenAddr: ":8401"
|
||||
dedup.minScrapeInterval: 60s
|
||||
search.maxSamplesPerQuery: "1000000000000"
|
||||
search.maxQueryDuration: 180s
|
||||
search.maxQueueDuration: 60s
|
||||
search.maxSeries: "10000000000"
|
||||
search.maxExportSeries: "1000000000"
|
||||
search.maxUniqueTimeseries: "1000000000000"
|
||||
search.maxQueryLen: "1000000"
|
||||
loggerTimezone: "Asia/Kolkata"
|
||||
|
||||
annotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8481"
|
||||
extraLabels:
|
||||
bu: "dbc"
|
||||
team: "dbc-sre"
|
||||
service: "vmselect-dbc-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "vmselect"
|
||||
# arch: "arm64"
|
||||
# runpod: "ondemand"
|
||||
|
||||
# -- Additional environment variables (ex.: secret tokens, flags) https://github.com/VictoriaMetrics/VictoriaMetrics#environment-variables
|
||||
env: []
|
||||
|
||||
# Readiness & Liveness probes
|
||||
probe:
|
||||
readiness:
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 15
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
liveness:
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 15
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
|
||||
horizontalPodAutoscaler:
|
||||
# -- Use HPA for vmselect component
|
||||
enabled: true
|
||||
# -- Maximum replicas for HPA to use to to scale the vmselect component
|
||||
maxReplicas: 15
|
||||
# -- Minimum replicas for HPA to use to scale the vmselect component
|
||||
minReplicas: 2
|
||||
# -- Metric for HPA to use to scale the vmselect component
|
||||
metrics:
|
||||
- type: Resource
|
||||
resource:
|
||||
name: cpu
|
||||
target:
|
||||
type: Utilization
|
||||
averageUtilization: 40
|
||||
|
||||
# Additional hostPath mounts
|
||||
extraHostPathMounts:
|
||||
[]
|
||||
# - name: certs-dir
|
||||
# mountPath: /etc/kubernetes/certs
|
||||
# subPath: ""
|
||||
# hostPath: /etc/kubernetes/certs
|
||||
# readOnly: true
|
||||
|
||||
# Extra Volumes for the pod
|
||||
extraVolumes:
|
||||
[]
|
||||
# - name: example
|
||||
# configMap:
|
||||
# name: example
|
||||
|
||||
# Extra Volume Mounts for the container
|
||||
extraVolumeMounts:
|
||||
[]
|
||||
# - name: example
|
||||
# mountPath: /example
|
||||
|
||||
extraContainers:
|
||||
[]
|
||||
# - name: config-reloader
|
||||
# image: reloader-image
|
||||
|
||||
initContainers:
|
||||
[]
|
||||
# - name: example
|
||||
# image: example-image
|
||||
|
||||
podDisruptionBudget:
|
||||
# -- See `kubectl explain poddisruptionbudget.spec` for more. Ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
||||
enabled: true
|
||||
minAvailable: 1
|
||||
# maxUnavailable: 1
|
||||
labels: {}
|
||||
|
||||
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "vmselect"
|
||||
effect: "NoSchedule"
|
||||
|
||||
nodeSelector:
|
||||
dedicated: "vmselect"
|
||||
|
||||
|
||||
# -- Pod affinity
|
||||
affinity: {}
|
||||
# -- Pod topologySpreadConstraints
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: ScheduleAnyway
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmselect
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: ScheduleAnyway
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmselect
|
||||
# -- Pod's annotations
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8481"
|
||||
# -- Count of vmselect pods
|
||||
replicaCount: 2
|
||||
# -- Container workdir
|
||||
containerWorkingDir: ""
|
||||
# -- Resource object
|
||||
resources:
|
||||
# limits:
|
||||
# cpu: 50m
|
||||
# memory: 64Mi
|
||||
requests:
|
||||
cpu: 5
|
||||
memory: 6Gi
|
||||
|
||||
# -- Pod's security context. Ref: [https://kubernetes.io/docs/tasks/configure-pod-container/security-context/](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
|
||||
securityContext: {}
|
||||
podSecurityContext: {}
|
||||
# -- Cache root folder
|
||||
cacheMountPath: /cache
|
||||
service:
|
||||
# -- Service annotations
|
||||
annotations:
|
||||
io.cilium/global-service: "true"
|
||||
# -- Service labels
|
||||
labels: {}
|
||||
# -- Service ClusterIP
|
||||
clusterIP: ""
|
||||
# -- Service External IPs. Ref: [https://kubernetes.io/docs/user-guide/services/#external-ips](https://kubernetes.io/docs/user-guide/services/#external-ips)
|
||||
externalIPs: []
|
||||
# -- Extra service ports
|
||||
extraServicePorts: []
|
||||
# -- Service load balacner IP
|
||||
loadBalancerIP: ""
|
||||
# -- Load balancer source range
|
||||
loadBalancerSourceRanges: []
|
||||
# -- Service port
|
||||
servicePort: 8481
|
||||
# -- Target port
|
||||
targetPort: http
|
||||
# -- Service type
|
||||
type: ClusterIP
|
||||
ingress:
|
||||
# -- Enable deployment of ingress for vmselect component
|
||||
enabled: true
|
||||
# -- Ingress annotations
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
ingressClassName: nginx-internal
|
||||
|
||||
extraLabels: {}
|
||||
# -- Array of host objects
|
||||
hosts:
|
||||
- name: vmselect-dbc-prd.meeshogcp.in
|
||||
path: /
|
||||
port: http
|
||||
# -- Array of TLS objects
|
||||
tls: []
|
||||
# - secretName: vmselect-ingress-tls
|
||||
# hosts:
|
||||
# - vmselect.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
statefulSet:
|
||||
# -- Deploy StatefulSet instead of Deployment for vmselect. Useful if you want to keep cache data.
|
||||
enabled: false
|
||||
# -- Deploy order policy for StatefulSet pods
|
||||
podManagementPolicy: OrderedReady
|
||||
## Headless service for statefulset
|
||||
service:
|
||||
# -- Headless service annotations
|
||||
annotations: {}
|
||||
# -- Headless service labels
|
||||
labels: {}
|
||||
# -- Headless service port
|
||||
servicePort: 8481
|
||||
persistentVolume:
|
||||
# -- Create/use Persistent Volume Claim for vmselect component. Empty dir if false. If true, vmselect will create/use a Persistent Volume Claim
|
||||
enabled: false
|
||||
|
||||
# -- Array of access mode. Must match those of existing PV or dynamic provisioner. Ref: [http://kubernetes.io/docs/user-guide/persistent-volumes/](http://kubernetes.io/docs/user-guide/persistent-volumes/)
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
# -- Persistent volume annotations
|
||||
annotations: {}
|
||||
|
||||
# -- Persistent volume labels
|
||||
labels: {}
|
||||
|
||||
# -- Existing Claim name. Requires vmselect.persistentVolume.enabled: true. If defined, PVC must be created manually before volume will be bound
|
||||
existingClaim: ""
|
||||
|
||||
## Vmselect data Persistent Volume mount root path
|
||||
##
|
||||
# -- Size of the volume. Better to set the same as resource limit memory property
|
||||
size: 2Gi
|
||||
# -- Mount subpath
|
||||
subPath: ""
|
||||
serviceMonitor:
|
||||
# -- Enable deployment of Service Monitor for vmselect component. This is Prometheus operator object
|
||||
enabled: false
|
||||
# -- Target namespace of ServiceMonitor manifest
|
||||
namespace: ""
|
||||
# -- Service Monitor labels
|
||||
extraLabels: {}
|
||||
# -- Service Monitor annotations
|
||||
annotations: {}
|
||||
# Commented. Prometheus scare interval for vmselect component
|
||||
# interval: 15s
|
||||
# Commented. Prometheus pre-scrape timeout for vmselect component
|
||||
# scrapeTimeout: 5s
|
||||
# -- Commented. HTTP scheme to use for scraping.
|
||||
# scheme: https
|
||||
# -- Commented. TLS configuration to use when scraping the endpoint
|
||||
# tlsConfig:
|
||||
# insecureSkipVerify: true
|
||||
# -- Service Monitor relabelings
|
||||
relabelings: []
|
||||
-316
@@ -1,316 +0,0 @@
|
||||
vminsert:
|
||||
enabled: false
|
||||
|
||||
vmselect:
|
||||
enabled: false
|
||||
|
||||
serviceAccount:
|
||||
create: true
|
||||
# name:
|
||||
extraLabels: {}
|
||||
annotations:
|
||||
eks.amazonaws.com/role-arn: arn:aws:iam::847438129436:role/eks-s3-vmbackup-role
|
||||
# mount API token to pod directly
|
||||
automountToken: true
|
||||
|
||||
dedicatedValue: false
|
||||
# schedulerName: default-scheduler
|
||||
|
||||
vmstorage:
|
||||
# -- Enable deployment of vmstorage component. StatefulSet is used
|
||||
enabled: true
|
||||
# -- vmstorage container name
|
||||
name: vmstorage
|
||||
image:
|
||||
# -- Image repository
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/vmstorage
|
||||
# -- Image tag
|
||||
tag: v1.93.7-cluster
|
||||
# -- Image pull policy
|
||||
pullPolicy: IfNotPresent
|
||||
# -- Name of Priority Class
|
||||
priorityClassName: ""
|
||||
# -- Overrides the full name of vmstorage component
|
||||
fullnameOverride: vmstorage-dbc-prd
|
||||
automountServiceAccountToken: true
|
||||
# -- Additional environment variables (ex.: secret tokens, flags) https://github.com/VictoriaMetrics/VictoriaMetrics#environment-variables
|
||||
env: []
|
||||
# -- Data retention period. Supported values 1w, 1d, number without measurement means month, e.g. 2 = 2month
|
||||
retentionPeriod: 90d
|
||||
# Additional vmstorage container arguments. Extra command line arguments for vmstorage component
|
||||
extraArgs:
|
||||
envflag.enable: "true"
|
||||
envflag.prefix: VM_
|
||||
loggerFormat: json
|
||||
search.maxUniqueTimeseries: "30000000"
|
||||
dedup.minScrapeInterval: 60s
|
||||
loggerTimezone: "Asia/Kolkata"
|
||||
|
||||
# Additional hostPath mounts
|
||||
extraHostPathMounts:
|
||||
[]
|
||||
# - name: certs-dir
|
||||
# mountPath: /etc/kubernetes/certs
|
||||
# subPath: ""
|
||||
# hostPath: /etc/kubernetes/certs
|
||||
# readOnly: true
|
||||
|
||||
# Extra Volumes for the pod
|
||||
extraVolumes:
|
||||
[]
|
||||
# - name: example
|
||||
# configMap:
|
||||
# name: example
|
||||
|
||||
# Extra Volume Mounts for the container
|
||||
extraVolumeMounts:
|
||||
[]
|
||||
# - name: example
|
||||
# mountPath: /example
|
||||
|
||||
extraContainers:
|
||||
[]
|
||||
# - name: config-reloader
|
||||
# image: reloader-image
|
||||
|
||||
extraSecretMounts:
|
||||
[]
|
||||
# - name: secret
|
||||
# mountPath: /etc/credentials
|
||||
# subPath: ""
|
||||
# readOnly: true
|
||||
|
||||
initContainers:
|
||||
[]
|
||||
# - name: vmrestore
|
||||
# image: victoriametrics/vmrestore:latest
|
||||
# volumeMounts:
|
||||
# - mountPath: /storage
|
||||
# name: vmstorage-volume
|
||||
# - mountPath: /etc/vm/creds
|
||||
# name: secret-remote-storage-keys
|
||||
# readOnly: true
|
||||
# args:
|
||||
# - -storageDataPath=/storage
|
||||
# - -src=s3://your_bucket/folder/latest
|
||||
# - -credsFilePath=/etc/vm/creds/credentials
|
||||
|
||||
# -- See `kubectl explain poddisruptionbudget.spec` for more. Ref: [https://kubernetes.io/docs/tasks/run-application/configure-pdb/](https://kubernetes.io/docs/tasks/run-application/configure-pdb/)
|
||||
podDisruptionBudget:
|
||||
enabled: false
|
||||
# minAvailable: 1
|
||||
# maxUnavailable: 1
|
||||
labels: {}
|
||||
|
||||
# -- Array of tolerations object. Node tolerations for server scheduling to nodes with taints. Ref: [https://kubernetes.io/docs/concepts/configuration/assign-pod-node/](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/)
|
||||
##
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "vmstorage"
|
||||
effect: "NoSchedule"
|
||||
|
||||
# -- Pod's node selector. Ref: [https://kubernetes.io/docs/user-guide/node-selection/](https://kubernetes.io/docs/user-guide/node-selection/)
|
||||
nodeSelector:
|
||||
dedicated: "vmstorage"
|
||||
|
||||
# -- Pod affinity
|
||||
affinity: {}
|
||||
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: ScheduleAnyway
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmstorage
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmstorage
|
||||
|
||||
## Use an alternate scheduler, e.g. "stork".
|
||||
## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
|
||||
##
|
||||
# schedulerName:
|
||||
|
||||
persistentVolume:
|
||||
# -- Create/use Persistent Volume Claim for vmstorage component. Empty dir if false. If true, vmstorage will create/use a Persistent Volume Claim
|
||||
enabled: true
|
||||
|
||||
# -- Array of access modes. Must match those of existing PV or dynamic provisioner. Ref: [http://kubernetes.io/docs/user-guide/persistent-volumes/](http://kubernetes.io/docs/user-guide/persistent-volumes/)
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
# -- Persistent volume annotations
|
||||
annotations: {}
|
||||
# -- Persistent volume labels
|
||||
labels: {}
|
||||
# -- Storage class name. Will be empty if not setted
|
||||
storageClass: sc-pd-ssd
|
||||
# -- Existing Claim name. Requires vmstorage.persistentVolume.enabled: true. If defined, PVC must be created manually before volume will be bound
|
||||
existingClaim: ""
|
||||
|
||||
# -- Data root path. Vmstorage data Persistent Volume mount root path
|
||||
mountPath: /storage
|
||||
# -- Size of the volume. Better to set the same as resource limit memory property
|
||||
size: 300Gi
|
||||
# -- Mount subpath
|
||||
subPath: ""
|
||||
|
||||
# -- Pod's annotations
|
||||
podAnnotations:
|
||||
prometheus.io/port: "8482"
|
||||
prometheus.io/scrape: "true"
|
||||
annotations:
|
||||
prometheus.io/port: "8482"
|
||||
prometheus.io/scrape: "true"
|
||||
extraLabels:
|
||||
bu: "dbc"
|
||||
team: "sre"
|
||||
service: "vmstorage-dbc-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "vmstorage"
|
||||
# arch: "arm64"
|
||||
# runpod: "ondemand"
|
||||
|
||||
# -- Count of vmstorage pods
|
||||
replicaCount: 5
|
||||
# -- Container workdir
|
||||
containerWorkingDir: ""
|
||||
# -- Deploy order policy for StatefulSet pods
|
||||
podManagementPolicy: OrderedReady
|
||||
|
||||
# -- Resource object. Ref: [https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/)
|
||||
resources:
|
||||
# limits:
|
||||
# cpu: 500m
|
||||
# memory: 512Mi
|
||||
requests:
|
||||
cpu: 5
|
||||
memory: 40Gi
|
||||
|
||||
# -- Pod's security context. Ref: [https://kubernetes.io/docs/tasks/configure-pod-container/security-context/](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)
|
||||
securityContext: {}
|
||||
podSecurityContext: {}
|
||||
service:
|
||||
# -- Service annotations
|
||||
annotations: {}
|
||||
# -- Service labels
|
||||
labels: {}
|
||||
# -- Service port
|
||||
servicePort: 8482
|
||||
# -- Port for accepting connections from vminsert
|
||||
vminsertPort: 8400
|
||||
# -- Port for accepting connections from vmstorage
|
||||
vmstoragePort: 8401
|
||||
# -- Extra service ports
|
||||
extraServicePorts: []
|
||||
# -- Pod's termination grace period in seconds
|
||||
terminationGracePeriodSeconds: 60
|
||||
probe:
|
||||
readiness:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: http
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 15
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
liveness:
|
||||
tcpSocket:
|
||||
port: http
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 10
|
||||
|
||||
vmbackupmanager:
|
||||
# -- enable automatic creation of backup via vmbackupmanager. vmbackupmanager is part of Enterprise packages
|
||||
enable: false
|
||||
# -- should be true and means that you have the legal right to run a backup manager
|
||||
# that can either be a signed contract or an email with confirmation to run the service in a trial period
|
||||
# # https://victoriametrics.com/legal/eula/
|
||||
eula: true
|
||||
image:
|
||||
# -- vmbackupmanager image repository
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/vmbackupmanager
|
||||
# -- vmbackupmanager image tag
|
||||
tag: v1.93.7-cluster
|
||||
# -- disable hourly backups
|
||||
disableHourly: true
|
||||
# -- disable daily backups
|
||||
disableDaily: false
|
||||
# -- disable weekly backups
|
||||
disableWeekly: true
|
||||
# -- disable monthly backups
|
||||
disableMonthly: true
|
||||
# -- backup destination at S3, GCS or local filesystem. Pod name will be included to path!
|
||||
destination: "s3://prd-dbc-vmbackup"
|
||||
# -- backups' retention settings
|
||||
retention:
|
||||
# -- keep last N hourly backups. 0 means delete all existing hourly backups. Specify -1 to turn off
|
||||
keepLastHourly: 0
|
||||
# -- keep last N daily backups. 0 means delete all existing daily backups. Specify -1 to turn off
|
||||
keepLastDaily: 30
|
||||
# -- keep last N weekly backups. 0 means delete all existing weekly backups. Specify -1 to turn off
|
||||
keepLastWeekly: 0
|
||||
# -- keep last N monthly backups. 0 means delete all existing monthly backups. Specify -1 to turn off
|
||||
keepLastMonthly: 0
|
||||
extraArgs:
|
||||
envflag.enable: "true"
|
||||
envflag.prefix: VM_
|
||||
loggerFormat: json
|
||||
concurrency: 15
|
||||
loggerTimezone: "Asia/Kolkata"
|
||||
# -- Allows to enable restore options for pod.
|
||||
# Read more: https://docs.victoriametrics.com/vmbackupmanager.html#restore-commands
|
||||
restore:
|
||||
onStart:
|
||||
enabled: false
|
||||
resources: {}
|
||||
# -- Additional environment variables (ex.: secret tokens, flags) https://github.com/VictoriaMetrics/VictoriaMetrics#environment-variables
|
||||
env: []
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: manager-http
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 15
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
livenessProbe:
|
||||
tcpSocket:
|
||||
port: manager-http
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 10
|
||||
extraSecretMounts:
|
||||
[]
|
||||
# - name: secret
|
||||
# mountPath: /etc/credentials
|
||||
# subPath: ""
|
||||
# readOnly: true
|
||||
serviceMonitor:
|
||||
# -- Enable deployment of Service Monitor for vmstorage component. This is Prometheus operator object
|
||||
enabled: false
|
||||
# -- Target namespace of ServiceMonitor manifest
|
||||
namespace: ""
|
||||
# -- Service Monitor labels
|
||||
extraLabels: {}
|
||||
# -- Service Monitor annotations
|
||||
annotations: {}
|
||||
# Commented. Prometheus scare interval for vmstorage component
|
||||
# interval: 15s
|
||||
# Commented. Prometheus pre-scrape timeout for vmstorage component
|
||||
# scrapeTimeout: 5s
|
||||
# -- Commented. HTTP scheme to use for scraping.
|
||||
# scheme: https
|
||||
# -- Commented. TLS configuration to use when scraping the endpoint
|
||||
# tlsConfig:
|
||||
# insecureSkipVerify: true
|
||||
# -- Service Monitor relabelings
|
||||
relabelings: []
|
||||
-478
@@ -1,478 +0,0 @@
|
||||
# Default values for kube-state-metrics.
|
||||
prometheusScrape: true
|
||||
image:
|
||||
registry: asia-southeast1-docker.pkg.dev
|
||||
repository: meesho-devops-admin-0622/admin/sre/kube-state-metrics
|
||||
# If unset use v + .Charts.appVersion
|
||||
tag: v2.9.2
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
fullnameOverride: kube-state-metrics-dbc-backend-prd
|
||||
|
||||
dedicatedValue: false
|
||||
|
||||
imagePullSecrets: []
|
||||
# - name: "image-pull-secret"
|
||||
|
||||
ingress:
|
||||
enabled: false
|
||||
ingressClassName: internal
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
|
||||
extraLabels: {}
|
||||
hosts:
|
||||
- name: clustermetrics-dbc-backend-prd.meesho.com
|
||||
path: /
|
||||
port: http
|
||||
tls: []
|
||||
# - secretName: vmagent-ingress-tls
|
||||
# hosts:
|
||||
# - vmagent.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
|
||||
global:
|
||||
# To help compatibility with other charts which use global.imagePullSecrets.
|
||||
# Allow either an array of {name: pullSecret} maps (k8s-style), or an array of strings (more common helm-style).
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - name: pullSecret1
|
||||
# - name: pullSecret2
|
||||
# or
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - pullSecret1
|
||||
# - pullSecret2
|
||||
imagePullSecrets: []
|
||||
#
|
||||
# Allow parent charts to override registry hostname
|
||||
imageRegistry: ""
|
||||
|
||||
# If set to true, this will deploy kube-state-metrics as a StatefulSet and the data
|
||||
# will be automatically sharded across <.Values.replicas> pods using the built-in
|
||||
# autodiscovery feature: https://github.com/kubernetes/kube-state-metrics#automated-sharding
|
||||
# This is an experimental feature and there are no stability guarantees.
|
||||
autosharding:
|
||||
enabled: false
|
||||
|
||||
replicas: 2
|
||||
|
||||
# List of additional cli arguments to configure kube-state-metrics
|
||||
# for example: --enable-gzip-encoding, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/kubernetes/kube-state-metrics/blob/master/docs/cli-arguments.md
|
||||
extraArgs: []
|
||||
|
||||
service:
|
||||
port: 8080
|
||||
# Default to clusterIP for backward compatibility
|
||||
type: ClusterIP
|
||||
nodePort: 0
|
||||
loadBalancerIP: ""
|
||||
# Only allow access to the loadBalancerIP from these IPs
|
||||
loadBalancerSourceRanges: []
|
||||
clusterIP: ""
|
||||
annotations: {}
|
||||
|
||||
## Additional labels to add to all resources
|
||||
customLabels:
|
||||
bu: "dbc-backend"
|
||||
team: "dbc-backend-sre"
|
||||
service: "kube-state-metrics-dbc-backend-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "exporter"
|
||||
|
||||
# app: kube-state-metrics
|
||||
|
||||
## Override selector labels
|
||||
selectorOverride: {}
|
||||
|
||||
## set to true to add the release label so scraping of the servicemonitor with kube-prometheus-stack works out of the box
|
||||
releaseLabel: false
|
||||
|
||||
hostNetwork: false
|
||||
|
||||
rbac:
|
||||
# If true, create & use RBAC resources
|
||||
create: true
|
||||
|
||||
# Set to a rolename to use existing role - skipping role creating - but still doing serviceaccount and rolebinding to it, rolename set here.
|
||||
# useExistingRole: your-existing-role
|
||||
|
||||
# If set to false - Run without Cluteradmin privs needed - ONLY works if namespace is also set (if useExistingRole is set this name is used as ClusterRole or Role to bind to)
|
||||
useClusterRole: true
|
||||
|
||||
# Add permissions for CustomResources' apiGroups in Role/ClusterRole. Should be used in conjunction with Custom Resource State Metrics configuration
|
||||
# Example:
|
||||
# - apiGroups: ["monitoring.coreos.com"]
|
||||
# resources: ["prometheuses"]
|
||||
# verbs: ["list", "watch"]
|
||||
extraRules: []
|
||||
|
||||
# Configure kube-rbac-proxy. When enabled, creates one kube-rbac-proxy container per exposed HTTP endpoint (metrics and telemetry if enabled).
|
||||
# The requests are served through the same service but requests are then HTTPS.
|
||||
kubeRBACProxy:
|
||||
enabled: false
|
||||
image:
|
||||
registry: quay.io
|
||||
repository: brancz/kube-rbac-proxy
|
||||
tag: v0.14.0
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# List of additional cli arguments to configure kube-rbac-prxy
|
||||
# for example: --tls-cipher-suites, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/brancz/kube-rbac-proxy#usage
|
||||
extraArgs: []
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext: {}
|
||||
|
||||
resources: {}
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
# requests:
|
||||
# cpu: 10m
|
||||
# memory: 32Mi
|
||||
|
||||
## volumeMounts enables mounting custom volumes in rbac-proxy containers
|
||||
## Useful for TLS certificates and keys
|
||||
volumeMounts: []
|
||||
# - mountPath: /etc/tls
|
||||
# name: kube-rbac-proxy-tls
|
||||
# readOnly: true
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a ServiceAccount should be created, require rbac true
|
||||
create: true
|
||||
# The name of the ServiceAccount to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name:
|
||||
# Reference to one or more secrets to be used when pulling images
|
||||
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
||||
imagePullSecrets: []
|
||||
# ServiceAccount annotations.
|
||||
# Use case: AWS EKS IAM roles for service accounts
|
||||
# ref: https://docs.aws.amazon.com/eks/latest/userguide/specify-service-account-role.html
|
||||
annotations: {}
|
||||
|
||||
prometheus:
|
||||
monitor:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
additionalLabels: {}
|
||||
namespace: ""
|
||||
jobLabel: ""
|
||||
targetLabels: []
|
||||
podTargetLabels: []
|
||||
interval: ""
|
||||
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
|
||||
##
|
||||
sampleLimit: 0
|
||||
|
||||
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
|
||||
##
|
||||
targetLimit: 0
|
||||
|
||||
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelNameLengthLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelValueLengthLimit: 0
|
||||
scrapeTimeout: ""
|
||||
proxyUrl: ""
|
||||
selectorOverride: {}
|
||||
honorLabels: false
|
||||
metricRelabelings: []
|
||||
relabelings: []
|
||||
scheme: ""
|
||||
## File to read bearer token for scraping targets
|
||||
bearerTokenFile: ""
|
||||
## Secret to mount to read bearer token for scraping targets. The secret needs
|
||||
## to be in the same namespace as the service monitor and accessible by the
|
||||
## Prometheus Operator
|
||||
bearerTokenSecret: {}
|
||||
# name: secret-name
|
||||
# key: key-name
|
||||
tlsConfig: {}
|
||||
|
||||
## Specify if a Pod Security Policy for kube-state-metrics must be created
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
|
||||
##
|
||||
podSecurityPolicy:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
## Specify pod annotations
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#apparmor
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#seccomp
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#sysctl
|
||||
##
|
||||
# seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
|
||||
# seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
|
||||
# apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
|
||||
|
||||
additionalVolumes: []
|
||||
|
||||
## Configure network policy for kube-state-metrics
|
||||
networkPolicy:
|
||||
enabled: false
|
||||
# networkPolicy.flavor -- Flavor of the network policy to use.
|
||||
# Can be:
|
||||
# * kubernetes for networking.k8s.io/v1/NetworkPolicy
|
||||
# * cilium for cilium.io/v2/CiliumNetworkPolicy
|
||||
flavor: kubernetes
|
||||
|
||||
## Configure the cilium network policy kube-apiserver selector
|
||||
# cilium:
|
||||
# kubeApiServerSelector:
|
||||
# - toEntities:
|
||||
# - kube-apiserver
|
||||
|
||||
# egress:
|
||||
# - {}
|
||||
# ingress:
|
||||
# - {}
|
||||
# podSelector:
|
||||
# matchLabels:
|
||||
# app.kubernetes.io/name: kube-state-metrics
|
||||
|
||||
securityContext:
|
||||
enabled: true
|
||||
runAsGroup: 65534
|
||||
runAsUser: 65534
|
||||
fsGroup: 65534
|
||||
runAsNonRoot: true
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
|
||||
## Node labels for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
|
||||
nodeSelector:
|
||||
dedicated: "devops"
|
||||
|
||||
## Affinity settings for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
|
||||
affinity: {}
|
||||
|
||||
## Tolerations for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
## Topology spread constraints for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: exporter
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: exporter
|
||||
|
||||
# Annotations to be added to the deployment/statefulset
|
||||
annotations:
|
||||
kubernetes.io/psp: eks.privileged
|
||||
|
||||
# Annotations to be added to the pod
|
||||
podAnnotations: {}
|
||||
|
||||
## Assign a PriorityClassName to pods if set
|
||||
# priorityClassName: ""
|
||||
|
||||
# Ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
||||
podDisruptionBudget: {}
|
||||
|
||||
# Comma-separated list of metrics to be exposed.
|
||||
# This list comprises of exact metric names and/or regex patterns.
|
||||
# The allowlist and denylist are mutually exclusive.
|
||||
metricAllowlist: []
|
||||
|
||||
# Comma-separated list of metrics not to be enabled.
|
||||
# This list comprises of exact metric names and/or regex patterns.
|
||||
# The allowlist and denylist are mutually exclusive.
|
||||
metricDenylist: []
|
||||
|
||||
# Comma-separated list of additional Kubernetes label keys that will be used in the resource's
|
||||
# labels metric. By default the metric contains only name and namespace labels.
|
||||
# To include additional labels, provide a list of resource names in their plural form and Kubernetes
|
||||
# label keys you would like to allow for them (Example: '=namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...)'.
|
||||
# A single '*' can be provided per resource instead to allow any labels, but that has
|
||||
# severe performance implications (Example: '=pods=[*]').
|
||||
metricLabelsAllowlist:
|
||||
- pods=[*]
|
||||
- nodes=[*]
|
||||
- deployments=[*]
|
||||
- statefulsets=[*]
|
||||
- persistentvolumeclaims=[*]
|
||||
- persistentvolumes=[*]
|
||||
- ingresses=[*]
|
||||
- namespaces=[*]
|
||||
- horizontalpodautoscalers=[*]
|
||||
# - namespaces=[k8s-label-1,k8s-label-n]
|
||||
|
||||
# Comma-separated list of Kubernetes annotations keys that will be used in the resource'
|
||||
# labels metric. By default the metric contains only name and namespace labels.
|
||||
# To include additional annotations provide a list of resource names in their plural form and Kubernetes
|
||||
# annotation keys you would like to allow for them (Example: '=namespaces=[kubernetes.io/team,...],pods=[kubernetes.io/team],...)'.
|
||||
# A single '*' can be provided per resource instead to allow any annotations, but that has
|
||||
# severe performance implications (Example: '=pods=[*]').
|
||||
metricAnnotationsAllowList: []
|
||||
# - pods=[k8s-annotation-1,k8s-annotation-n]
|
||||
|
||||
# Available collectors for kube-state-metrics.
|
||||
# By default, all available resources are enabled, comment out to disable.
|
||||
collectors:
|
||||
- certificatesigningrequests
|
||||
- configmaps
|
||||
- cronjobs
|
||||
- daemonsets
|
||||
- deployments
|
||||
- endpoints
|
||||
- horizontalpodautoscalers
|
||||
- ingresses
|
||||
- jobs
|
||||
- leases
|
||||
- limitranges
|
||||
- mutatingwebhookconfigurations
|
||||
- namespaces
|
||||
- networkpolicies
|
||||
- nodes
|
||||
- persistentvolumeclaims
|
||||
- persistentvolumes
|
||||
- poddisruptionbudgets
|
||||
- pods
|
||||
- replicasets
|
||||
- replicationcontrollers
|
||||
- resourcequotas
|
||||
- secrets
|
||||
- services
|
||||
- statefulsets
|
||||
- storageclasses
|
||||
- validatingwebhookconfigurations
|
||||
- volumeattachments
|
||||
|
||||
# Enabling kubeconfig will pass the --kubeconfig argument to the container
|
||||
kubeconfig:
|
||||
enabled: false
|
||||
# base64 encoded kube-config file
|
||||
secret:
|
||||
|
||||
# Enabling support for customResourceState, will create a configMap including your config that will be read from kube-state-metrics
|
||||
customResourceState:
|
||||
enabled: false
|
||||
# Add (Cluster)Role permissions to list/watch the customResources defined in the config to rbac.extraRules
|
||||
config: {}
|
||||
|
||||
# Enable only the release namespace for collecting resources. By default all namespaces are collected.
|
||||
# If releaseNamespace and namespaces are both set a merged list will be collected.
|
||||
releaseNamespace: false
|
||||
|
||||
# Comma-separated list(string) or yaml list of namespaces to be enabled for collecting resources. By default all namespaces are collected.
|
||||
namespaces: ""
|
||||
|
||||
# Comma-separated list of namespaces not to be enabled. If namespaces and namespaces-denylist are both set,
|
||||
# only namespaces that are excluded in namespaces-denylist will be used.
|
||||
namespacesDenylist: ""
|
||||
|
||||
## Override the deployment namespace
|
||||
##
|
||||
namespaceOverride: ""
|
||||
|
||||
resources:
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 50Mi
|
||||
|
||||
## Provide a k8s version to define apiGroups for podSecurityPolicy Cluster Role.
|
||||
## For example: kubeTargetVersionOverride: 1.14.9
|
||||
##
|
||||
kubeTargetVersionOverride: ""
|
||||
|
||||
# Enable self metrics configuration for service and Service Monitor
|
||||
# Default values for telemetry configuration can be overridden
|
||||
# If you set telemetryNodePort, you must also set service.type to NodePort
|
||||
selfMonitor:
|
||||
enabled: true
|
||||
# telemetryHost: 0.0.0.0
|
||||
telemetryPort: 8081
|
||||
# telemetryNodePort: 0
|
||||
|
||||
# Enable vertical pod autoscaler support for kube-state-metrics
|
||||
verticalPodAutoscaler:
|
||||
enabled: false
|
||||
# List of resources that the vertical pod autoscaler can control. Defaults to cpu and memory
|
||||
controlledResources: []
|
||||
|
||||
# Define the max allowed resources for the pod
|
||||
maxAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
# Define the min allowed resources for the pod
|
||||
minAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
|
||||
# updatePolicy:
|
||||
# Specifies whether recommended updates are applied when a Pod is started and whether recommended updates
|
||||
# are applied during the life of a Pod. Possible values are "Off", "Initial", "Recreate", and "Auto".
|
||||
# updateMode: Auto
|
||||
|
||||
# volumeMounts are used to add custom volume mounts to deployment.
|
||||
# See example below
|
||||
volumeMounts: []
|
||||
# - mountPath: /etc/config
|
||||
# name: config-volume
|
||||
|
||||
# volumes are used to add custom volumes to deployment
|
||||
# See example below
|
||||
volumes: []
|
||||
# - configMap:
|
||||
# name: cm-for-volume
|
||||
# name: config-volume
|
||||
-296
@@ -1,296 +0,0 @@
|
||||
# Default values for victoria-metrics-agent.
|
||||
# This is a YAML-formatted file.
|
||||
# Declare variables to be passed into your templates.
|
||||
|
||||
replicaCount: 2
|
||||
|
||||
fullnameOverride: vmagent-dbc-backend-prd
|
||||
# vmagent scraping configuration:
|
||||
# https://github.com/VictoriaMetrics/VictoriaMetrics/blob/master/docs/vmagent.md#how-to-collect-metrics-in-prometheus-format
|
||||
|
||||
# use existing configmap if specified
|
||||
# otherwise .config values will be used
|
||||
configMap: "vmagent-dbc-backend-prd-config" # Use same name as in fullnameOverride-config
|
||||
|
||||
dedicatedValue: false
|
||||
|
||||
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: ScheduleAnyway
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmagent
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmagent
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
# vmagent pods will take almost 20-25 mins to work properly
|
||||
minReadySeconds: 180
|
||||
progressDeadlineSeconds: 300
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
|
||||
strategy: {}
|
||||
# rollingUpdate:
|
||||
# maxSurge: 25%
|
||||
# maxUnavailable: 25%
|
||||
# type: RollingUpdate
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/
|
||||
statefulset:
|
||||
enabled: false
|
||||
# -- create cluster of vmagents. See https://docs.victoriametrics.com/vmagent.html#scraping-big-number-of-targets
|
||||
# available since 1.77.2 version https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.77.2
|
||||
clusterMode: false
|
||||
# -- replication factor for vmagent in cluster mode
|
||||
replicationFactor: 1
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies
|
||||
updateStrategy: {}
|
||||
# type: RollingUpdate
|
||||
|
||||
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/vmagent
|
||||
tag: v1.93.7-cluster # rewrites Chart.AppVersion
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
imagePullSecrets: []
|
||||
nameOverride: ""
|
||||
|
||||
containerWorkingDir: "/"
|
||||
|
||||
rbac:
|
||||
create: true
|
||||
# Note: The PSP will only be deployed, if Kubernetes (<1.25) supports the resource.
|
||||
pspEnabled: true
|
||||
annotations: {}
|
||||
extraLabels: {}
|
||||
# -- if true and `rbac.enabled`, will deploy a Role/Rolebinding instead of a ClusterRole/ClusterRoleBinding
|
||||
namespaced: false
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a service account should be created
|
||||
create: true
|
||||
# Annotations to add to the service account
|
||||
annotations: {
|
||||
iam.gke.io/gcp-service-account: sa-dbc-desre-vmagent-prd@meesho-dbc-prd-0622.iam.gserviceaccount.com
|
||||
}
|
||||
# The name of the service account to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name:
|
||||
|
||||
## See `kubectl explain poddisruptionbudget.spec` for more
|
||||
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
||||
podDisruptionBudget:
|
||||
enabled: false
|
||||
# minAvailable: 1
|
||||
# maxUnavailable: 1
|
||||
labels: {}
|
||||
|
||||
# WARN: need to specify at least one remote write url or one multi tenant url
|
||||
# remoteWriteUrls: []
|
||||
remoteWriteUrls:
|
||||
# - https://vminsert-prd-dbc.meeshogcp.in/insert/100/prometheus/api/v1/write
|
||||
- http://vminsert-dbc-prd.meeshogcp.in/insert/100/prometheus/api/v1/write
|
||||
# - http://prometheus:8480/insert/0/prometheus
|
||||
|
||||
multiTenantUrls: []
|
||||
# multiTenantUrls:
|
||||
# - http://vm-insert-az1:8480
|
||||
# - http://vm-insert-az2:8480
|
||||
|
||||
extraArgs:
|
||||
envflag.enable: "true"
|
||||
envflag.prefix: VM_
|
||||
loggerFormat: json
|
||||
promscrape.config.strictParse: false
|
||||
promscrape.maxScrapeSize: 1000000000
|
||||
promscrape.minResponseSizeForStreamParse: 1000000
|
||||
loggerTimezone: "Asia/Kolkata"
|
||||
|
||||
# Uncomment and specify the port if you want to support any of the protocols:
|
||||
# https://victoriametrics.github.io/vmagent.html#features
|
||||
# graphiteListenAddr: ":2003"
|
||||
# influxListenAddr: ":8189"
|
||||
# opentsdbHTTPListenAddr: ":4242"
|
||||
# opentsdbListenAddr: ":4242"
|
||||
|
||||
# -- Additional environment variables (ex.: secret tokens, flags) https://github.com/VictoriaMetrics/VictoriaMetrics#environment-variables
|
||||
env:
|
||||
[]
|
||||
# - name: VM_remoteWrite_basicAuth_password
|
||||
# valueFrom:
|
||||
# secretKeyRef:
|
||||
# name: auth_secret
|
||||
# key: password
|
||||
|
||||
# extra Labels for Pods, Deployment and Statefulset
|
||||
extraLabels:
|
||||
bu: "dbc-backend"
|
||||
team: "dbc-backend-sre"
|
||||
service: "vmagent-dbc-backend-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "vmagent"
|
||||
|
||||
|
||||
|
||||
# extra Labels for Pods only
|
||||
podLabels: {}
|
||||
|
||||
# Additional hostPath mounts
|
||||
extraHostPathMounts:
|
||||
[]
|
||||
# - name: certs-dir
|
||||
# mountPath: /etc/kubernetes/certs
|
||||
# subPath: ""
|
||||
# hostPath: /etc/kubernetes/certs
|
||||
# readOnly: true
|
||||
|
||||
# Extra Volumes for the pod
|
||||
extraVolumes:
|
||||
[]
|
||||
# - name: example
|
||||
# configMap:
|
||||
# name: example
|
||||
|
||||
# Extra Volume Mounts for the container
|
||||
extraVolumeMounts:
|
||||
[]
|
||||
# - name: example
|
||||
# mountPath: /example
|
||||
|
||||
extraContainers: []
|
||||
# - name: config-reloader
|
||||
# image: reloader-image
|
||||
|
||||
podSecurityContext:
|
||||
{}
|
||||
# fsGroup: 2000
|
||||
|
||||
securityContext:
|
||||
{}
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
|
||||
service:
|
||||
enabled: true
|
||||
annotations: {}
|
||||
# cloud.google.com/neg: '{"exposed_ports": {"8429":{"name": "vmagent-dbc-prd"}}}'
|
||||
extraLabels: {}
|
||||
clusterIP: ""
|
||||
## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
|
||||
##
|
||||
externalIPs: []
|
||||
loadBalancerIP: ""
|
||||
loadBalancerSourceRanges: []
|
||||
servicePort: 8429
|
||||
# nodePort: 30000
|
||||
type: ClusterIP
|
||||
# Ref: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
|
||||
# externalTrafficPolicy: "local"
|
||||
# healthCheckNodePort: 0
|
||||
ingress:
|
||||
enabled: true
|
||||
ingressClassName: nginx-internal
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
|
||||
extraLabels: {}
|
||||
hosts:
|
||||
- name: vmagent-dbc-backend-prd.meeshogcp.in
|
||||
path: /
|
||||
port: http
|
||||
tls: []
|
||||
# - secretName: vmagent-ingress-tls
|
||||
# hosts:
|
||||
# - vmagent.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
|
||||
resources:
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 128Mi
|
||||
requests:
|
||||
cpu: 2
|
||||
memory: 4Gi
|
||||
|
||||
# Annotations to be added to the deployment
|
||||
annotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8429"
|
||||
|
||||
# Annotations to be added to pod
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8429"
|
||||
|
||||
nodeSelector:
|
||||
dedicated: "devops"
|
||||
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
|
||||
affinity: {}
|
||||
|
||||
# -- priority class to be assigned to the pod(s)
|
||||
priorityClassName: ""
|
||||
|
||||
serviceMonitor:
|
||||
enabled: false
|
||||
extraLabels: {}
|
||||
annotations: {}
|
||||
relabelings: []
|
||||
# interval: 15s
|
||||
# scrapeTimeout: 5s
|
||||
# -- Commented. HTTP scheme to use for scraping.
|
||||
# scheme: https
|
||||
# -- Commented. TLS configuration to use when scraping the endpoint
|
||||
# tlsConfig:
|
||||
# insecureSkipVerify: true
|
||||
|
||||
persistence:
|
||||
enabled: false
|
||||
# storageClassName: default
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
size: 10Gi
|
||||
annotations: {}
|
||||
extraLabels: {}
|
||||
existingClaim: ""
|
||||
# -- Bind Persistent Volume by labels. Must match all labels of targeted PV.
|
||||
matchLabels: {}
|
||||
|
||||
# -- Extra scrape configs that will be appended to `config`
|
||||
extraScrapeConfigs: []
|
||||
|
||||
# Add extra specs dynamically to this chart
|
||||
extraObjects: []
|
||||
-478
@@ -1,478 +0,0 @@
|
||||
# Default values for kube-state-metrics.
|
||||
prometheusScrape: true
|
||||
image:
|
||||
registry: asia-southeast1-docker.pkg.dev
|
||||
repository: meesho-devops-admin-0622/admin/sre/kube-state-metrics
|
||||
# If unset use v + .Charts.appVersion
|
||||
tag: v2.9.2
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
fullnameOverride: kube-state-metrics-dbc-dping-prd
|
||||
|
||||
dedicatedValue: false
|
||||
|
||||
imagePullSecrets: []
|
||||
# - name: "image-pull-secret"
|
||||
|
||||
ingress:
|
||||
enabled: false
|
||||
ingressClassName: internal
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
|
||||
extraLabels: {}
|
||||
hosts:
|
||||
- name: clustermetrics-dbc-dping-prd.meesho.com
|
||||
path: /
|
||||
port: http
|
||||
tls: []
|
||||
# - secretName: vmagent-ingress-tls
|
||||
# hosts:
|
||||
# - vmagent.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
|
||||
global:
|
||||
# To help compatibility with other charts which use global.imagePullSecrets.
|
||||
# Allow either an array of {name: pullSecret} maps (k8s-style), or an array of strings (more common helm-style).
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - name: pullSecret1
|
||||
# - name: pullSecret2
|
||||
# or
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - pullSecret1
|
||||
# - pullSecret2
|
||||
imagePullSecrets: []
|
||||
#
|
||||
# Allow parent charts to override registry hostname
|
||||
imageRegistry: ""
|
||||
|
||||
# If set to true, this will deploy kube-state-metrics as a StatefulSet and the data
|
||||
# will be automatically sharded across <.Values.replicas> pods using the built-in
|
||||
# autodiscovery feature: https://github.com/kubernetes/kube-state-metrics#automated-sharding
|
||||
# This is an experimental feature and there are no stability guarantees.
|
||||
autosharding:
|
||||
enabled: false
|
||||
|
||||
replicas: 2
|
||||
|
||||
# List of additional cli arguments to configure kube-state-metrics
|
||||
# for example: --enable-gzip-encoding, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/kubernetes/kube-state-metrics/blob/master/docs/cli-arguments.md
|
||||
extraArgs: []
|
||||
|
||||
service:
|
||||
port: 8080
|
||||
# Default to clusterIP for backward compatibility
|
||||
type: ClusterIP
|
||||
nodePort: 0
|
||||
loadBalancerIP: ""
|
||||
# Only allow access to the loadBalancerIP from these IPs
|
||||
loadBalancerSourceRanges: []
|
||||
clusterIP: ""
|
||||
annotations: {}
|
||||
|
||||
## Additional labels to add to all resources
|
||||
customLabels:
|
||||
bu: "dbc-dping"
|
||||
team: "dbc-dping-sre"
|
||||
service: "kube-state-metrics-dbc-dping-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "exporter"
|
||||
|
||||
# app: kube-state-metrics
|
||||
|
||||
## Override selector labels
|
||||
selectorOverride: {}
|
||||
|
||||
## set to true to add the release label so scraping of the servicemonitor with kube-prometheus-stack works out of the box
|
||||
releaseLabel: false
|
||||
|
||||
hostNetwork: false
|
||||
|
||||
rbac:
|
||||
# If true, create & use RBAC resources
|
||||
create: true
|
||||
|
||||
# Set to a rolename to use existing role - skipping role creating - but still doing serviceaccount and rolebinding to it, rolename set here.
|
||||
# useExistingRole: your-existing-role
|
||||
|
||||
# If set to false - Run without Cluteradmin privs needed - ONLY works if namespace is also set (if useExistingRole is set this name is used as ClusterRole or Role to bind to)
|
||||
useClusterRole: true
|
||||
|
||||
# Add permissions for CustomResources' apiGroups in Role/ClusterRole. Should be used in conjunction with Custom Resource State Metrics configuration
|
||||
# Example:
|
||||
# - apiGroups: ["monitoring.coreos.com"]
|
||||
# resources: ["prometheuses"]
|
||||
# verbs: ["list", "watch"]
|
||||
extraRules: []
|
||||
|
||||
# Configure kube-rbac-proxy. When enabled, creates one kube-rbac-proxy container per exposed HTTP endpoint (metrics and telemetry if enabled).
|
||||
# The requests are served through the same service but requests are then HTTPS.
|
||||
kubeRBACProxy:
|
||||
enabled: false
|
||||
image:
|
||||
registry: quay.io
|
||||
repository: brancz/kube-rbac-proxy
|
||||
tag: v0.14.0
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# List of additional cli arguments to configure kube-rbac-prxy
|
||||
# for example: --tls-cipher-suites, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/brancz/kube-rbac-proxy#usage
|
||||
extraArgs: []
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext: {}
|
||||
|
||||
resources: {}
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
# requests:
|
||||
# cpu: 10m
|
||||
# memory: 32Mi
|
||||
|
||||
## volumeMounts enables mounting custom volumes in rbac-proxy containers
|
||||
## Useful for TLS certificates and keys
|
||||
volumeMounts: []
|
||||
# - mountPath: /etc/tls
|
||||
# name: kube-rbac-proxy-tls
|
||||
# readOnly: true
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a ServiceAccount should be created, require rbac true
|
||||
create: true
|
||||
# The name of the ServiceAccount to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name:
|
||||
# Reference to one or more secrets to be used when pulling images
|
||||
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
||||
imagePullSecrets: []
|
||||
# ServiceAccount annotations.
|
||||
# Use case: AWS EKS IAM roles for service accounts
|
||||
# ref: https://docs.aws.amazon.com/eks/latest/userguide/specify-service-account-role.html
|
||||
annotations: {}
|
||||
|
||||
prometheus:
|
||||
monitor:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
additionalLabels: {}
|
||||
namespace: ""
|
||||
jobLabel: ""
|
||||
targetLabels: []
|
||||
podTargetLabels: []
|
||||
interval: ""
|
||||
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
|
||||
##
|
||||
sampleLimit: 0
|
||||
|
||||
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
|
||||
##
|
||||
targetLimit: 0
|
||||
|
||||
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelNameLengthLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelValueLengthLimit: 0
|
||||
scrapeTimeout: ""
|
||||
proxyUrl: ""
|
||||
selectorOverride: {}
|
||||
honorLabels: false
|
||||
metricRelabelings: []
|
||||
relabelings: []
|
||||
scheme: ""
|
||||
## File to read bearer token for scraping targets
|
||||
bearerTokenFile: ""
|
||||
## Secret to mount to read bearer token for scraping targets. The secret needs
|
||||
## to be in the same namespace as the service monitor and accessible by the
|
||||
## Prometheus Operator
|
||||
bearerTokenSecret: {}
|
||||
# name: secret-name
|
||||
# key: key-name
|
||||
tlsConfig: {}
|
||||
|
||||
## Specify if a Pod Security Policy for kube-state-metrics must be created
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
|
||||
##
|
||||
podSecurityPolicy:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
## Specify pod annotations
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#apparmor
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#seccomp
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#sysctl
|
||||
##
|
||||
# seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
|
||||
# seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
|
||||
# apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
|
||||
|
||||
additionalVolumes: []
|
||||
|
||||
## Configure network policy for kube-state-metrics
|
||||
networkPolicy:
|
||||
enabled: false
|
||||
# networkPolicy.flavor -- Flavor of the network policy to use.
|
||||
# Can be:
|
||||
# * kubernetes for networking.k8s.io/v1/NetworkPolicy
|
||||
# * cilium for cilium.io/v2/CiliumNetworkPolicy
|
||||
flavor: kubernetes
|
||||
|
||||
## Configure the cilium network policy kube-apiserver selector
|
||||
# cilium:
|
||||
# kubeApiServerSelector:
|
||||
# - toEntities:
|
||||
# - kube-apiserver
|
||||
|
||||
# egress:
|
||||
# - {}
|
||||
# ingress:
|
||||
# - {}
|
||||
# podSelector:
|
||||
# matchLabels:
|
||||
# app.kubernetes.io/name: kube-state-metrics
|
||||
|
||||
securityContext:
|
||||
enabled: true
|
||||
runAsGroup: 65534
|
||||
runAsUser: 65534
|
||||
fsGroup: 65534
|
||||
runAsNonRoot: true
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
|
||||
## Node labels for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
|
||||
nodeSelector:
|
||||
dedicated: "devops"
|
||||
|
||||
## Affinity settings for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
|
||||
affinity: {}
|
||||
|
||||
## Tolerations for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
## Topology spread constraints for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: exporter
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: exporter
|
||||
|
||||
# Annotations to be added to the deployment/statefulset
|
||||
annotations:
|
||||
kubernetes.io/psp: eks.privileged
|
||||
|
||||
# Annotations to be added to the pod
|
||||
podAnnotations: {}
|
||||
|
||||
## Assign a PriorityClassName to pods if set
|
||||
# priorityClassName: ""
|
||||
|
||||
# Ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
||||
podDisruptionBudget: {}
|
||||
|
||||
# Comma-separated list of metrics to be exposed.
|
||||
# This list comprises of exact metric names and/or regex patterns.
|
||||
# The allowlist and denylist are mutually exclusive.
|
||||
metricAllowlist: []
|
||||
|
||||
# Comma-separated list of metrics not to be enabled.
|
||||
# This list comprises of exact metric names and/or regex patterns.
|
||||
# The allowlist and denylist are mutually exclusive.
|
||||
metricDenylist: []
|
||||
|
||||
# Comma-separated list of additional Kubernetes label keys that will be used in the resource's
|
||||
# labels metric. By default the metric contains only name and namespace labels.
|
||||
# To include additional labels, provide a list of resource names in their plural form and Kubernetes
|
||||
# label keys you would like to allow for them (Example: '=namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...)'.
|
||||
# A single '*' can be provided per resource instead to allow any labels, but that has
|
||||
# severe performance implications (Example: '=pods=[*]').
|
||||
metricLabelsAllowlist:
|
||||
- pods=[*]
|
||||
- nodes=[*]
|
||||
- deployments=[*]
|
||||
- statefulsets=[*]
|
||||
- persistentvolumeclaims=[*]
|
||||
- persistentvolumes=[*]
|
||||
- ingresses=[*]
|
||||
- namespaces=[*]
|
||||
- horizontalpodautoscalers=[*]
|
||||
# - namespaces=[k8s-label-1,k8s-label-n]
|
||||
|
||||
# Comma-separated list of Kubernetes annotations keys that will be used in the resource'
|
||||
# labels metric. By default the metric contains only name and namespace labels.
|
||||
# To include additional annotations provide a list of resource names in their plural form and Kubernetes
|
||||
# annotation keys you would like to allow for them (Example: '=namespaces=[kubernetes.io/team,...],pods=[kubernetes.io/team],...)'.
|
||||
# A single '*' can be provided per resource instead to allow any annotations, but that has
|
||||
# severe performance implications (Example: '=pods=[*]').
|
||||
metricAnnotationsAllowList: []
|
||||
# - pods=[k8s-annotation-1,k8s-annotation-n]
|
||||
|
||||
# Available collectors for kube-state-metrics.
|
||||
# By default, all available resources are enabled, comment out to disable.
|
||||
collectors:
|
||||
- certificatesigningrequests
|
||||
- configmaps
|
||||
- cronjobs
|
||||
- daemonsets
|
||||
- deployments
|
||||
- endpoints
|
||||
- horizontalpodautoscalers
|
||||
- ingresses
|
||||
- jobs
|
||||
- leases
|
||||
- limitranges
|
||||
- mutatingwebhookconfigurations
|
||||
- namespaces
|
||||
- networkpolicies
|
||||
- nodes
|
||||
- persistentvolumeclaims
|
||||
- persistentvolumes
|
||||
- poddisruptionbudgets
|
||||
- pods
|
||||
- replicasets
|
||||
- replicationcontrollers
|
||||
- resourcequotas
|
||||
- secrets
|
||||
- services
|
||||
- statefulsets
|
||||
- storageclasses
|
||||
- validatingwebhookconfigurations
|
||||
- volumeattachments
|
||||
|
||||
# Enabling kubeconfig will pass the --kubeconfig argument to the container
|
||||
kubeconfig:
|
||||
enabled: false
|
||||
# base64 encoded kube-config file
|
||||
secret:
|
||||
|
||||
# Enabling support for customResourceState, will create a configMap including your config that will be read from kube-state-metrics
|
||||
customResourceState:
|
||||
enabled: false
|
||||
# Add (Cluster)Role permissions to list/watch the customResources defined in the config to rbac.extraRules
|
||||
config: {}
|
||||
|
||||
# Enable only the release namespace for collecting resources. By default all namespaces are collected.
|
||||
# If releaseNamespace and namespaces are both set a merged list will be collected.
|
||||
releaseNamespace: false
|
||||
|
||||
# Comma-separated list(string) or yaml list of namespaces to be enabled for collecting resources. By default all namespaces are collected.
|
||||
namespaces: ""
|
||||
|
||||
# Comma-separated list of namespaces not to be enabled. If namespaces and namespaces-denylist are both set,
|
||||
# only namespaces that are excluded in namespaces-denylist will be used.
|
||||
namespacesDenylist: ""
|
||||
|
||||
## Override the deployment namespace
|
||||
##
|
||||
namespaceOverride: ""
|
||||
|
||||
resources:
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 50Mi
|
||||
|
||||
## Provide a k8s version to define apiGroups for podSecurityPolicy Cluster Role.
|
||||
## For example: kubeTargetVersionOverride: 1.14.9
|
||||
##
|
||||
kubeTargetVersionOverride: ""
|
||||
|
||||
# Enable self metrics configuration for service and Service Monitor
|
||||
# Default values for telemetry configuration can be overridden
|
||||
# If you set telemetryNodePort, you must also set service.type to NodePort
|
||||
selfMonitor:
|
||||
enabled: true
|
||||
# telemetryHost: 0.0.0.0
|
||||
telemetryPort: 8081
|
||||
# telemetryNodePort: 0
|
||||
|
||||
# Enable vertical pod autoscaler support for kube-state-metrics
|
||||
verticalPodAutoscaler:
|
||||
enabled: false
|
||||
# List of resources that the vertical pod autoscaler can control. Defaults to cpu and memory
|
||||
controlledResources: []
|
||||
|
||||
# Define the max allowed resources for the pod
|
||||
maxAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
# Define the min allowed resources for the pod
|
||||
minAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
|
||||
# updatePolicy:
|
||||
# Specifies whether recommended updates are applied when a Pod is started and whether recommended updates
|
||||
# are applied during the life of a Pod. Possible values are "Off", "Initial", "Recreate", and "Auto".
|
||||
# updateMode: Auto
|
||||
|
||||
# volumeMounts are used to add custom volume mounts to deployment.
|
||||
# See example below
|
||||
volumeMounts: []
|
||||
# - mountPath: /etc/config
|
||||
# name: config-volume
|
||||
|
||||
# volumes are used to add custom volumes to deployment
|
||||
# See example below
|
||||
volumes: []
|
||||
# - configMap:
|
||||
# name: cm-for-volume
|
||||
# name: config-volume
|
||||
-296
@@ -1,296 +0,0 @@
|
||||
# Default values for victoria-metrics-agent.
|
||||
# This is a YAML-formatted file.
|
||||
# Declare variables to be passed into your templates.
|
||||
|
||||
replicaCount: 2
|
||||
|
||||
fullnameOverride: vmagent-dbc-dping-prd
|
||||
# vmagent scraping configuration:
|
||||
# https://github.com/VictoriaMetrics/VictoriaMetrics/blob/master/docs/vmagent.md#how-to-collect-metrics-in-prometheus-format
|
||||
|
||||
# use existing configmap if specified
|
||||
# otherwise .config values will be used
|
||||
configMap: "vmagent-dbc-dping-prd-config" # Use same name as in fullnameOverride-config
|
||||
|
||||
dedicatedValue: false
|
||||
|
||||
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: ScheduleAnyway
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmagent
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmagent
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
# vmagent pods will take almost 20-25 mins to work properly
|
||||
minReadySeconds: 180
|
||||
progressDeadlineSeconds: 300
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
|
||||
strategy: {}
|
||||
# rollingUpdate:
|
||||
# maxSurge: 25%
|
||||
# maxUnavailable: 25%
|
||||
# type: RollingUpdate
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/
|
||||
statefulset:
|
||||
enabled: false
|
||||
# -- create cluster of vmagents. See https://docs.victoriametrics.com/vmagent.html#scraping-big-number-of-targets
|
||||
# available since 1.77.2 version https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.77.2
|
||||
clusterMode: false
|
||||
# -- replication factor for vmagent in cluster mode
|
||||
replicationFactor: 1
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies
|
||||
updateStrategy: {}
|
||||
# type: RollingUpdate
|
||||
|
||||
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/vmagent
|
||||
tag: v1.93.7-cluster # rewrites Chart.AppVersion
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
imagePullSecrets: []
|
||||
nameOverride: ""
|
||||
|
||||
containerWorkingDir: "/"
|
||||
|
||||
rbac:
|
||||
create: true
|
||||
# Note: The PSP will only be deployed, if Kubernetes (<1.25) supports the resource.
|
||||
pspEnabled: true
|
||||
annotations: {}
|
||||
extraLabels: {}
|
||||
# -- if true and `rbac.enabled`, will deploy a Role/Rolebinding instead of a ClusterRole/ClusterRoleBinding
|
||||
namespaced: false
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a service account should be created
|
||||
create: true
|
||||
# Annotations to add to the service account
|
||||
annotations: {
|
||||
iam.gke.io/gcp-service-account: sa-dbc-desre-vmagent-prd@meesho-dbc-prd-0622.iam.gserviceaccount.com
|
||||
}
|
||||
# The name of the service account to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name:
|
||||
|
||||
## See `kubectl explain poddisruptionbudget.spec` for more
|
||||
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
||||
podDisruptionBudget:
|
||||
enabled: false
|
||||
# minAvailable: 1
|
||||
# maxUnavailable: 1
|
||||
labels: {}
|
||||
|
||||
# WARN: need to specify at least one remote write url or one multi tenant url
|
||||
# remoteWriteUrls: []
|
||||
remoteWriteUrls:
|
||||
# - https://vminsert-prd-dbc.meeshogcp.in/insert/100/prometheus/api/v1/write
|
||||
- http://vminsert-dbc-prd.meeshogcp.in/insert/100/prometheus/api/v1/write
|
||||
# - http://prometheus:8480/insert/0/prometheus
|
||||
|
||||
multiTenantUrls: []
|
||||
# multiTenantUrls:
|
||||
# - http://vm-insert-az1:8480
|
||||
# - http://vm-insert-az2:8480
|
||||
|
||||
extraArgs:
|
||||
envflag.enable: "true"
|
||||
envflag.prefix: VM_
|
||||
loggerFormat: json
|
||||
promscrape.config.strictParse: false
|
||||
promscrape.maxScrapeSize: 1000000000
|
||||
promscrape.minResponseSizeForStreamParse: 1000000
|
||||
loggerTimezone: "Asia/Kolkata"
|
||||
|
||||
# Uncomment and specify the port if you want to support any of the protocols:
|
||||
# https://victoriametrics.github.io/vmagent.html#features
|
||||
# graphiteListenAddr: ":2003"
|
||||
# influxListenAddr: ":8189"
|
||||
# opentsdbHTTPListenAddr: ":4242"
|
||||
# opentsdbListenAddr: ":4242"
|
||||
|
||||
# -- Additional environment variables (ex.: secret tokens, flags) https://github.com/VictoriaMetrics/VictoriaMetrics#environment-variables
|
||||
env:
|
||||
[]
|
||||
# - name: VM_remoteWrite_basicAuth_password
|
||||
# valueFrom:
|
||||
# secretKeyRef:
|
||||
# name: auth_secret
|
||||
# key: password
|
||||
|
||||
# extra Labels for Pods, Deployment and Statefulset
|
||||
extraLabels:
|
||||
bu: "dbc-dping"
|
||||
team: "dbc-dping-sre"
|
||||
service: "vmagent-dbc-dping-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "vmagent"
|
||||
|
||||
|
||||
|
||||
# extra Labels for Pods only
|
||||
podLabels: {}
|
||||
|
||||
# Additional hostPath mounts
|
||||
extraHostPathMounts:
|
||||
[]
|
||||
# - name: certs-dir
|
||||
# mountPath: /etc/kubernetes/certs
|
||||
# subPath: ""
|
||||
# hostPath: /etc/kubernetes/certs
|
||||
# readOnly: true
|
||||
|
||||
# Extra Volumes for the pod
|
||||
extraVolumes:
|
||||
[]
|
||||
# - name: example
|
||||
# configMap:
|
||||
# name: example
|
||||
|
||||
# Extra Volume Mounts for the container
|
||||
extraVolumeMounts:
|
||||
[]
|
||||
# - name: example
|
||||
# mountPath: /example
|
||||
|
||||
extraContainers: []
|
||||
# - name: config-reloader
|
||||
# image: reloader-image
|
||||
|
||||
podSecurityContext:
|
||||
{}
|
||||
# fsGroup: 2000
|
||||
|
||||
securityContext:
|
||||
{}
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
|
||||
service:
|
||||
enabled: true
|
||||
annotations: {}
|
||||
# cloud.google.com/neg: '{"exposed_ports": {"8429":{"name": "vmagent-dbc-prd"}}}'
|
||||
extraLabels: {}
|
||||
clusterIP: ""
|
||||
## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
|
||||
##
|
||||
externalIPs: []
|
||||
loadBalancerIP: ""
|
||||
loadBalancerSourceRanges: []
|
||||
servicePort: 8429
|
||||
# nodePort: 30000
|
||||
type: ClusterIP
|
||||
# Ref: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
|
||||
# externalTrafficPolicy: "local"
|
||||
# healthCheckNodePort: 0
|
||||
ingress:
|
||||
enabled: true
|
||||
ingressClassName: nginx-internal
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
|
||||
extraLabels: {}
|
||||
hosts:
|
||||
- name: vmagent-dbc-dping-prd.meeshogcp.in
|
||||
path: /
|
||||
port: http
|
||||
tls: []
|
||||
# - secretName: vmagent-ingress-tls
|
||||
# hosts:
|
||||
# - vmagent.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
|
||||
resources:
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 128Mi
|
||||
requests:
|
||||
cpu: 2
|
||||
memory: 4Gi
|
||||
|
||||
# Annotations to be added to the deployment
|
||||
annotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8429"
|
||||
|
||||
# Annotations to be added to pod
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8429"
|
||||
|
||||
nodeSelector:
|
||||
dedicated: "devops"
|
||||
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
|
||||
affinity: {}
|
||||
|
||||
# -- priority class to be assigned to the pod(s)
|
||||
priorityClassName: ""
|
||||
|
||||
serviceMonitor:
|
||||
enabled: false
|
||||
extraLabels: {}
|
||||
annotations: {}
|
||||
relabelings: []
|
||||
# interval: 15s
|
||||
# scrapeTimeout: 5s
|
||||
# -- Commented. HTTP scheme to use for scraping.
|
||||
# scheme: https
|
||||
# -- Commented. TLS configuration to use when scraping the endpoint
|
||||
# tlsConfig:
|
||||
# insecureSkipVerify: true
|
||||
|
||||
persistence:
|
||||
enabled: false
|
||||
# storageClassName: default
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
size: 10Gi
|
||||
annotations: {}
|
||||
extraLabels: {}
|
||||
existingClaim: ""
|
||||
# -- Bind Persistent Volume by labels. Must match all labels of targeted PV.
|
||||
matchLabels: {}
|
||||
|
||||
# -- Extra scrape configs that will be appended to `config`
|
||||
extraScrapeConfigs: []
|
||||
|
||||
# Add extra specs dynamically to this chart
|
||||
extraObjects: []
|
||||
-478
@@ -1,478 +0,0 @@
|
||||
# Default values for kube-state-metrics.
|
||||
prometheusScrape: true
|
||||
image:
|
||||
registry: asia-southeast1-docker.pkg.dev
|
||||
repository: meesho-devops-admin-0622/admin/sre/kube-state-metrics
|
||||
# If unset use v + .Charts.appVersion
|
||||
tag: v2.9.2
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
fullnameOverride: kube-state-metrics-dbc-dpcon-prd
|
||||
|
||||
dedicatedValue: false
|
||||
|
||||
imagePullSecrets: []
|
||||
# - name: "image-pull-secret"
|
||||
|
||||
ingress:
|
||||
enabled: false
|
||||
ingressClassName: internal
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
|
||||
extraLabels: {}
|
||||
hosts:
|
||||
- name: clustermetrics-dbc-dpcon-prd.meesho.com
|
||||
path: /
|
||||
port: http
|
||||
tls: []
|
||||
# - secretName: vmagent-ingress-tls
|
||||
# hosts:
|
||||
# - vmagent.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
|
||||
global:
|
||||
# To help compatibility with other charts which use global.imagePullSecrets.
|
||||
# Allow either an array of {name: pullSecret} maps (k8s-style), or an array of strings (more common helm-style).
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - name: pullSecret1
|
||||
# - name: pullSecret2
|
||||
# or
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - pullSecret1
|
||||
# - pullSecret2
|
||||
imagePullSecrets: []
|
||||
#
|
||||
# Allow parent charts to override registry hostname
|
||||
imageRegistry: ""
|
||||
|
||||
# If set to true, this will deploy kube-state-metrics as a StatefulSet and the data
|
||||
# will be automatically sharded across <.Values.replicas> pods using the built-in
|
||||
# autodiscovery feature: https://github.com/kubernetes/kube-state-metrics#automated-sharding
|
||||
# This is an experimental feature and there are no stability guarantees.
|
||||
autosharding:
|
||||
enabled: false
|
||||
|
||||
replicas: 2
|
||||
|
||||
# List of additional cli arguments to configure kube-state-metrics
|
||||
# for example: --enable-gzip-encoding, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/kubernetes/kube-state-metrics/blob/master/docs/cli-arguments.md
|
||||
extraArgs: []
|
||||
|
||||
service:
|
||||
port: 8080
|
||||
# Default to clusterIP for backward compatibility
|
||||
type: ClusterIP
|
||||
nodePort: 0
|
||||
loadBalancerIP: ""
|
||||
# Only allow access to the loadBalancerIP from these IPs
|
||||
loadBalancerSourceRanges: []
|
||||
clusterIP: ""
|
||||
annotations: {}
|
||||
|
||||
## Additional labels to add to all resources
|
||||
customLabels:
|
||||
bu: "dbc-dpcon"
|
||||
team: "dbc-dpcon-sre"
|
||||
service: "kube-state-metrics-dbc-dpcon-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "exporter"
|
||||
|
||||
# app: kube-state-metrics
|
||||
|
||||
## Override selector labels
|
||||
selectorOverride: {}
|
||||
|
||||
## set to true to add the release label so scraping of the servicemonitor with kube-prometheus-stack works out of the box
|
||||
releaseLabel: false
|
||||
|
||||
hostNetwork: false
|
||||
|
||||
rbac:
|
||||
# If true, create & use RBAC resources
|
||||
create: true
|
||||
|
||||
# Set to a rolename to use existing role - skipping role creating - but still doing serviceaccount and rolebinding to it, rolename set here.
|
||||
# useExistingRole: your-existing-role
|
||||
|
||||
# If set to false - Run without Cluteradmin privs needed - ONLY works if namespace is also set (if useExistingRole is set this name is used as ClusterRole or Role to bind to)
|
||||
useClusterRole: true
|
||||
|
||||
# Add permissions for CustomResources' apiGroups in Role/ClusterRole. Should be used in conjunction with Custom Resource State Metrics configuration
|
||||
# Example:
|
||||
# - apiGroups: ["monitoring.coreos.com"]
|
||||
# resources: ["prometheuses"]
|
||||
# verbs: ["list", "watch"]
|
||||
extraRules: []
|
||||
|
||||
# Configure kube-rbac-proxy. When enabled, creates one kube-rbac-proxy container per exposed HTTP endpoint (metrics and telemetry if enabled).
|
||||
# The requests are served through the same service but requests are then HTTPS.
|
||||
kubeRBACProxy:
|
||||
enabled: false
|
||||
image:
|
||||
registry: quay.io
|
||||
repository: brancz/kube-rbac-proxy
|
||||
tag: v0.14.0
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# List of additional cli arguments to configure kube-rbac-prxy
|
||||
# for example: --tls-cipher-suites, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/brancz/kube-rbac-proxy#usage
|
||||
extraArgs: []
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext: {}
|
||||
|
||||
resources: {}
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
# requests:
|
||||
# cpu: 10m
|
||||
# memory: 32Mi
|
||||
|
||||
## volumeMounts enables mounting custom volumes in rbac-proxy containers
|
||||
## Useful for TLS certificates and keys
|
||||
volumeMounts: []
|
||||
# - mountPath: /etc/tls
|
||||
# name: kube-rbac-proxy-tls
|
||||
# readOnly: true
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a ServiceAccount should be created, require rbac true
|
||||
create: true
|
||||
# The name of the ServiceAccount to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name:
|
||||
# Reference to one or more secrets to be used when pulling images
|
||||
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
||||
imagePullSecrets: []
|
||||
# ServiceAccount annotations.
|
||||
# Use case: AWS EKS IAM roles for service accounts
|
||||
# ref: https://docs.aws.amazon.com/eks/latest/userguide/specify-service-account-role.html
|
||||
annotations: {}
|
||||
|
||||
prometheus:
|
||||
monitor:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
additionalLabels: {}
|
||||
namespace: ""
|
||||
jobLabel: ""
|
||||
targetLabels: []
|
||||
podTargetLabels: []
|
||||
interval: ""
|
||||
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
|
||||
##
|
||||
sampleLimit: 0
|
||||
|
||||
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
|
||||
##
|
||||
targetLimit: 0
|
||||
|
||||
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelNameLengthLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelValueLengthLimit: 0
|
||||
scrapeTimeout: ""
|
||||
proxyUrl: ""
|
||||
selectorOverride: {}
|
||||
honorLabels: false
|
||||
metricRelabelings: []
|
||||
relabelings: []
|
||||
scheme: ""
|
||||
## File to read bearer token for scraping targets
|
||||
bearerTokenFile: ""
|
||||
## Secret to mount to read bearer token for scraping targets. The secret needs
|
||||
## to be in the same namespace as the service monitor and accessible by the
|
||||
## Prometheus Operator
|
||||
bearerTokenSecret: {}
|
||||
# name: secret-name
|
||||
# key: key-name
|
||||
tlsConfig: {}
|
||||
|
||||
## Specify if a Pod Security Policy for kube-state-metrics must be created
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
|
||||
##
|
||||
podSecurityPolicy:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
## Specify pod annotations
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#apparmor
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#seccomp
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#sysctl
|
||||
##
|
||||
# seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
|
||||
# seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
|
||||
# apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
|
||||
|
||||
additionalVolumes: []
|
||||
|
||||
## Configure network policy for kube-state-metrics
|
||||
networkPolicy:
|
||||
enabled: false
|
||||
# networkPolicy.flavor -- Flavor of the network policy to use.
|
||||
# Can be:
|
||||
# * kubernetes for networking.k8s.io/v1/NetworkPolicy
|
||||
# * cilium for cilium.io/v2/CiliumNetworkPolicy
|
||||
flavor: kubernetes
|
||||
|
||||
## Configure the cilium network policy kube-apiserver selector
|
||||
# cilium:
|
||||
# kubeApiServerSelector:
|
||||
# - toEntities:
|
||||
# - kube-apiserver
|
||||
|
||||
# egress:
|
||||
# - {}
|
||||
# ingress:
|
||||
# - {}
|
||||
# podSelector:
|
||||
# matchLabels:
|
||||
# app.kubernetes.io/name: kube-state-metrics
|
||||
|
||||
securityContext:
|
||||
enabled: true
|
||||
runAsGroup: 65534
|
||||
runAsUser: 65534
|
||||
fsGroup: 65534
|
||||
runAsNonRoot: true
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
|
||||
## Node labels for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
|
||||
nodeSelector:
|
||||
dedicated: "devops"
|
||||
|
||||
## Affinity settings for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
|
||||
affinity: {}
|
||||
|
||||
## Tolerations for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
## Topology spread constraints for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: exporter
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: exporter
|
||||
|
||||
# Annotations to be added to the deployment/statefulset
|
||||
annotations:
|
||||
kubernetes.io/psp: eks.privileged
|
||||
|
||||
# Annotations to be added to the pod
|
||||
podAnnotations: {}
|
||||
|
||||
## Assign a PriorityClassName to pods if set
|
||||
# priorityClassName: ""
|
||||
|
||||
# Ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
||||
podDisruptionBudget: {}
|
||||
|
||||
# Comma-separated list of metrics to be exposed.
|
||||
# This list comprises of exact metric names and/or regex patterns.
|
||||
# The allowlist and denylist are mutually exclusive.
|
||||
metricAllowlist: []
|
||||
|
||||
# Comma-separated list of metrics not to be enabled.
|
||||
# This list comprises of exact metric names and/or regex patterns.
|
||||
# The allowlist and denylist are mutually exclusive.
|
||||
metricDenylist: []
|
||||
|
||||
# Comma-separated list of additional Kubernetes label keys that will be used in the resource's
|
||||
# labels metric. By default the metric contains only name and namespace labels.
|
||||
# To include additional labels, provide a list of resource names in their plural form and Kubernetes
|
||||
# label keys you would like to allow for them (Example: '=namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...)'.
|
||||
# A single '*' can be provided per resource instead to allow any labels, but that has
|
||||
# severe performance implications (Example: '=pods=[*]').
|
||||
metricLabelsAllowlist:
|
||||
- pods=[*]
|
||||
- nodes=[*]
|
||||
- deployments=[*]
|
||||
- statefulsets=[*]
|
||||
- persistentvolumeclaims=[*]
|
||||
- persistentvolumes=[*]
|
||||
- ingresses=[*]
|
||||
- namespaces=[*]
|
||||
- horizontalpodautoscalers=[*]
|
||||
# - namespaces=[k8s-label-1,k8s-label-n]
|
||||
|
||||
# Comma-separated list of Kubernetes annotations keys that will be used in the resource'
|
||||
# labels metric. By default the metric contains only name and namespace labels.
|
||||
# To include additional annotations provide a list of resource names in their plural form and Kubernetes
|
||||
# annotation keys you would like to allow for them (Example: '=namespaces=[kubernetes.io/team,...],pods=[kubernetes.io/team],...)'.
|
||||
# A single '*' can be provided per resource instead to allow any annotations, but that has
|
||||
# severe performance implications (Example: '=pods=[*]').
|
||||
metricAnnotationsAllowList: []
|
||||
# - pods=[k8s-annotation-1,k8s-annotation-n]
|
||||
|
||||
# Available collectors for kube-state-metrics.
|
||||
# By default, all available resources are enabled, comment out to disable.
|
||||
collectors:
|
||||
- certificatesigningrequests
|
||||
- configmaps
|
||||
- cronjobs
|
||||
- daemonsets
|
||||
- deployments
|
||||
- endpoints
|
||||
- horizontalpodautoscalers
|
||||
- ingresses
|
||||
- jobs
|
||||
- leases
|
||||
- limitranges
|
||||
- mutatingwebhookconfigurations
|
||||
- namespaces
|
||||
- networkpolicies
|
||||
- nodes
|
||||
- persistentvolumeclaims
|
||||
- persistentvolumes
|
||||
- poddisruptionbudgets
|
||||
- pods
|
||||
- replicasets
|
||||
- replicationcontrollers
|
||||
- resourcequotas
|
||||
- secrets
|
||||
- services
|
||||
- statefulsets
|
||||
- storageclasses
|
||||
- validatingwebhookconfigurations
|
||||
- volumeattachments
|
||||
|
||||
# Enabling kubeconfig will pass the --kubeconfig argument to the container
|
||||
kubeconfig:
|
||||
enabled: false
|
||||
# base64 encoded kube-config file
|
||||
secret:
|
||||
|
||||
# Enabling support for customResourceState, will create a configMap including your config that will be read from kube-state-metrics
|
||||
customResourceState:
|
||||
enabled: false
|
||||
# Add (Cluster)Role permissions to list/watch the customResources defined in the config to rbac.extraRules
|
||||
config: {}
|
||||
|
||||
# Enable only the release namespace for collecting resources. By default all namespaces are collected.
|
||||
# If releaseNamespace and namespaces are both set a merged list will be collected.
|
||||
releaseNamespace: false
|
||||
|
||||
# Comma-separated list(string) or yaml list of namespaces to be enabled for collecting resources. By default all namespaces are collected.
|
||||
namespaces: ""
|
||||
|
||||
# Comma-separated list of namespaces not to be enabled. If namespaces and namespaces-denylist are both set,
|
||||
# only namespaces that are excluded in namespaces-denylist will be used.
|
||||
namespacesDenylist: ""
|
||||
|
||||
## Override the deployment namespace
|
||||
##
|
||||
namespaceOverride: ""
|
||||
|
||||
resources:
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 50Mi
|
||||
|
||||
## Provide a k8s version to define apiGroups for podSecurityPolicy Cluster Role.
|
||||
## For example: kubeTargetVersionOverride: 1.14.9
|
||||
##
|
||||
kubeTargetVersionOverride: ""
|
||||
|
||||
# Enable self metrics configuration for service and Service Monitor
|
||||
# Default values for telemetry configuration can be overridden
|
||||
# If you set telemetryNodePort, you must also set service.type to NodePort
|
||||
selfMonitor:
|
||||
enabled: true
|
||||
# telemetryHost: 0.0.0.0
|
||||
telemetryPort: 8081
|
||||
# telemetryNodePort: 0
|
||||
|
||||
# Enable vertical pod autoscaler support for kube-state-metrics
|
||||
verticalPodAutoscaler:
|
||||
enabled: false
|
||||
# List of resources that the vertical pod autoscaler can control. Defaults to cpu and memory
|
||||
controlledResources: []
|
||||
|
||||
# Define the max allowed resources for the pod
|
||||
maxAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
# Define the min allowed resources for the pod
|
||||
minAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
|
||||
# updatePolicy:
|
||||
# Specifies whether recommended updates are applied when a Pod is started and whether recommended updates
|
||||
# are applied during the life of a Pod. Possible values are "Off", "Initial", "Recreate", and "Auto".
|
||||
# updateMode: Auto
|
||||
|
||||
# volumeMounts are used to add custom volume mounts to deployment.
|
||||
# See example below
|
||||
volumeMounts: []
|
||||
# - mountPath: /etc/config
|
||||
# name: config-volume
|
||||
|
||||
# volumes are used to add custom volumes to deployment
|
||||
# See example below
|
||||
volumes: []
|
||||
# - configMap:
|
||||
# name: cm-for-volume
|
||||
# name: config-volume
|
||||
-296
@@ -1,296 +0,0 @@
|
||||
# Default values for victoria-metrics-agent.
|
||||
# This is a YAML-formatted file.
|
||||
# Declare variables to be passed into your templates.
|
||||
|
||||
replicaCount: 2
|
||||
|
||||
fullnameOverride: vmagent-dbc-dpcon-prd
|
||||
# vmagent scraping configuration:
|
||||
# https://github.com/VictoriaMetrics/VictoriaMetrics/blob/master/docs/vmagent.md#how-to-collect-metrics-in-prometheus-format
|
||||
|
||||
# use existing configmap if specified
|
||||
# otherwise .config values will be used
|
||||
configMap: "vmagent-dbc-dpcon-prd-config" # Use same name as in fullnameOverride-config
|
||||
|
||||
dedicatedValue: false
|
||||
|
||||
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: ScheduleAnyway
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmagent
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: vmagent
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
# vmagent pods will take almost 20-25 mins to work properly
|
||||
minReadySeconds: 180
|
||||
progressDeadlineSeconds: 300
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy
|
||||
strategy: {}
|
||||
# rollingUpdate:
|
||||
# maxSurge: 25%
|
||||
# maxUnavailable: 25%
|
||||
# type: RollingUpdate
|
||||
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/
|
||||
statefulset:
|
||||
enabled: false
|
||||
# -- create cluster of vmagents. See https://docs.victoriametrics.com/vmagent.html#scraping-big-number-of-targets
|
||||
# available since 1.77.2 version https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.77.2
|
||||
clusterMode: false
|
||||
# -- replication factor for vmagent in cluster mode
|
||||
replicationFactor: 1
|
||||
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies
|
||||
updateStrategy: {}
|
||||
# type: RollingUpdate
|
||||
|
||||
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/vmagent
|
||||
tag: v1.93.7-cluster # rewrites Chart.AppVersion
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
imagePullSecrets: []
|
||||
nameOverride: ""
|
||||
|
||||
containerWorkingDir: "/"
|
||||
|
||||
rbac:
|
||||
create: true
|
||||
# Note: The PSP will only be deployed, if Kubernetes (<1.25) supports the resource.
|
||||
pspEnabled: true
|
||||
annotations: {}
|
||||
extraLabels: {}
|
||||
# -- if true and `rbac.enabled`, will deploy a Role/Rolebinding instead of a ClusterRole/ClusterRoleBinding
|
||||
namespaced: false
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a service account should be created
|
||||
create: true
|
||||
# Annotations to add to the service account
|
||||
annotations: {
|
||||
iam.gke.io/gcp-service-account: sa-dbc-desre-vmagent-prd@meesho-dbc-prd-0622.iam.gserviceaccount.com
|
||||
}
|
||||
# The name of the service account to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name:
|
||||
|
||||
## See `kubectl explain poddisruptionbudget.spec` for more
|
||||
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
||||
podDisruptionBudget:
|
||||
enabled: false
|
||||
# minAvailable: 1
|
||||
# maxUnavailable: 1
|
||||
labels: {}
|
||||
|
||||
# WARN: need to specify at least one remote write url or one multi tenant url
|
||||
# remoteWriteUrls: []
|
||||
remoteWriteUrls:
|
||||
# - https://vminsert-prd-dbc.meeshogcp.in/insert/100/prometheus/api/v1/write
|
||||
- http://vminsert-dbc-prd.meeshogcp.in/insert/100/prometheus/api/v1/write
|
||||
# - http://prometheus:8480/insert/0/prometheus
|
||||
|
||||
multiTenantUrls: []
|
||||
# multiTenantUrls:
|
||||
# - http://vm-insert-az1:8480
|
||||
# - http://vm-insert-az2:8480
|
||||
|
||||
extraArgs:
|
||||
envflag.enable: "true"
|
||||
envflag.prefix: VM_
|
||||
loggerFormat: json
|
||||
promscrape.config.strictParse: false
|
||||
promscrape.maxScrapeSize: 1000000000
|
||||
promscrape.minResponseSizeForStreamParse: 1000000
|
||||
loggerTimezone: "Asia/Kolkata"
|
||||
|
||||
# Uncomment and specify the port if you want to support any of the protocols:
|
||||
# https://victoriametrics.github.io/vmagent.html#features
|
||||
# graphiteListenAddr: ":2003"
|
||||
# influxListenAddr: ":8189"
|
||||
# opentsdbHTTPListenAddr: ":4242"
|
||||
# opentsdbListenAddr: ":4242"
|
||||
|
||||
# -- Additional environment variables (ex.: secret tokens, flags) https://github.com/VictoriaMetrics/VictoriaMetrics#environment-variables
|
||||
env:
|
||||
[]
|
||||
# - name: VM_remoteWrite_basicAuth_password
|
||||
# valueFrom:
|
||||
# secretKeyRef:
|
||||
# name: auth_secret
|
||||
# key: password
|
||||
|
||||
# extra Labels for Pods, Deployment and Statefulset
|
||||
extraLabels:
|
||||
bu: "dbc-dpcon"
|
||||
team: "dbc-dpcon-sre"
|
||||
service: "vmagent-dbc-dpcon-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "vmagent"
|
||||
|
||||
|
||||
|
||||
# extra Labels for Pods only
|
||||
podLabels: {}
|
||||
|
||||
# Additional hostPath mounts
|
||||
extraHostPathMounts:
|
||||
[]
|
||||
# - name: certs-dir
|
||||
# mountPath: /etc/kubernetes/certs
|
||||
# subPath: ""
|
||||
# hostPath: /etc/kubernetes/certs
|
||||
# readOnly: true
|
||||
|
||||
# Extra Volumes for the pod
|
||||
extraVolumes:
|
||||
[]
|
||||
# - name: example
|
||||
# configMap:
|
||||
# name: example
|
||||
|
||||
# Extra Volume Mounts for the container
|
||||
extraVolumeMounts:
|
||||
[]
|
||||
# - name: example
|
||||
# mountPath: /example
|
||||
|
||||
extraContainers: []
|
||||
# - name: config-reloader
|
||||
# image: reloader-image
|
||||
|
||||
podSecurityContext:
|
||||
{}
|
||||
# fsGroup: 2000
|
||||
|
||||
securityContext:
|
||||
{}
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
|
||||
service:
|
||||
enabled: true
|
||||
annotations: {}
|
||||
# cloud.google.com/neg: '{"exposed_ports": {"8429":{"name": "vmagent-dbc-prd"}}}'
|
||||
extraLabels: {}
|
||||
clusterIP: ""
|
||||
## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
|
||||
##
|
||||
externalIPs: []
|
||||
loadBalancerIP: ""
|
||||
loadBalancerSourceRanges: []
|
||||
servicePort: 8429
|
||||
# nodePort: 30000
|
||||
type: ClusterIP
|
||||
# Ref: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
|
||||
# externalTrafficPolicy: "local"
|
||||
# healthCheckNodePort: 0
|
||||
ingress:
|
||||
enabled: true
|
||||
ingressClassName: nginx-internal
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
|
||||
extraLabels: {}
|
||||
hosts:
|
||||
- name: vmagent-dbc-dpcon-prd.meeshogcp.in
|
||||
path: /
|
||||
port: http
|
||||
tls: []
|
||||
# - secretName: vmagent-ingress-tls
|
||||
# hosts:
|
||||
# - vmagent.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
|
||||
resources:
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 128Mi
|
||||
requests:
|
||||
cpu: 2
|
||||
memory: 4Gi
|
||||
|
||||
# Annotations to be added to the deployment
|
||||
annotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8429"
|
||||
|
||||
# Annotations to be added to pod
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8429"
|
||||
|
||||
nodeSelector:
|
||||
dedicated: "devops"
|
||||
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
|
||||
affinity: {}
|
||||
|
||||
# -- priority class to be assigned to the pod(s)
|
||||
priorityClassName: ""
|
||||
|
||||
serviceMonitor:
|
||||
enabled: false
|
||||
extraLabels: {}
|
||||
annotations: {}
|
||||
relabelings: []
|
||||
# interval: 15s
|
||||
# scrapeTimeout: 5s
|
||||
# -- Commented. HTTP scheme to use for scraping.
|
||||
# scheme: https
|
||||
# -- Commented. TLS configuration to use when scraping the endpoint
|
||||
# tlsConfig:
|
||||
# insecureSkipVerify: true
|
||||
|
||||
persistence:
|
||||
enabled: false
|
||||
# storageClassName: default
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
size: 10Gi
|
||||
annotations: {}
|
||||
extraLabels: {}
|
||||
existingClaim: ""
|
||||
# -- Bind Persistent Volume by labels. Must match all labels of targeted PV.
|
||||
matchLabels: {}
|
||||
|
||||
# -- Extra scrape configs that will be appended to `config`
|
||||
extraScrapeConfigs: []
|
||||
|
||||
# Add extra specs dynamically to this chart
|
||||
extraObjects: []
|
||||
@@ -1,3 +0,0 @@
|
||||
# Cluster-based Custom Values
|
||||
|
||||
This folder contains the custom `values.yaml` files organized based on specific cluster names. Each subdirectory corresponds to a particular cluster and holds the configurations for the applications and tools deployed within that cluster.
|
||||
@@ -1,295 +0,0 @@
|
||||
# Custom values for Bifrost (ai-gateway-ext) - Meesho Production
|
||||
# Usage: helm install bifrost ./helm-templates/bifrost-v1.5.12-latest/ -f ./helm-overrides/gke-central-prd-ase1a/ai-gateway-ext/custom-values.yaml -n prd-ai-gateway-ext
|
||||
|
||||
# -- Deployment Configuration --
|
||||
replicaCount: 2
|
||||
|
||||
fullnameOverride: "prd-ai-gateway-ext"
|
||||
|
||||
image:
|
||||
repository: docker.io/maximhq/bifrost
|
||||
pullPolicy: IfNotPresent
|
||||
tag: "v1.6.3"
|
||||
|
||||
# -- Service Account --
|
||||
serviceAccount:
|
||||
create: true
|
||||
automount: true
|
||||
annotations:
|
||||
iam.gke.io/gcp-service-account: sa-dvops-ai-gateway@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
name: "prd-ai-gateway-ext"
|
||||
|
||||
# -- Pod Metadata --
|
||||
deploymentLabels:
|
||||
bu: central
|
||||
env: prod
|
||||
team: devops
|
||||
priority: p1
|
||||
priority_v2: sp1
|
||||
primary_owner: deep.shah
|
||||
secondary_owner: anupam.satsangi
|
||||
service: ai-gateway-ext
|
||||
service_type: producer-httpstateless
|
||||
|
||||
podLabels:
|
||||
bu: central
|
||||
env: prod
|
||||
team: devops
|
||||
priority: p1
|
||||
priority_v2: sp1
|
||||
primary_owner: deep.shah
|
||||
secondary_owner: anupam.satsangi
|
||||
service: ai-gateway-ext
|
||||
service_type: producer-httpstateless
|
||||
|
||||
podAnnotations:
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: "8080"
|
||||
prometheus.io/scrape: "true"
|
||||
telegraf.influxdata.com/class: infra
|
||||
|
||||
# -- Security Context --
|
||||
podSecurityContext:
|
||||
fsGroup: 65534
|
||||
runAsUser: 65534
|
||||
runAsGroup: 65534
|
||||
runAsNonRoot: true
|
||||
|
||||
securityContext:
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
readOnlyRootFilesystem: false
|
||||
runAsNonRoot: true
|
||||
runAsUser: 65534
|
||||
|
||||
# -- Service --
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 8080
|
||||
|
||||
# -- Contour HTTPProxy --
|
||||
# ingress.enabled=false disables Bifrost's official K8s Ingress
|
||||
# httpProxy.enabled=true enables the Meesho Contour HTTPProxy templates
|
||||
# HTTPProxy templates read from ingress.* for hosts, class, etc.
|
||||
httpProxy:
|
||||
enabled: true
|
||||
createContourGateway: true
|
||||
namespace: prd-ai-gateway-ext
|
||||
contourResponseTimeout: false
|
||||
ingress:
|
||||
enabled: false
|
||||
ingressClassName: contour-external
|
||||
servicePortNumber: 8080
|
||||
enableWebsocket: false
|
||||
hosts:
|
||||
- host: ai-gateway-ext.meeshogcp.in
|
||||
paths:
|
||||
- path: /
|
||||
pathType: ImplementationSpecific
|
||||
slowStart:
|
||||
enabled: false
|
||||
aggression: 1
|
||||
minPercent: 10
|
||||
window: 120s
|
||||
|
||||
# -- Resources --
|
||||
resources:
|
||||
limits:
|
||||
cpu: "5"
|
||||
memory: 10Gi
|
||||
requests:
|
||||
cpu: "4"
|
||||
memory: 8Gi
|
||||
|
||||
# -- Health Probes --
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: http
|
||||
scheme: HTTP
|
||||
initialDelaySeconds: 15
|
||||
periodSeconds: 5
|
||||
timeoutSeconds: 3
|
||||
failureThreshold: 5
|
||||
successThreshold: 1
|
||||
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: http
|
||||
scheme: HTTP
|
||||
initialDelaySeconds: 15
|
||||
periodSeconds: 5
|
||||
timeoutSeconds: 3
|
||||
failureThreshold: 5
|
||||
successThreshold: 1
|
||||
|
||||
# -- HPA (disabled - using KEDA) --
|
||||
autoscaling:
|
||||
enabled: false
|
||||
|
||||
# -- Scheduling --
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: megatetralite
|
||||
|
||||
tolerations:
|
||||
- key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: megatetralite
|
||||
effect: NoSchedule
|
||||
|
||||
affinity: {}
|
||||
|
||||
# -- Lifecycle & Graceful Shutdown --
|
||||
terminationGracePeriodSeconds: 300
|
||||
lifecycle:
|
||||
preStop:
|
||||
exec:
|
||||
command:
|
||||
- /bin/bash
|
||||
- "-c"
|
||||
- "kill -SIGQUIT; /bin/sleep 120"
|
||||
|
||||
# -- Bifrost Application Config --
|
||||
bifrost:
|
||||
appDir: /app/data
|
||||
port: 8080
|
||||
host: 0.0.0.0
|
||||
logLevel: warn
|
||||
logStyle: json
|
||||
|
||||
# Auth configured via Bifrost UI (stored in DB), not in Helm values
|
||||
# This avoids blocking /metrics scrape while still protecting the dashboard
|
||||
|
||||
client:
|
||||
dropExcessRequests: false
|
||||
initialPoolSize: 300
|
||||
allowedOrigins:
|
||||
- "*"
|
||||
enableLogging: true
|
||||
disableContentLogging: false
|
||||
disableDbPingsInHealth: false
|
||||
logRetentionDays: 365
|
||||
enforceGovernanceHeader: false
|
||||
allowDirectKeys: false
|
||||
maxRequestBodySizeMb: 100
|
||||
|
||||
# Configure providers with env.VAR_NAME references for API keys
|
||||
# providers:
|
||||
# openai:
|
||||
# - keys:
|
||||
# - value: "env.OPENAI_API_KEY"
|
||||
# models: ["gpt-4o", "gpt-4o-mini"]
|
||||
# weight: 1.0
|
||||
|
||||
# -- Storage (External PostgreSQL) --
|
||||
storage:
|
||||
mode: postgres
|
||||
configStore:
|
||||
enabled: true
|
||||
logsStore:
|
||||
enabled: true
|
||||
|
||||
postgresql:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: true
|
||||
host: "env.BIFROST_POSTGRES_HOST"
|
||||
port: 5432
|
||||
user: "env.BIFROST_POSTGRES_USER"
|
||||
database: "env.BIFROST_POSTGRES_DATABASE"
|
||||
sslMode: "disable"
|
||||
existingSecret: "prd-ai-gateway-ext-vault"
|
||||
passwordKey: "BIFROST_POSTGRES_PASSWORD"
|
||||
|
||||
# -- Vector Store (disabled) --
|
||||
vectorStore:
|
||||
enabled: false
|
||||
type: none
|
||||
|
||||
# -- Meesho Standard Env Vars --
|
||||
env:
|
||||
- name: TZ
|
||||
value: "Asia/Kolkata"
|
||||
- name: BIFROST_POSTGRES_HOST
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: prd-ai-gateway-ext-vault
|
||||
key: BIFROST_POSTGRES_HOST
|
||||
- name: BIFROST_POSTGRES_USER
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: prd-ai-gateway-ext-vault
|
||||
key: BIFROST_POSTGRES_USER
|
||||
- name: BIFROST_POSTGRES_DATABASE
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: prd-ai-gateway-ext-vault
|
||||
key: BIFROST_POSTGRES_DATABASE
|
||||
- name: TELEGRAF_UDP_HOST
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.podIP
|
||||
- name: NODE_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: spec.nodeName
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.name
|
||||
- name: POD_NAMESPACE
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.namespace
|
||||
- name: POD_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.podIP
|
||||
|
||||
# --- Meesho Infrastructure Extensions ---
|
||||
|
||||
# -- PodDisruptionBudget --
|
||||
podDisruptionBudget:
|
||||
enabled: true
|
||||
maxUnavailable: "10%"
|
||||
|
||||
# -- ExternalSecret (Vault) --
|
||||
# Creates K8s Secret "prd-ai-gateway-ext-vault" from Vault path
|
||||
# This secret is referenced by postgresql.external.existingSecret above
|
||||
externalSecret:
|
||||
enabled: true
|
||||
secretName: "prd-ai-gateway-ext-vault"
|
||||
path: "prd/cntr/devop/ai-gateway-ext"
|
||||
refreshInterval: "0"
|
||||
secretStoreRef: "vault-backend"
|
||||
|
||||
# -- KEDA ScaledObject --
|
||||
keda:
|
||||
enabled: true
|
||||
pollingInterval: 30
|
||||
minReplicaCount: 2
|
||||
maxReplicaCount: 200
|
||||
scaledown:
|
||||
stabilizationWindowSeconds: 1800
|
||||
selectpolicy: Min
|
||||
policies:
|
||||
- type: Pods
|
||||
value: 2
|
||||
periodseconds: 15
|
||||
scaleup:
|
||||
stabilizationWindowSeconds: 120
|
||||
selectpolicy: Max
|
||||
policies:
|
||||
- type: Pods
|
||||
value: 2
|
||||
periodseconds: 15
|
||||
- type: Percent
|
||||
value: 10
|
||||
periodseconds: 15
|
||||
triggers:
|
||||
- type: cpu
|
||||
metricType: Utilization
|
||||
metadata:
|
||||
value: "40"
|
||||
@@ -1,286 +0,0 @@
|
||||
# Custom values for Bifrost (ai-gateway) - Meesho Production
|
||||
# Usage: helm install bifrost ./helm-templates/bifrost/ -f ./helm-templates/bifrost/custom-values.yaml -n prd-ai-gateway
|
||||
|
||||
# -- Deployment Configuration --
|
||||
replicaCount: 2
|
||||
|
||||
fullnameOverride: "prd-ai-gateway"
|
||||
|
||||
image:
|
||||
repository: docker.io/maximhq/bifrost
|
||||
pullPolicy: IfNotPresent
|
||||
tag: "v1.4.22"
|
||||
|
||||
# -- Service Account --
|
||||
serviceAccount:
|
||||
create: true
|
||||
automount: true
|
||||
annotations:
|
||||
iam.gke.io/gcp-service-account: sa-dvops-ai-gateway@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
name: "prd-ai-gateway"
|
||||
|
||||
# -- Pod Metadata --
|
||||
deploymentLabels:
|
||||
bu: central
|
||||
env: prod
|
||||
team: devops
|
||||
priority: p1
|
||||
priority_v2: sp1
|
||||
primary_owner: deep.shah
|
||||
secondary_owner: anupam.satsangi
|
||||
service: ai-gateway
|
||||
service_type: producer-httpstateless
|
||||
|
||||
podLabels:
|
||||
bu: central
|
||||
env: prod
|
||||
team: devops
|
||||
priority: p1
|
||||
priority_v2: sp1
|
||||
primary_owner: deep.shah
|
||||
secondary_owner: anupam.satsangi
|
||||
service: ai-gateway
|
||||
service_type: producer-httpstateless
|
||||
|
||||
podAnnotations:
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: "8080"
|
||||
prometheus.io/scrape: "true"
|
||||
telegraf.influxdata.com/class: infra
|
||||
|
||||
# -- Security Context --
|
||||
podSecurityContext:
|
||||
fsGroup: 65534
|
||||
runAsUser: 65534
|
||||
runAsGroup: 65534
|
||||
runAsNonRoot: true
|
||||
|
||||
securityContext:
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
readOnlyRootFilesystem: false
|
||||
runAsNonRoot: true
|
||||
runAsUser: 65534
|
||||
|
||||
# -- Service --
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 8080
|
||||
|
||||
# -- Contour HTTPProxy --
|
||||
# ingress.enabled=false disables Bifrost's official K8s Ingress
|
||||
# httpProxy.enabled=true enables the Meesho Contour HTTPProxy templates
|
||||
# HTTPProxy templates read from ingress.* for hosts, class, etc.
|
||||
httpProxy:
|
||||
enabled: true
|
||||
createContourGateway: true
|
||||
namespace: prd-ai-gateway
|
||||
contourResponseTimeout: false
|
||||
ingress:
|
||||
enabled: false
|
||||
ingressClassName: contour-internal-1
|
||||
servicePortNumber: 8080
|
||||
enableWebsocket: false
|
||||
hosts:
|
||||
- host: ai-gateway.prd.meesho.int
|
||||
paths:
|
||||
- path: /
|
||||
pathType: ImplementationSpecific
|
||||
- host: llm-gateway.prd.meesho.int
|
||||
name: prd-llm-gateway-0
|
||||
intraName: prd-llm-gateway-intra-0
|
||||
paths:
|
||||
- path: /
|
||||
pathType: ImplementationSpecific
|
||||
slowStart:
|
||||
enabled: false
|
||||
aggression: 1
|
||||
minPercent: 10
|
||||
window: 120s
|
||||
|
||||
# -- Resources --
|
||||
resources:
|
||||
limits:
|
||||
cpu: "5"
|
||||
memory: 25Gi
|
||||
requests:
|
||||
cpu: "4"
|
||||
memory: 20Gi
|
||||
|
||||
# -- Health Probes --
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: http
|
||||
scheme: HTTP
|
||||
initialDelaySeconds: 15
|
||||
periodSeconds: 5
|
||||
timeoutSeconds: 3
|
||||
failureThreshold: 5
|
||||
successThreshold: 1
|
||||
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: http
|
||||
scheme: HTTP
|
||||
initialDelaySeconds: 15
|
||||
periodSeconds: 5
|
||||
timeoutSeconds: 3
|
||||
failureThreshold: 5
|
||||
successThreshold: 1
|
||||
|
||||
# -- HPA (disabled - using KEDA) --
|
||||
autoscaling:
|
||||
enabled: false
|
||||
|
||||
# -- Scheduling --
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: megatetralite
|
||||
|
||||
tolerations:
|
||||
- key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: megatetralite
|
||||
effect: NoSchedule
|
||||
|
||||
affinity: {}
|
||||
|
||||
# -- Lifecycle & Graceful Shutdown --
|
||||
terminationGracePeriodSeconds: 300
|
||||
lifecycle:
|
||||
preStop:
|
||||
exec:
|
||||
command:
|
||||
- /bin/bash
|
||||
- "-c"
|
||||
- "kill -SIGQUIT; /bin/sleep 120"
|
||||
|
||||
# -- Bifrost Application Config --
|
||||
bifrost:
|
||||
appDir: /app/data
|
||||
port: 8080
|
||||
host: 0.0.0.0
|
||||
logLevel: warn
|
||||
logStyle: json
|
||||
|
||||
# Auth configured via Bifrost UI (stored in DB), not in Helm values
|
||||
# This avoids blocking /metrics scrape while still protecting the dashboard
|
||||
|
||||
client:
|
||||
dropExcessRequests: false
|
||||
initialPoolSize: 300
|
||||
allowedOrigins:
|
||||
- "*"
|
||||
enableLogging: true
|
||||
disableContentLogging: false
|
||||
disableDbPingsInHealth: false
|
||||
logRetentionDays: 365
|
||||
enforceGovernanceHeader: false
|
||||
allowDirectKeys: false
|
||||
maxRequestBodySizeMb: 100
|
||||
|
||||
# Configure providers with env.VAR_NAME references for API keys
|
||||
# providers:
|
||||
# openai:
|
||||
# - keys:
|
||||
# - value: "env.OPENAI_API_KEY"
|
||||
# models: ["gpt-4o", "gpt-4o-mini"]
|
||||
# weight: 1.0
|
||||
|
||||
# -- Storage (External PostgreSQL) --
|
||||
storage:
|
||||
mode: postgres
|
||||
configStore:
|
||||
enabled: true
|
||||
logsStore:
|
||||
enabled: true
|
||||
|
||||
postgresql:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: true
|
||||
host: "10.147.2.236"
|
||||
port: 5432
|
||||
user: "app_user_bifrost"
|
||||
database: "bifrost_db"
|
||||
sslMode: "disable"
|
||||
existingSecret: "prd-ai-gateway-vault"
|
||||
passwordKey: "BIFROST_POSTGRES_PASSWORD"
|
||||
|
||||
# -- Vector Store (disabled) --
|
||||
vectorStore:
|
||||
enabled: false
|
||||
type: none
|
||||
|
||||
# -- Meesho Standard Env Vars --
|
||||
env:
|
||||
- name: TZ
|
||||
value: "Asia/Kolkata"
|
||||
- name: TELEGRAF_UDP_HOST
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.podIP
|
||||
- name: NODE_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: spec.nodeName
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.name
|
||||
- name: POD_NAMESPACE
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.namespace
|
||||
- name: POD_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.podIP
|
||||
|
||||
# --- Meesho Infrastructure Extensions ---
|
||||
|
||||
# -- PodDisruptionBudget --
|
||||
podDisruptionBudget:
|
||||
enabled: true
|
||||
maxUnavailable: "10%"
|
||||
|
||||
# -- ExternalSecret (Vault) --
|
||||
# Creates K8s Secret "prd-ai-gateway-vault" from Vault path
|
||||
# This secret is referenced by postgresql.external.existingSecret above
|
||||
externalSecret:
|
||||
enabled: true
|
||||
secretName: "prd-ai-gateway-vault"
|
||||
path: "prd/cntr/devop/ai-gateway"
|
||||
refreshInterval: "0"
|
||||
secretStoreRef: "vault-backend"
|
||||
|
||||
# -- KEDA ScaledObject --
|
||||
keda:
|
||||
enabled: true
|
||||
pollingInterval: 30
|
||||
minReplicaCount: 2
|
||||
maxReplicaCount: 200
|
||||
scaledown:
|
||||
stabilizationWindowSeconds: 1800
|
||||
selectpolicy: Min
|
||||
policies:
|
||||
- type: Pods
|
||||
value: 2
|
||||
periodseconds: 15
|
||||
scaleup:
|
||||
stabilizationWindowSeconds: 120
|
||||
selectpolicy: Max
|
||||
policies:
|
||||
- type: Pods
|
||||
value: 2
|
||||
periodseconds: 15
|
||||
- type: Percent
|
||||
value: 10
|
||||
periodseconds: 15
|
||||
triggers:
|
||||
- type: cpu
|
||||
metricType: Utilization
|
||||
metadata:
|
||||
value: "40"
|
||||
@@ -1,99 +0,0 @@
|
||||
# Akamai Observability MCP — grafana-mcp chart on gke-central-prd-ase1a
|
||||
# Chart: helm-templates/grafana-mcp (v2.0.0+)
|
||||
|
||||
fullnameOverride: "akamai-observability-mcp"
|
||||
|
||||
replicas: 1
|
||||
|
||||
image:
|
||||
registry: asia-southeast1-docker.pkg.dev
|
||||
repository: meesho-devops-admin-0622/prd/devop/grafana-mcp
|
||||
tag: "v2026-03-10"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
labels:
|
||||
bu: central
|
||||
team: devops
|
||||
service: akamai-observability-mcp
|
||||
env: prd
|
||||
|
||||
# -- Grafana connection.
|
||||
# url: set this to the Akamai/observability Grafana endpoint reachable from
|
||||
# gke-central-prd-ase1a (in-cluster DNS preferred; otherwise the prd FQDN).
|
||||
# apiKeySecret: read GRAFANA_SERVICE_ACCOUNT_TOKEN from the K8s Secret produced
|
||||
# by the ExternalSecret below.
|
||||
grafana:
|
||||
url: "" # TODO: set the Grafana base URL (e.g. https://grafana-akamai.prd.meesho.int)
|
||||
apiKeySecret:
|
||||
name: "akamai-observability-mcp-vault"
|
||||
key: "GRAFANA_SERVICE_ACCOUNT_TOKEN"
|
||||
|
||||
# -- Vault-backed secret. Mint the Grafana service-account token in the Grafana
|
||||
# UI, store it at the path below under key GRAFANA_SERVICE_ACCOUNT_TOKEN, then
|
||||
# ESO syncs it into the K8s Secret referenced above.
|
||||
externalSecret:
|
||||
enabled: true
|
||||
secretName: "akamai-observability-mcp-vault"
|
||||
path: "prd/cntr/devop/akamai-observability-mcp" # TODO: confirm Vault path
|
||||
refreshInterval: "0"
|
||||
secretStoreRef: "vault-backend"
|
||||
|
||||
serviceAccount:
|
||||
create: true
|
||||
annotations: {}
|
||||
|
||||
# SSE transport is long-lived — keep Contour from cutting connections.
|
||||
contourResponseTimeout: "1h"
|
||||
|
||||
createContourGateway: true
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
ingressClassName: contour-internal-1
|
||||
servicePortNumber: 8000
|
||||
enableWebsocket: true
|
||||
hosts:
|
||||
- host: akamai-observability-mcp.prd.meesho.int
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
annotations: {}
|
||||
slowStart:
|
||||
enabled: false
|
||||
window: "120s"
|
||||
aggression: 1
|
||||
minPercent: 10
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 256Mi
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
|
||||
# Scheduling — dedicated MCP node pool on gke-central-prd-ase1a.
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: "devops-mcp"
|
||||
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "devops-mcp"
|
||||
effect: NoSchedule
|
||||
|
||||
securityContext:
|
||||
fsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
runAsGroup: 1000
|
||||
|
||||
containerSecurityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
readOnlyRootFilesystem: true
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
runAsGroup: 1000
|
||||
@@ -1,689 +0,0 @@
|
||||
## Aurva Data Plane
|
||||
## Ref: https://github.com/aurva-io/aurva-charts.git
|
||||
|
||||
postgresql:
|
||||
enabled: true
|
||||
fullnameOverride: "aurva-dataplane-database"
|
||||
volumePermissions:
|
||||
## @param volumePermissions.enabled Enable init container that changes the owner and group of the persistent volume
|
||||
##
|
||||
enabled: true
|
||||
global:
|
||||
storageClass: hyperdisk-balanced
|
||||
postgresql:
|
||||
auth:
|
||||
postgresPassword: "aurva"
|
||||
database: "controller"
|
||||
# Add toleration to make sure where this postgres db pod should reside (Applicable for production workloads): For more detail ref: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
|
||||
primary:
|
||||
extendedConfiguration: |
|
||||
max_connections = 300
|
||||
|
||||
#PLACEHOLDER##
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: central-devops
|
||||
|
||||
# -- Select nodes to deploy which matches the following labels
|
||||
nodeSelector: ##PLACEHOLDER##
|
||||
cloud.google.com/compute-class: central-devops
|
||||
|
||||
# -- Provide a name in place of `aurva`
|
||||
# namespaceOverride: aurva-dataplane
|
||||
|
||||
##########################################################
|
||||
# Global Configs
|
||||
##########################################################
|
||||
global:
|
||||
aurva_controller:
|
||||
enabled: true
|
||||
aurva_fastdet:
|
||||
enabled: false
|
||||
aurva_pii_analyzer:
|
||||
enabled: true
|
||||
aurva_ocr:
|
||||
enabled: true
|
||||
aurva_collector:
|
||||
enabled: true
|
||||
|
||||
deploymentAnnotations: {}
|
||||
|
||||
priorityClassName: ""
|
||||
|
||||
##########################################################
|
||||
# Aurva Controller
|
||||
##########################################################
|
||||
aurva_controller:
|
||||
|
||||
# -- Additional labels for aurva-controller
|
||||
additionalLabels:
|
||||
bu: "central"
|
||||
team: "central-devops"
|
||||
service: "aurva-central-a-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "aurva_controller"
|
||||
|
||||
# -- Annotations on aurva-controller
|
||||
annotations: {}
|
||||
# "key": "value"
|
||||
|
||||
revisionHistoryLimit: 3
|
||||
|
||||
# -- no of replicas for aurva controller
|
||||
replicas: 10
|
||||
|
||||
# -- Additional label added on pod which is used in Service's Label Selector
|
||||
podLabels: {}
|
||||
|
||||
# -- Additional Pod Annotations added on pod created by this Deployment
|
||||
additionalPodAnnotations: {}
|
||||
# "key": "value"
|
||||
|
||||
# -- Secrets used to pull image
|
||||
imagePullSecrets: ""
|
||||
image:
|
||||
# Image of the app container
|
||||
repository: asia-south1-docker.pkg.dev/aurva-gcp/aurva-controller/aurva-controller
|
||||
tag: "v3.20.3"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# Environment variables to be passed to the app container
|
||||
env: []
|
||||
|
||||
# -- If want to mount Envs from configmap or secret
|
||||
envFrom:
|
||||
- type: secret
|
||||
name: aurva-controller-secrets
|
||||
# - type: configmap
|
||||
# name: proxy-datasource-config
|
||||
|
||||
# -- Resources to be defined for pod
|
||||
resources:
|
||||
limits:
|
||||
memory: 2Gi
|
||||
cpu: 2
|
||||
requests:
|
||||
memory: 1Gi
|
||||
cpu: 1
|
||||
|
||||
aurvaFastdet:
|
||||
image:
|
||||
repository: asia-south1-docker.pkg.dev/aurva-gcp/aurva-fastdet/aurva-fastdet
|
||||
tag: "v2.30.13"
|
||||
pullPolicy: IfNotPresent
|
||||
envFrom: []
|
||||
env: []
|
||||
resources:
|
||||
limits:
|
||||
cpu: 0.5
|
||||
memory: 512Mi
|
||||
requests:
|
||||
cpu: 0.5
|
||||
memory: 512Mi
|
||||
|
||||
nodeSelector: ##PLACEHOLDER##
|
||||
cloud.google.com/compute-class: central-devops
|
||||
|
||||
# -- Taint tolerations for nodes
|
||||
##PLACEHOLDER##
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: central-devops
|
||||
|
||||
# -- Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods.
|
||||
affinity:
|
||||
# nodeAffinity:
|
||||
# requiredDuringSchedulingIgnoredDuringExecution:
|
||||
# nodeSelectorTerms:
|
||||
# - matchExpressions:
|
||||
# - key: disktype
|
||||
# operator: In
|
||||
# values:
|
||||
# - ssd
|
||||
|
||||
# -- [DNS configuration]
|
||||
dnsConfig: {}
|
||||
# -- Alternative DNS policy for application controller pods
|
||||
dnsPolicy: "ClusterFirst"
|
||||
|
||||
secret:
|
||||
name: "aurva-controller-secrets"
|
||||
# -- Additional Labels on secrets
|
||||
additionalLabels:
|
||||
# key: value
|
||||
# -- Annotations on secrets
|
||||
annotations:
|
||||
# key: value
|
||||
config:
|
||||
#variables
|
||||
COMPANY_ID: "65eeb832-67ba-40fb-b95a-30ca9eaa3409"
|
||||
COMMAND_URL: "command.aurva-prd.meeshogcp.in:80"
|
||||
DEPLOYMENT_TYPE: "kubernetes"
|
||||
PG_USERNAME: "postgres"
|
||||
PG_PASSWORD: "aurva"
|
||||
PG_DBNAME: "controller"
|
||||
FLUSHER_WORKER_POOL_SIZE: "1000"
|
||||
FLUSHER_BATCH_SIZE: "30000"
|
||||
UNIQUENESS_IDENTIFIER: "gke-central-prd-ase1a" #Recommendation: should be equal to cluster name
|
||||
PROVIDER_ACCOUNT_ID: "meesho-central-prd-0622" # GCP PROJECT ID (not Number)
|
||||
REGION: "asia-southeast1" #eg: asia-south1
|
||||
ENVIRONMENT: "prod"
|
||||
OCR_ENABLED: "true"
|
||||
MONITORING_ENABLED: "false"
|
||||
HYBRID_ONLY_MODE: "false"
|
||||
FORCE_TLS: "false"
|
||||
FASTDET_FLAG : "true"
|
||||
AADHAAR_ENHANCER: "0"
|
||||
WORKSPACE_EVENT_TRACKING_ENABLED: "false"
|
||||
ACCESS_IQ_ENABLED: "true"
|
||||
GRPC_ENFORCE_ALPN_ENABLED: "false"
|
||||
ENABLE_FASTDET: "true"
|
||||
FASTDET_MAX_BATCH_SIZE: "100"
|
||||
HEARTBEAT_INTERVAL: "5m"
|
||||
#pii data
|
||||
PII_BUCKET_NAME: "gcs-infra-devop-aurva-central-prd"
|
||||
PII_LOG_BUCKET_REGION: "asia-southeast1"
|
||||
PII_LOG_CRON: "*/5 * * * *"
|
||||
ENABLE_PII_LOG: "true"
|
||||
PII_EVIDENCE_UPLOAD_MAX_BLOCKING_TASKS: "50000"
|
||||
PII_EVIDENCE_UPLOAD_MAX_CONCURRENT_TASKS: "500"
|
||||
PII_EVIDENCE_MAX_CACHE_WEIGHT: "100"
|
||||
QUOTA_CLEANUP_CRON: "0 0 * * *"
|
||||
ENABLE_PII_QUOTA: "true"
|
||||
MAX_PII_EVIDENCES_PER_KEY_PER_WINDOW: "3"
|
||||
PII_QUOTA_SYNC_CRON: "*/2 * * * *"
|
||||
QUOTA_WINDOW_HOURS: "24"
|
||||
#constants
|
||||
SKIP_NAMESPACES: "contour-internal-1-central-prd,contour-internal-0-central-prd,contour-external-central-prd"
|
||||
CLOUD_PROVIDER: "gcp"
|
||||
LOG_ENV: "production"
|
||||
RDS_SCANNER_AVAILABILITY : "false"
|
||||
REDSHIFT_SCANNER_AVAILABILITY : "false"
|
||||
S3_SCANNER_AVAILABILITY : "false"
|
||||
DYNAMO_SCANNER_AVAILABILITY: "false"
|
||||
DOCDB_SCANNER_AVAILABILITY: "false"
|
||||
OPENSEARCH_SCANNER_AVAILABILITY: "false"
|
||||
CLOUDSQL_SCANNER_AVAILABILITY: "true"
|
||||
BIGQUERY_SCANNER_AVAILABILITY: "true"
|
||||
AWS_SNAPSHOT_SCANNER_AVAILABILITY: "false"
|
||||
CLOUDSTORAGE_SCANNER_AVAILABILITY: "true"
|
||||
KEYSPACES_SCANNER_AVAILABILITY: "false"
|
||||
ALLOYDB_SCANNER_AVAILABILITY: "true"
|
||||
BIGTABLE_SCANNER_AVAILABILITY: "true"
|
||||
GCP_BACKUP_AVAILABILITY: "true"
|
||||
EGRESS_MODE_ONLY: "false"
|
||||
SENTRY_DSN: "https://fd6738e1ee4a9a9c1f079d09953b43b1@sentry.aurva.io/4"
|
||||
SCAN_UUID_ENABLED: "true"
|
||||
|
||||
serviceAccount:
|
||||
# -- Create a service account for the aurva controller
|
||||
create: true
|
||||
# -- Service account name
|
||||
name: aurva-controller-sa
|
||||
# -- Annotations applied to created service account
|
||||
annotations:
|
||||
iam.gke.io/gcp-service-account: sa-central-prd-aurva-contr@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
# eks.amazonaws.com/role-arn: arn:aws:iam::<account-id>:role/<role-name>
|
||||
# -- Labels applied to created service account
|
||||
labels: {}
|
||||
autoscaling:
|
||||
enabled: true
|
||||
minReplicas: 10
|
||||
maxReplicas: 15
|
||||
metrics:
|
||||
- type: Resource
|
||||
resource:
|
||||
name: cpu
|
||||
target:
|
||||
type: Utilization
|
||||
averageUtilization: 70
|
||||
- type: Resource
|
||||
resource:
|
||||
name: memory
|
||||
target:
|
||||
type: Utilization
|
||||
averageUtilization: 70
|
||||
|
||||
|
||||
##########################################################
|
||||
# Aurva OCR
|
||||
##########################################################
|
||||
aurva_ocr:
|
||||
# -- Additional labels for aurva-controller
|
||||
additionalLabels:
|
||||
bu: "central"
|
||||
team: "central-devops"
|
||||
service: "aurva-central-a-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "aurva_ocr"
|
||||
|
||||
# -- Annotations on aurva-controller
|
||||
annotations: {}
|
||||
# "key": "value"
|
||||
|
||||
revisionHistoryLimit: 3
|
||||
|
||||
# -- no of replicas for aurva controller
|
||||
replicas: 1
|
||||
|
||||
# -- Additional label added on pod which is used in Service's Label Selector
|
||||
podLabels: {}
|
||||
|
||||
# -- Additional Pod Annotations added on pod created by this Deployment
|
||||
additionalPodAnnotations: {}
|
||||
# "key": "value"
|
||||
|
||||
# -- Secrets used to pull image
|
||||
imagePullSecrets: ""
|
||||
|
||||
# Image of the app container
|
||||
image:
|
||||
repository: asia-south1-docker.pkg.dev/aurva-gcp/aurva-ocr/aurva-ocr
|
||||
tag: "v3.20.3"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# Environment variables to be passed to the app container
|
||||
env: []
|
||||
|
||||
# -- If want to mount Envs from configmap or secret
|
||||
envFrom:
|
||||
aurva-ocr:
|
||||
type: secret
|
||||
name: aurva-ocr-secrets
|
||||
|
||||
# -- Resources to be defined for pod
|
||||
resources:
|
||||
limits:
|
||||
memory: 2Gi
|
||||
cpu: 1
|
||||
requests:
|
||||
memory: 2Gi
|
||||
cpu: 1
|
||||
|
||||
# -- Select nodes to deploy which matches the following labels
|
||||
|
||||
nodeSelector: ##PLACEHOLDER##
|
||||
cloud.google.com/compute-class: central-devops
|
||||
|
||||
##PLACEHOLDER##
|
||||
# -- Taint tolerations for nodes
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: central-devops
|
||||
|
||||
# -- Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods.
|
||||
affinity:
|
||||
# nodeAffinity:
|
||||
# requiredDuringSchedulingIgnoredDuringExecution:
|
||||
# nodeSelectorTerms:
|
||||
# - matchExpressions:
|
||||
# - key: disktype
|
||||
# operator: In
|
||||
# values:
|
||||
# - ssd
|
||||
|
||||
# -- [DNS configuration]
|
||||
dnsConfig: {}
|
||||
# -- Alternative DNS policy for application controller pods
|
||||
dnsPolicy: "ClusterFirst"
|
||||
|
||||
secret:
|
||||
name: "aurva-ocr-secrets"
|
||||
# -- Additional Labels on secrets
|
||||
additionalLabels:
|
||||
# key: value
|
||||
# -- Annotations on secrets
|
||||
annotations:
|
||||
# key: value
|
||||
|
||||
config:
|
||||
PG_USERNAME: "postgres"
|
||||
PG_PASSWORD: "aurva"
|
||||
PG_DBNAME: "controller"
|
||||
OCR_TIME_LIMIT: "1"
|
||||
COMPANY_ID: "65eeb832-67ba-40fb-b95a-30ca9eaa3409"
|
||||
UNIQUENESS_IDENTIFIER: "gke-central-prd-ase1a"
|
||||
DEPLOYMENT_TYPE: "kubernetes"
|
||||
|
||||
serviceAccount:
|
||||
# -- Create a service account for the aurva controller
|
||||
create: true
|
||||
# -- Service account name
|
||||
name: aurva-ocr-sa
|
||||
# -- Annotations applied to created service account
|
||||
annotations:
|
||||
# eks.amazonaws.com/role-arn: arn:aws:iam::<account-id>:role/<role-name>
|
||||
# iam.gke.io/gcp-service-account: service-account@gcp.iam.gserviceaccount.com
|
||||
# -- Labels applied to created service account
|
||||
labels: {}
|
||||
|
||||
##########################################################
|
||||
# Aurva Collector
|
||||
##########################################################
|
||||
aurva_collector:
|
||||
|
||||
# -- Additional labels for aurva-analyzer
|
||||
additionalLabels:
|
||||
bu: "central"
|
||||
team: "central-devops"
|
||||
service: "aurva-central-a-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "aurva_collector"
|
||||
|
||||
|
||||
# -- Annotations on aurva-analyzer
|
||||
annotations: {}
|
||||
# "key": "value"
|
||||
|
||||
# -- Additional label added on pod which is used in Service's Label Selector
|
||||
podLabels: {}
|
||||
|
||||
# -- Additional Pod Annotations added on pod created by this Deployment
|
||||
additionalPodAnnotations: {}
|
||||
# "key": "value"
|
||||
|
||||
# -- Secrets used to pull image
|
||||
imagePullSecrets: ""
|
||||
|
||||
# Image of the app container
|
||||
image:
|
||||
repository: asia-south1-docker.pkg.dev/aurva-gcp/aurva-collector/aurva-collector
|
||||
tag: "v3.20.3"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# Environment variables to be passed to the app container
|
||||
env: []
|
||||
|
||||
# -- If want to mount Envs from configmap or secret
|
||||
envFrom:
|
||||
aurva-controller:
|
||||
type: secret
|
||||
name: aurva-collector-secrets
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu: 800m
|
||||
memory: 800Mi
|
||||
requests:
|
||||
cpu: 200m
|
||||
memory: 512Mi
|
||||
|
||||
podSecurityContext: {}
|
||||
|
||||
securityContext:
|
||||
privileged: true
|
||||
capabilities:
|
||||
add:
|
||||
# For kernel v5.8 and above we don't need CAP_SYS_ADMIN or CAP_SYS_RESOURCE
|
||||
# we just need CAP_BPF and CAP_PERFMON. This has been tested on our EKS node
|
||||
# which is on kernel v5.10.x
|
||||
# When SSL Tracing is required we need CAP_SYS_ADMIN and CAP_SYS_PTRACE
|
||||
# on top of the previous capabilities
|
||||
# So finally these are the 4 possible combinations for capabilies
|
||||
# 1. Newer Kernels without SSL
|
||||
# - BPF
|
||||
# - PERFMON
|
||||
# 2. Newer Kernels with SSL
|
||||
- SYS_ADMIN
|
||||
- SYS_PTRACE
|
||||
# 3. Older Kernels without SSL
|
||||
# - SYS_ADMIN
|
||||
# - SYS_RESOURCE
|
||||
# 4. Older Kernels with SSL
|
||||
# - SYS_ADMIN
|
||||
# - SYS_RESOURCE
|
||||
# - SYS_PTRACE
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
|
||||
volumes:
|
||||
- name: debugfs
|
||||
mountPath: /sys/kernel/debug
|
||||
hostPath: /sys/kernel/debug
|
||||
- name: vmlinux
|
||||
mountPath: /sys/kernel/btf/vmlinux
|
||||
hostPath: /sys/kernel/btf/vmlinux
|
||||
- name: procfs
|
||||
mountPath: /host/proc
|
||||
hostPath: /proc
|
||||
- name: bpffs
|
||||
mountPath: /sys/fs/bpf
|
||||
hostPath: /sys/fs/bpf
|
||||
|
||||
# -- Taint tolerations for nodes
|
||||
tolerations:
|
||||
# - effect: NoSchedule
|
||||
# key: dedicated
|
||||
# operator: Equal
|
||||
# value: megatetra
|
||||
- operator: Exists
|
||||
|
||||
# -- Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods.
|
||||
affinity:
|
||||
nodeAffinity:
|
||||
requiredDuringSchedulingIgnoredDuringExecution:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: dedicated
|
||||
operator: NotIn
|
||||
values:
|
||||
- vmstorage-n4d
|
||||
- vmselect-mds
|
||||
- vmagent-mds
|
||||
- vminsert-mds
|
||||
- contour-internal-0
|
||||
- contour-internal-1
|
||||
- contour-external
|
||||
- contour-internal-intra-1
|
||||
- contour-internal-intra-0
|
||||
- contour-external-arm
|
||||
- contour-external-cc
|
||||
- contour-internal-0-arm
|
||||
- contour-internal-0-cc
|
||||
- contour-internal-1-arm
|
||||
- contour-internal-1-cc
|
||||
- contour-intra-0-arm
|
||||
- contour-intra-0-cc
|
||||
- contour-intra-1-arm
|
||||
- contour-intra-1-cc
|
||||
- contour-shared-arm
|
||||
- contour-shared-cc
|
||||
- alloy
|
||||
- preprod-spot-16
|
||||
dnsPolicy: "ClusterFirst"
|
||||
|
||||
secret:
|
||||
name: "aurva-collector-secrets"
|
||||
# -- Additional Labels on secrets
|
||||
additionalLabels:
|
||||
# key: value
|
||||
# -- Annotations on secrets
|
||||
annotations:
|
||||
# key: value
|
||||
|
||||
config:
|
||||
# variables
|
||||
COMPANY_ID: "65eeb832-67ba-40fb-b95a-30ca9eaa3409"
|
||||
UNIQUENESS_IDENTIFIER: "k8s-central-prd-ase1"
|
||||
DEPLOYMENT_TYPE: "kubernetes"
|
||||
TRACE_INTERNAL_SVC: "true"
|
||||
TRACE_INTERNAL_SVC_HTTP: "true"
|
||||
INTERNAL_SVC_SAMPLE_INTERVAL: "10m"
|
||||
LOGS_TTL: "1h"
|
||||
TRACE_HTTP2: "true"
|
||||
TRACE_SSL: "false"
|
||||
TRACE_PSQL: "false"
|
||||
TRACE_SQLSERVER: "false"
|
||||
TRACE_MYSQL: "false"
|
||||
TRACE_EGRESS: "true"
|
||||
TRACE_GO_TLS: "false"
|
||||
TRACE_ML_SERVICES: "false"
|
||||
# constants
|
||||
LOG_ENV: production
|
||||
SENTRY_DSN: "https://fd6738e1ee4a9a9c1f079d09953b43b1@sentry.aurva.io/4"
|
||||
MONITORING_ENABLED: "false"
|
||||
ENABLE_INGRESS_INFORMER: "false"
|
||||
ENABLE_SERVICE_INFORMER: "false"
|
||||
ENABLE_ISTIO_INFORMER: "false"
|
||||
EXCLUDED_PII_REGEX_TYPES: "ip_address,us_bank_number,us_driver_license,us_itin,us_passport,us_routing,us_mbi,ssn"
|
||||
AGGREGATOR_MAX_CONNECTIONS: "1000"
|
||||
|
||||
serviceAccount:
|
||||
# -- Create a service account for the aurva controller
|
||||
create: true
|
||||
# -- Service account name
|
||||
name: aurva-collector-sa
|
||||
# -- Annotations applied to created service account
|
||||
annotations:
|
||||
# eks.amazonaws.com/role-arn: arn:aws:iam::<account-id>:role/<role-name>
|
||||
# -- Labels applied to created service account
|
||||
labels: {}
|
||||
|
||||
##########################################################
|
||||
# Aurva PII Analyzer
|
||||
##########################################################
|
||||
aurva_pii_analyzer:
|
||||
|
||||
# -- Additional labels for aurva-controller
|
||||
additionalLabels:
|
||||
bu: "central"
|
||||
team: "central-devops"
|
||||
service: "aurva-central-a-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "aurva_pii_analyzer"
|
||||
|
||||
# -- Annotations on aurva-controller
|
||||
annotations: {}
|
||||
# "key": "value"
|
||||
|
||||
revisionHistoryLimit: 3
|
||||
|
||||
# -- no of replicas for aurva controller
|
||||
replicas: 3
|
||||
|
||||
# -- Additional label added on pod which is used in Service's Label Selector
|
||||
podLabels: {}
|
||||
|
||||
# -- Additional Pod Annotations added on pod created by this Deployment
|
||||
additionalPodAnnotations: {}
|
||||
# "key": "value"
|
||||
|
||||
# -- Secrets used to pull image
|
||||
imagePullSecrets: ""
|
||||
|
||||
##PLACEHOLDER##
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
|
||||
# Image of the app container
|
||||
image:
|
||||
repository: asia-south1-docker.pkg.dev/aurva-gcp/aurva-piianalyzer/aurva-piianalyzer
|
||||
tag: "v3.20.3"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# Environment variables to be passed to the app container
|
||||
env: []
|
||||
|
||||
# -- If want to mount Envs from configmap or secret
|
||||
envFrom:
|
||||
aurva-pii-analyzer:
|
||||
type: secret
|
||||
name: aurva-pii-analyzer-secrets
|
||||
|
||||
# -- Resources to be defined for pod
|
||||
resources:
|
||||
limits:
|
||||
memory: 4Gi
|
||||
cpu: 4
|
||||
requests:
|
||||
memory: 2Gi
|
||||
cpu: 2
|
||||
|
||||
nodeSelector: ##PLACEHOLDER##
|
||||
cloud.google.com/compute-class: central-devops
|
||||
|
||||
##PLACEHOLDER##
|
||||
# -- Taint tolerations for nodes
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: central-devops
|
||||
|
||||
# -- Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods.
|
||||
affinity:
|
||||
# nodeAffinity:
|
||||
# requiredDuringSchedulingIgnoredDuringExecution:
|
||||
# nodeSelectorTerms:
|
||||
# - matchExpressions:
|
||||
# - key: disktype
|
||||
# operator: In
|
||||
# values:
|
||||
# - ssd
|
||||
|
||||
# -- [DNS configuration]
|
||||
dnsConfig: {}
|
||||
# -- Alternative DNS policy for application controller pods
|
||||
dnsPolicy: "ClusterFirst"
|
||||
|
||||
secret:
|
||||
name: "aurva-pii-analyzer-secrets"
|
||||
# -- Additional Labels on secrets
|
||||
additionalLabels:
|
||||
# key: value
|
||||
# -- Annotations on secrets
|
||||
annotations:
|
||||
# key: value
|
||||
|
||||
config:
|
||||
PG_USERNAME: "postgres"
|
||||
PG_PASSWORD: "aurva"
|
||||
PG_DBNAME: "controller"
|
||||
SCHEDULER_TIME: "1"
|
||||
SUPPORTED_REGION: "US"
|
||||
COMPANY_ID: "65eeb832-67ba-40fb-b95a-30ca9eaa3409"
|
||||
UNIQUENESS_IDENTIFIER: "gke-central-prd-ase1a"
|
||||
DEPLOYMENT_TYPE: "kubernetes"
|
||||
|
||||
serviceAccount:
|
||||
# -- Create a service account for the aurva controller
|
||||
create: true
|
||||
# -- Service account name
|
||||
name: aurva-pii-analyzer-sa
|
||||
# -- Annotations applied to created service account
|
||||
annotations:
|
||||
# eks.amazonaws.com/role-arn: arn:aws:iam::<account-id>:role/<role-name>
|
||||
# -- Labels applied to created service account
|
||||
labels: {}
|
||||
|
||||
autoscaling:
|
||||
enabled: true
|
||||
minReplicas: 2
|
||||
maxReplicas: 3
|
||||
metrics:
|
||||
- type: Resource
|
||||
resource:
|
||||
name: cpu
|
||||
target:
|
||||
type: Utilization
|
||||
averageUtilization: 70
|
||||
- type: Resource
|
||||
resource:
|
||||
name: memory
|
||||
target:
|
||||
type: Utilization
|
||||
averageUtilization: 70
|
||||
@@ -1,129 +0,0 @@
|
||||
global:
|
||||
logLevel: 2
|
||||
rbac:
|
||||
create: true
|
||||
priorityClassName: "high-priority"
|
||||
installCRDs: false
|
||||
|
||||
crds:
|
||||
enabled: true
|
||||
keep: true
|
||||
|
||||
# Cert-manager Controller
|
||||
replicaCount: 1
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/devops/cert-manager/cert-manager-controller
|
||||
tag: v1.20.1
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "central-devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 128Mi
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
|
||||
# Webhook Configuration
|
||||
webhook:
|
||||
replicaCount: 1
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/devops/cert-manager/cert-manager-webhook
|
||||
tag: v1.20.1
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "central-devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 64Mi
|
||||
limits:
|
||||
cpu: 250m
|
||||
memory: 256Mi
|
||||
|
||||
# CA Injector Configuration
|
||||
cainjector:
|
||||
enabled: true
|
||||
replicaCount: 1
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/devops/cert-manager/cert-manager-cainjector
|
||||
tag: v1.20.1
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "central-devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 64Mi
|
||||
limits:
|
||||
cpu: 250m
|
||||
memory: 256Mi
|
||||
|
||||
# ACME Solver Configuration
|
||||
acmesolver:
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/devops/cert-manager/cert-manager-acmesolver
|
||||
tag: v1.20.1
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# Startup API Check
|
||||
startupapicheck:
|
||||
enabled: true
|
||||
timeout: 1m
|
||||
backoffLimit: 4
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/devops/cert-manager/cert-manager-startupapicheck
|
||||
tag: v1.20.1
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "central-devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 32Mi
|
||||
limits:
|
||||
cpu: 50m
|
||||
memory: 64Mi
|
||||
|
||||
# Prometheus Monitoring
|
||||
prometheus:
|
||||
enabled: true
|
||||
servicemonitor:
|
||||
enabled: false
|
||||
interval: 60s
|
||||
scrapeTimeout: 30s
|
||||
labels:
|
||||
prometheus: cert-manager
|
||||
@@ -1,251 +0,0 @@
|
||||
# logHouse (central-prd) - overrides only.
|
||||
# Google SSO via oauth2-proxy; ClickHouse ingress disabled.
|
||||
oauth2Proxy:
|
||||
enabled: true
|
||||
|
||||
# nginx audit proxy maps X-Forwarded-Email → X-ClickHouse-Setting-log_comment
|
||||
# so system.query_log.log_comment shows the SSO email of who ran each query.
|
||||
auditProxy:
|
||||
enabled: true
|
||||
replicas: 2
|
||||
image: "nginx:1.27-alpine"
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "loghouse"
|
||||
effect: "NoSchedule"
|
||||
|
||||
externalSecret:
|
||||
enabled: true
|
||||
path: meesho/prd/cntr/devop/loghouse
|
||||
secretName: loghouse-oauth2-secret
|
||||
annotations: {}
|
||||
|
||||
# --- Bitnami ClickHouse subchart ---
|
||||
clickhouse:
|
||||
replicaCount: 3
|
||||
global:
|
||||
security:
|
||||
allowInsecureImages: true
|
||||
|
||||
image:
|
||||
registry: asia-southeast1-docker.pkg.dev
|
||||
repository: meesho-devops-admin-0622/prd/sis/clickhouse
|
||||
tag: 25.6.2-debian-12-r0
|
||||
|
||||
auth:
|
||||
username: default
|
||||
password: ""
|
||||
existingSecret: "loghouse-oauth2-secret"
|
||||
existingSecretKey: "clickhouse-password"
|
||||
|
||||
|
||||
# Enable sampling so Bitnami's 08-sampling.xml preserves query_log,
|
||||
# text_log, metric_log etc. All queries are recorded in system.query_log.
|
||||
sampling:
|
||||
enabled: true
|
||||
|
||||
usersdFiles:
|
||||
grant_all.xml: |
|
||||
<yandex>
|
||||
<users>
|
||||
<default>
|
||||
<access_management>1</access_management>
|
||||
<named_collection_control>1</named_collection_control>
|
||||
</default>
|
||||
</users>
|
||||
</yandex>
|
||||
log_queries.xml: |
|
||||
<clickhouse>
|
||||
<profiles>
|
||||
<default>
|
||||
<log_queries>1</log_queries>
|
||||
<log_query_threads>0</log_query_threads>
|
||||
</default>
|
||||
</profiles>
|
||||
</clickhouse>
|
||||
|
||||
initContainers:
|
||||
- name: copy-usersd-config
|
||||
image: busybox:1.36
|
||||
command:
|
||||
- /bin/sh
|
||||
- -ec
|
||||
- cp -R /src/. /dst/
|
||||
volumeMounts:
|
||||
- name: usersd-configuration-configuration
|
||||
mountPath: /src
|
||||
readOnly: true
|
||||
- name: clickhouse-users-d
|
||||
mountPath: /dst
|
||||
|
||||
persistence:
|
||||
storageClass: "hyperdisk-balanced"
|
||||
size: 100Gi
|
||||
mountPath: /var/lib/clickhouse
|
||||
|
||||
|
||||
extraEnvVars:
|
||||
- name: CLICKHOUSE_USER
|
||||
value: "default"
|
||||
- name: CLICKHOUSE_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: loghouse-oauth2-secret
|
||||
key: clickhouse-password
|
||||
extraVolumes:
|
||||
- name: clickhouse-users-d
|
||||
emptyDir:
|
||||
sizeLimit: 100Mi
|
||||
- name: clickhouse-logs
|
||||
emptyDir:
|
||||
sizeLimit: 500Mi
|
||||
- name: fluentbit-config
|
||||
configMap:
|
||||
name: loghouse-fluentbit-config
|
||||
extraVolumeMounts:
|
||||
- name: clickhouse-users-d
|
||||
mountPath: /etc/clickhouse-server/users.d
|
||||
- name: clickhouse-logs
|
||||
mountPath: /var/log/clickhouse-server
|
||||
|
||||
sidecars:
|
||||
- name: query-log-tailer
|
||||
image: "asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/prd/sis/clickhouse:25.6.2-debian-12-r0"
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- |
|
||||
while true; do
|
||||
clickhouse-client --host 127.0.0.1 --port 9000 --user default --password "$CLICKHOUSE_PASSWORD" --query="SELECT event_time, user, query_id, query, client_hostname FROM system.query_log WHERE type = 'QueryFinish' AND event_time > now() - INTERVAL 10 SECOND FORMAT JSONEachRow" 2>/dev/null;
|
||||
sleep 10;
|
||||
done
|
||||
env:
|
||||
- name: CLICKHOUSE_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: loghouse-oauth2-secret
|
||||
key: clickhouse-password
|
||||
volumeMounts:
|
||||
- name: clickhouse-logs
|
||||
mountPath: /var/log/clickhouse-server
|
||||
readOnly: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 32Mi
|
||||
limits:
|
||||
cpu: 50m
|
||||
memory: 64Mi
|
||||
- name: fluentbit
|
||||
image: fluent/fluent-bit:3.1
|
||||
resources:
|
||||
requests:
|
||||
cpu: 25m
|
||||
memory: 50Mi
|
||||
limits:
|
||||
cpu: 100m
|
||||
memory: 100Mi
|
||||
volumeMounts:
|
||||
- name: clickhouse-logs
|
||||
mountPath: /var/log/clickhouse-server
|
||||
readOnly: true
|
||||
- name: fluentbit-config
|
||||
mountPath: /fluent-bit/etc
|
||||
readOnly: true
|
||||
|
||||
defaultInitContainers:
|
||||
volumePermissions:
|
||||
enabled: false
|
||||
image:
|
||||
registry: asia-southeast1-docker.pkg.dev
|
||||
repository: meesho-devops-admin-0622/prd/sis/os-shell
|
||||
tag: 12-debian-12-r47
|
||||
|
||||
resourcesPreset: "none"
|
||||
# Chart maps these inversely: values.requests -> pod limits, values.limits -> pod requests
|
||||
resources:
|
||||
requests:
|
||||
cpu: "6"
|
||||
memory: 40Gi
|
||||
limits:
|
||||
cpu: "6"
|
||||
memory: 40Gi
|
||||
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "loghouse"
|
||||
effect: "NoSchedule"
|
||||
|
||||
# Disabled when oauth2Proxy.enabled is true (oauth2-proxy handles ingress)
|
||||
ingress:
|
||||
enabled: false
|
||||
|
||||
networkPolicy:
|
||||
enabled: true
|
||||
allowExternal: true
|
||||
allowExternalEgress: true
|
||||
|
||||
keeper:
|
||||
enabled: false
|
||||
|
||||
|
||||
oauth2-proxy:
|
||||
replicaCount: 3
|
||||
config:
|
||||
existingSecret: loghouse-oauth2-secret
|
||||
requiredSecretKeys:
|
||||
- client-id
|
||||
- client-secret
|
||||
- cookie-secret
|
||||
extraArgs:
|
||||
provider: google
|
||||
redirect-url: "http://loghouse-central.prd.meesho.int/oauth2/callback"
|
||||
upstream: "http://loghouse-central-a-prd-audit-proxy:8123"
|
||||
email-domain: "meesho.com"
|
||||
proxy-prefix: "/oauth2"
|
||||
pass-host-header: "true"
|
||||
proxy-websockets: "true"
|
||||
real-client-ip-header: "X-Forwarded-For"
|
||||
cookie-secure: "false"
|
||||
cookie-expire: "0s"
|
||||
custom-templates-dir: "/templates"
|
||||
skip-jwt-bearer-tokens: "true"
|
||||
oidc-issuer-url: "https://accounts.google.com"
|
||||
extra-jwt-issuers: "https://accounts.google.com=32555940559.apps.googleusercontent.com"
|
||||
pass-user-headers: "true"
|
||||
set-xauthrequest: "true"
|
||||
request-logging: "true"
|
||||
auth-logging: "true"
|
||||
standard-logging: "true"
|
||||
extraVolumes:
|
||||
- name: custom-templates
|
||||
configMap:
|
||||
name: '{{ .Release.Name }}-oauth2-proxy-templates'
|
||||
extraVolumeMounts:
|
||||
- name: custom-templates
|
||||
mountPath: /templates
|
||||
readOnly: true
|
||||
service:
|
||||
portNumber: 80
|
||||
ingress:
|
||||
enabled: true
|
||||
className: contour-internal-1
|
||||
path: /
|
||||
pathType: Prefix
|
||||
hosts:
|
||||
- loghouse-central.prd.meesho.int
|
||||
annotations: {}
|
||||
tls: []
|
||||
sessionStorage:
|
||||
type: cookie
|
||||
redis-ha:
|
||||
enabled: false
|
||||
resources:
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 64Mi
|
||||
limits:
|
||||
cpu: 200m
|
||||
memory: 128Mi
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: azul
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: azul
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c2-standard-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c2-standard-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c2-standard-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: central-devops
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: central-devops
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: e2-standard-4
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: e2-standard-4
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: e2-standard-4
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: central-kyverno
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: central-kyverno
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-standard-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-standard-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-standard-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: compactduo
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: compactduo
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c3-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c3-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c4-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c3-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: compacttetra
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: compacttetra
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c3-standard-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c3-standard-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c3-standard-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: contour-external-arm
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: contour-external-arm
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: contour-external-cc
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: contour-external-cc
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4d-highcpu-8
|
||||
spot: false
|
||||
maxPodsPerNode: 16
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2d-highcpu-8
|
||||
spot: false
|
||||
maxPodsPerNode: 16
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4d-highcpu-8
|
||||
spot: false
|
||||
maxPodsPerNode: 16
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: contour-internal-0-arm
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: contour-internal-0-arm
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: contour-internal-0-cc
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: contour-internal-0-cc
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: contour-internal-1-arm
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: contour-internal-1-arm
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: contour-internal-1-cc
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: contour-internal-1-cc
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4d-highcpu-8
|
||||
spot: false
|
||||
maxPodsPerNode: 16
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2d-highcpu-8
|
||||
spot: false
|
||||
maxPodsPerNode: 16
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4d-highcpu-8
|
||||
spot: false
|
||||
maxPodsPerNode: 16
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: contour-intra-0-arm
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: contour-intra-0-arm
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: contour-intra-0-cc
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: contour-intra-0-cc
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: contour-intra-1-arm
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: contour-intra-1-arm
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: contour-intra-1-cc
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: contour-intra-1-cc
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: contour-shared-arm
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: contour-shared-arm
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: contour-shared-cc
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: contour-shared-cc
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2d-highcpu-8
|
||||
maxPodsPerNode: 16
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 30
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: devops-mcp
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: devops-mcp
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2d-highcpu-4
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2d-highcpu-4
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2d-highcpu-4
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: gatekeeper
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: gatekeeper
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c3-highcpu-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c3-highcpu-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c3-highcpu-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: loghouse
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: loghouse
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c3d-highmem-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c3d-highmem-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c3d-highmem-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: megaduo
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: megaduo
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c3-highcpu-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4-highcpu-24
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c3-highcpu-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4-highcpu-24
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c3-highcpu-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c4-highcpu-24
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: megaduolite
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: megaduolite
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: megaoctalite
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: megaoctalite
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highmem-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highmem-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highmem-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: megatetra
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: megatetra
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c3-standard-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c3-standard-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c3-standard-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: megatetralite
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: megatetralite
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-standard-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: megauno
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: megauno
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highcpu-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highcpu-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highcpu-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: megaunolite
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: megaunolite
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highcpu-48
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highcpu-48
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highcpu-48
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: mlp-g2-standard-8
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: mlp-g2-standard-8
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: g2-standard-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: g2-standard-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: g2-standard-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: sale-rescue
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: sale-rescue
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c3-standard-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c3-standard-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c3-standard-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: session-mgr
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: session-mgr
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c3d-highcpu-60
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c3d-standard-60
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c3d-highcpu-60
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c3d-standard-60
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c3d-highcpu-60
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c3d-standard-60
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: sumoduo-c4d
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: sumoduo-c4d
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c4d-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: sumoduo
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: sumoduo
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2d-highcpu-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2d-standard-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highcpu-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2d-highcpu-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2d-standard-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2d-highcpu-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: sumoduolite
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: sumoduolite
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-custom-32-65536
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-custom-32-65536
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-custom-32-65536
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: sumotetra
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: sumotetra
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-standard-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-standard-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-standard-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: sumouno
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: sumouno
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highcpu-48
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highcpu-48
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highcpu-48
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: sumounolite
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: sumounolite
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highcpu-48
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highcpu-48
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highcpu-48
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: vmagent
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: vmagent
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: vmagent-dr
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: vmagent-dr
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: vmagent-mds
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: vmagent-mds
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4-highcpu-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4-highcpu-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4-highcpu-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: vminsert
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: vminsert
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: vminsert-mds
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: vminsert-mds
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4-highcpu-8
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: vmselect
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: vmselect
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,72 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: vmselect-mds
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: vmselect-mds
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c3-highcpu-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: c4-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c3-highcpu-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: c4-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c3-highcpu-22
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: c4-highcpu-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: vmstorage
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: vmstorage
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highmem-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highmem-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highmem-16
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: vmstorage-mds
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: vmstorage-mds
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highmem-48
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highmem-48
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highmem-48
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: vmstorage-n4d
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: vmstorage-n4d
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n4d-highmem-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n4d-highmem-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n4d-highmem-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: hyperdisk-balanced
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: vmstorage-sale-24aug
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: vmstorage-sale-24aug
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highmem-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highmem-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highmem-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,45 +0,0 @@
|
||||
apiVersion: cloud.google.com/v1
|
||||
kind: ComputeClass
|
||||
metadata:
|
||||
name: vmstorage-sale
|
||||
spec:
|
||||
nodePoolConfig:
|
||||
serviceAccount: sa-common-np-cntr-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
nodeLabels:
|
||||
dedicated: vmstorage-sale
|
||||
priorityDefaults:
|
||||
location:
|
||||
zones: ['asia-southeast1-a']
|
||||
activeMigration:
|
||||
optimizeRulePriority: true
|
||||
nodePoolAutoCreation:
|
||||
enabled: true
|
||||
priorities:
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-a
|
||||
machineType: n2-highmem-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-c
|
||||
machineType: n2-highmem-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
- location:
|
||||
zones:
|
||||
- asia-southeast1-b
|
||||
machineType: n2-highmem-32
|
||||
maxPodsPerNode: 32
|
||||
spot: false
|
||||
storage:
|
||||
bootDiskSize: 100
|
||||
bootDiskType: pd-ssd
|
||||
whenUnsatisfiable: DoNotScaleUp
|
||||
@@ -1,25 +0,0 @@
|
||||
daemonSet:
|
||||
namespace: prd-conntrack-adjuster
|
||||
|
||||
conntrack:
|
||||
max: 2097152
|
||||
hashsize: 524288
|
||||
sleepInterval: 30
|
||||
|
||||
nodeAffinity:
|
||||
enabled: true
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: cloud.google.com/compute-class
|
||||
operator: In
|
||||
values:
|
||||
- "contour-external-cc"
|
||||
- "contour-internal-0-cc"
|
||||
- "contour-internal-1-cc"
|
||||
- "contour-intra-0-cc"
|
||||
- "contour-intra-1-cc"
|
||||
- matchExpressions:
|
||||
- key: dedicated
|
||||
operator: In
|
||||
values:
|
||||
- "contour-external-1"
|
||||
@@ -1,17 +0,0 @@
|
||||
# ClusterIssuer override for k8s-demand-prd-ase1 (prd demand cluster, ase1a zone).
|
||||
# ClusterIssuer is a cluster-scoped resource — this file pins the issuer
|
||||
# identity for this cluster so the name is auditable per-cluster.
|
||||
#
|
||||
# Must match the `issuerRef.name` in consuming Certificate CRs (see
|
||||
# devops-helm-charts/2.0.0/templates/proxyless-grpc-cert.yaml).
|
||||
|
||||
issuerName: contour-central-prd-ca-issuer
|
||||
rootCASecretName: contour-central-ca
|
||||
|
||||
externalSecret:
|
||||
enabled: true
|
||||
vaultPath: meesho/devops/contour/root-ca
|
||||
refreshInterval: "0"
|
||||
secretStoreRef:
|
||||
name: vault-backend
|
||||
namespace: cert-manager-central-prd
|
||||
@@ -1,28 +0,0 @@
|
||||
cronJob:
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/contour-cert-checker
|
||||
tag: v1.1
|
||||
schedule: "0 12 * * *"
|
||||
args: ["--cluster=gke-central-prd-ase1a"]
|
||||
resources:
|
||||
requests:
|
||||
memory: "50Mi"
|
||||
cpu: "50m"
|
||||
limits:
|
||||
memory: "100Mi"
|
||||
cpu: "100m"
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: central-devops
|
||||
backoffLimit: 3
|
||||
historyLimit:
|
||||
successfulJobs: 7
|
||||
failedJobs: 7
|
||||
|
||||
rbac:
|
||||
namespace: contour-cert-checker-ns
|
||||
serviceAccountName: contour-cert-checker-sa
|
||||
@@ -1,101 +0,0 @@
|
||||
configInline:
|
||||
enableExternalNameService: true
|
||||
timeouts:
|
||||
connection-idle-timeout: 305s
|
||||
disablePermitInsecure: false
|
||||
tls:
|
||||
fallback-certificate: {}
|
||||
accesslog-format: envoy
|
||||
accesslog-level: disabled
|
||||
contour:
|
||||
enabled: true
|
||||
replicaCount: 3
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
manageCRDs: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 1024Mi
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: dedicated
|
||||
operator: Equal
|
||||
value: contour-external-1
|
||||
nodeSelector:
|
||||
dedicated: contour-external-1
|
||||
service:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
xds: 8001
|
||||
metrics: 8000
|
||||
ingressClass:
|
||||
name: "contour-external-1"
|
||||
create: true
|
||||
debug: false
|
||||
podAnnotations:
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: '8000'
|
||||
prometheus.io/scrape: 'true'
|
||||
envoy:
|
||||
enabled: true
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
kind: deployment
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: dedicated
|
||||
operator: Equal
|
||||
value: contour-external-1
|
||||
nodeSelector:
|
||||
dedicated: contour-external-1
|
||||
logLevel: error
|
||||
autoscaling:
|
||||
behavior:
|
||||
scaleDown:
|
||||
policies:
|
||||
- periodSeconds: 60
|
||||
type: Pods
|
||||
value: 2
|
||||
selectPolicy: Min
|
||||
stabilizationWindowSeconds: 300
|
||||
scaleUp:
|
||||
policies:
|
||||
- periodSeconds: 15
|
||||
type: Percent
|
||||
value: 100
|
||||
selectPolicy: Max
|
||||
stabilizationWindowSeconds: 60
|
||||
enabled: true
|
||||
minReplicas: 3
|
||||
maxReplicas: 250
|
||||
targetCPU: "60"
|
||||
targetMemory: "60"
|
||||
podAnnotations:
|
||||
prometheus.io/path: /stats/prometheus
|
||||
prometheus.io/port: '8002'
|
||||
prometheus.io/scrape: 'true'
|
||||
resources:
|
||||
requests:
|
||||
cpu: 6
|
||||
memory: 3Gi
|
||||
service:
|
||||
export:
|
||||
enabled: false
|
||||
targetPorts:
|
||||
http: http
|
||||
https: https
|
||||
type: ClusterIP
|
||||
annotations:
|
||||
cloud.google.com/neg: '{"exposed_ports": {"80":{"name": "envoy-ext-1-central-ase1a-prd"}}}'
|
||||
ports:
|
||||
http: 80
|
||||
https: 443
|
||||
grpc: 8080 ## only when tcpLB is true it will be used
|
||||
useHostPort: false
|
||||
defaultBackend:
|
||||
enabled: false
|
||||
@@ -1,106 +0,0 @@
|
||||
configInline:
|
||||
enableExternalNameService: true
|
||||
timeouts:
|
||||
connection-idle-timeout: 305s
|
||||
disablePermitInsecure: false
|
||||
tls:
|
||||
fallback-certificate: {}
|
||||
accesslog-format: envoy
|
||||
accesslog-level: disabled
|
||||
contour:
|
||||
enabled: true
|
||||
replicaCount: 3
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
manageCRDs: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 1024Mi
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: contour-shared-arm
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: contour-shared-arm
|
||||
service:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
xds: 8001
|
||||
metrics: 8000
|
||||
ingressClass:
|
||||
name: "contour-external"
|
||||
create: true
|
||||
debug: false
|
||||
podAnnotations:
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: '8000'
|
||||
prometheus.io/scrape: 'true'
|
||||
envoy:
|
||||
enabled: true
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
kind: deployment
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: contour-external-arm
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: contour-external-arm
|
||||
logLevel: error
|
||||
autoscaling:
|
||||
behavior:
|
||||
scaleDown:
|
||||
policies:
|
||||
- periodSeconds: 60
|
||||
type: Pods
|
||||
value: 2
|
||||
selectPolicy: Min
|
||||
stabilizationWindowSeconds: 300
|
||||
scaleUp:
|
||||
policies:
|
||||
- periodSeconds: 15
|
||||
type: Percent
|
||||
value: 100
|
||||
selectPolicy: Max
|
||||
stabilizationWindowSeconds: 60
|
||||
enabled: true
|
||||
minReplicas: 3
|
||||
maxReplicas: 250
|
||||
targetCPU: "60"
|
||||
targetMemory: "60"
|
||||
podAnnotations:
|
||||
prometheus.io/path: /stats/prometheus
|
||||
prometheus.io/port: '8002'
|
||||
prometheus.io/scrape: 'true'
|
||||
extraArgs:
|
||||
- '--concurrency 6'
|
||||
resources:
|
||||
requests:
|
||||
cpu: 6
|
||||
memory: 3Gi
|
||||
limits:
|
||||
cpu: 6
|
||||
memory: 12Gi
|
||||
service:
|
||||
export:
|
||||
enabled: false # disabled for gke-central-prd-ase1a onboarding — re-enable before traffic shift
|
||||
targetPorts:
|
||||
http: http
|
||||
https: https
|
||||
type: ClusterIP
|
||||
annotations:
|
||||
cloud.google.com/neg: '{"exposed_ports": {"80":{"name": "envoy-ext-central-ase1a-prd"}}}'
|
||||
ports:
|
||||
http: 80
|
||||
https: 443
|
||||
grpc: 8080 ## only when tcpLB is true it will be used
|
||||
useHostPort: false
|
||||
defaultBackend:
|
||||
enabled: false
|
||||
@@ -1,109 +0,0 @@
|
||||
configInline:
|
||||
enableExternalNameService: true
|
||||
timeouts:
|
||||
connection-idle-timeout: 305s
|
||||
connection-shutdown-grace-period: 300s
|
||||
max-connection-duration: 1200s
|
||||
disablePermitInsecure: false
|
||||
tls:
|
||||
fallback-certificate: {}
|
||||
accesslog-format: envoy
|
||||
accesslog-level: disabled
|
||||
contour:
|
||||
enabled: true
|
||||
replicaCount: 3
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
manageCRDs: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 1024Mi
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: contour-shared-arm
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: contour-shared-arm
|
||||
service:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
xds: 8001
|
||||
metrics: 8000
|
||||
ingressClass:
|
||||
name: "contour-internal-0"
|
||||
create: true
|
||||
debug: false
|
||||
podAnnotations:
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: '8000'
|
||||
prometheus.io/scrape: 'true'
|
||||
envoy:
|
||||
enabled: true
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
kind: deployment
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: contour-internal-0-arm
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: contour-internal-0-arm
|
||||
logLevel: error
|
||||
autoscaling:
|
||||
behavior:
|
||||
scaleDown:
|
||||
policies:
|
||||
- periodSeconds: 60
|
||||
type: Pods
|
||||
value: 2
|
||||
selectPolicy: Min
|
||||
stabilizationWindowSeconds: 300
|
||||
scaleUp:
|
||||
policies:
|
||||
- periodSeconds: 15
|
||||
type: Percent
|
||||
value: 100
|
||||
selectPolicy: Max
|
||||
stabilizationWindowSeconds: 60
|
||||
enabled: true
|
||||
minReplicas: 3
|
||||
maxReplicas: 250
|
||||
targetCPU: "60"
|
||||
targetMemory: "60"
|
||||
podAnnotations:
|
||||
prometheus.io/path: /stats/prometheus
|
||||
prometheus.io/port: '8002'
|
||||
prometheus.io/scrape: 'true'
|
||||
extraArgs:
|
||||
- '--concurrency 6'
|
||||
resources:
|
||||
requests:
|
||||
cpu: 6
|
||||
memory: 3Gi
|
||||
limits:
|
||||
cpu: 6
|
||||
memory: 12Gi
|
||||
service:
|
||||
tcpLB: true # disabled for gke-central-prd-ase1a onboarding — re-enable before traffic shift
|
||||
export:
|
||||
enabled: true # disabled for gke-central-prd-ase1a onboarding — re-enable before traffic shift
|
||||
targetPorts:
|
||||
http: http
|
||||
https: https
|
||||
type: ClusterIP
|
||||
annotations:
|
||||
cloud.google.com/neg: '{"exposed_ports": {"80":{"name": "envoy-int0-central-ase1a-prd"}}}'
|
||||
ports:
|
||||
http: 80
|
||||
https: 443
|
||||
grpc: 8080 ## only when tcpLB is true it will be used
|
||||
useHostPort: false
|
||||
defaultBackend:
|
||||
enabled: false
|
||||
@@ -1,113 +0,0 @@
|
||||
configInline:
|
||||
enableExternalNameService: true
|
||||
timeouts:
|
||||
connection-idle-timeout: 305s
|
||||
connection-shutdown-grace-period: 300s
|
||||
max-connection-duration: 360s
|
||||
disablePermitInsecure: false
|
||||
tls:
|
||||
fallback-certificate: {}
|
||||
accesslog-format: envoy
|
||||
accesslog-level: disabled
|
||||
contour:
|
||||
enabled: true
|
||||
replicaCount: 3
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
manageCRDs: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 1024Mi
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: contour-shared-arm
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: contour-shared-arm
|
||||
service:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
xds: 8001
|
||||
metrics: 8000
|
||||
ingressClass:
|
||||
name: "contour-internal-1"
|
||||
create: true
|
||||
debug: false
|
||||
podAnnotations:
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: '8000'
|
||||
prometheus.io/scrape: 'true'
|
||||
envoy:
|
||||
enabled: true
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
kind: deployment
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: contour-internal-1-arm
|
||||
- effect: NoSchedule
|
||||
key: kubernetes.io/arch
|
||||
operator: Equal
|
||||
value: arm64
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: contour-internal-1-arm
|
||||
logLevel: error
|
||||
autoscaling:
|
||||
behavior:
|
||||
scaleDown:
|
||||
policies:
|
||||
- periodSeconds: 60
|
||||
type: Pods
|
||||
value: 2
|
||||
selectPolicy: Min
|
||||
stabilizationWindowSeconds: 300
|
||||
scaleUp:
|
||||
policies:
|
||||
- periodSeconds: 15
|
||||
type: Percent
|
||||
value: 100
|
||||
selectPolicy: Max
|
||||
stabilizationWindowSeconds: 60
|
||||
enabled: true
|
||||
minReplicas: 3
|
||||
maxReplicas: 250
|
||||
targetCPU: "60"
|
||||
targetMemory: "60"
|
||||
podAnnotations:
|
||||
prometheus.io/path: /stats/prometheus
|
||||
prometheus.io/port: '8002'
|
||||
prometheus.io/scrape: 'true'
|
||||
extraArgs:
|
||||
- '--concurrency 6'
|
||||
resources:
|
||||
requests:
|
||||
cpu: 6
|
||||
memory: 3Gi
|
||||
limits:
|
||||
cpu: 6
|
||||
memory: 12Gi
|
||||
service:
|
||||
tcpLB: true # disabled for gke-central-prd-ase1a onboarding — re-enable before traffic shift
|
||||
export:
|
||||
enabled: true # disabled for gke-central-prd-ase1a onboarding — re-enable before traffic shift
|
||||
targetPorts:
|
||||
http: http
|
||||
https: https
|
||||
type: ClusterIP
|
||||
annotations:
|
||||
cloud.google.com/neg: '{"exposed_ports": {"80":{"name": "envoy-int1-central-ase1a-prd"}}}'
|
||||
ports:
|
||||
http: 80
|
||||
https: 443
|
||||
grpc: 8080 ## only when tcpLB is true it will be used
|
||||
useHostPort: false
|
||||
defaultBackend:
|
||||
enabled: false
|
||||
@@ -1,106 +0,0 @@
|
||||
configInline:
|
||||
enableExternalNameService: true
|
||||
timeouts:
|
||||
connection-idle-timeout: 305s
|
||||
connection-shutdown-grace-period: 300s
|
||||
max-connection-duration: 1200s
|
||||
disablePermitInsecure: false
|
||||
tls:
|
||||
fallback-certificate: {}
|
||||
accesslog-format: envoy
|
||||
accesslog-level: disabled
|
||||
contour:
|
||||
enabled: true
|
||||
replicaCount: 3
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
manageCRDs: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 1024Mi
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: contour-shared-arm
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: contour-shared-arm
|
||||
service:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
xds: 8001
|
||||
metrics: 8000
|
||||
ingressClass:
|
||||
name: "contour-internal-intra-0"
|
||||
create: true
|
||||
debug: false
|
||||
podAnnotations:
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: '8000'
|
||||
prometheus.io/scrape: 'true'
|
||||
envoy:
|
||||
enabled: true
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
kind: deployment
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: contour-intra-0-arm
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: contour-intra-0-arm
|
||||
logLevel: error
|
||||
autoscaling:
|
||||
behavior:
|
||||
scaleDown:
|
||||
policies:
|
||||
- periodSeconds: 60
|
||||
type: Pods
|
||||
value: 2
|
||||
selectPolicy: Min
|
||||
stabilizationWindowSeconds: 300
|
||||
scaleUp:
|
||||
policies:
|
||||
- periodSeconds: 15
|
||||
type: Percent
|
||||
value: 100
|
||||
selectPolicy: Max
|
||||
stabilizationWindowSeconds: 60
|
||||
enabled: true
|
||||
minReplicas: 3
|
||||
maxReplicas: 250
|
||||
targetCPU: "60"
|
||||
targetMemory: "60"
|
||||
podAnnotations:
|
||||
prometheus.io/path: /stats/prometheus
|
||||
prometheus.io/port: '8002'
|
||||
prometheus.io/scrape: 'true'
|
||||
extraArgs:
|
||||
- '--concurrency 6'
|
||||
resources:
|
||||
requests:
|
||||
cpu: 6
|
||||
memory: 3Gi
|
||||
limits:
|
||||
cpu: 6
|
||||
memory: 12Gi
|
||||
service:
|
||||
export:
|
||||
enabled: false
|
||||
targetPorts:
|
||||
http: http
|
||||
https: https
|
||||
type: ClusterIP
|
||||
ports:
|
||||
http: 80
|
||||
https: 443
|
||||
grpc: 8080 ## only when tcpLB is true it will be used
|
||||
useHostPort: false
|
||||
defaultBackend:
|
||||
enabled: false
|
||||
@@ -1,107 +0,0 @@
|
||||
configInline:
|
||||
enableExternalNameService: true
|
||||
timeouts:
|
||||
connection-idle-timeout: 305s
|
||||
connection-shutdown-grace-period: 300s
|
||||
max-connection-duration: 360s
|
||||
disablePermitInsecure: false
|
||||
tls:
|
||||
fallback-certificate: {}
|
||||
accesslog-format: envoy
|
||||
accesslog-level: disabled
|
||||
contour:
|
||||
enabled: true
|
||||
replicaCount: 3
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
manageCRDs: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 1024Mi
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: contour-shared-arm
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: contour-shared-arm
|
||||
service:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
xds: 8001
|
||||
metrics: 8000
|
||||
ingressClass:
|
||||
name: "contour-internal-intra-1"
|
||||
create: true
|
||||
debug: false
|
||||
podAnnotations:
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: '8000'
|
||||
prometheus.io/scrape: 'true'
|
||||
envoy:
|
||||
enabled: true
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
kind: deployment
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: contour-intra-1-arm
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: contour-intra-1-arm
|
||||
logLevel: error
|
||||
autoscaling:
|
||||
behavior:
|
||||
scaleDown:
|
||||
policies:
|
||||
- periodSeconds: 60
|
||||
type: Pods
|
||||
value: 2
|
||||
selectPolicy: Min
|
||||
stabilizationWindowSeconds: 300
|
||||
scaleUp:
|
||||
policies:
|
||||
- periodSeconds: 15
|
||||
type: Percent
|
||||
value: 100
|
||||
selectPolicy: Max
|
||||
stabilizationWindowSeconds: 60
|
||||
enabled: true
|
||||
minReplicas: 3
|
||||
maxReplicas: 250
|
||||
targetCPU: "60"
|
||||
targetMemory: "60"
|
||||
podAnnotations:
|
||||
prometheus.io/path: /stats/prometheus
|
||||
prometheus.io/port: '8002'
|
||||
prometheus.io/scrape: 'true'
|
||||
extraArgs:
|
||||
- '--concurrency 6'
|
||||
resources:
|
||||
requests:
|
||||
cpu: 6
|
||||
memory: 3Gi
|
||||
limits:
|
||||
cpu: 6
|
||||
memory: 12Gi
|
||||
service:
|
||||
tcpLB: false
|
||||
export:
|
||||
enabled: false
|
||||
targetPorts:
|
||||
http: http
|
||||
https: https
|
||||
type: ClusterIP
|
||||
ports:
|
||||
http: 80
|
||||
https: 443
|
||||
grpc: 8080 ## only when tcpLB is true it will be used
|
||||
useHostPort: false
|
||||
defaultBackend:
|
||||
enabled: false
|
||||
@@ -1,28 +0,0 @@
|
||||
replicaCount: 24
|
||||
communicationType: "intra"
|
||||
|
||||
labels:
|
||||
bu: central
|
||||
team: central-devops
|
||||
env: prd
|
||||
|
||||
clusterIP: 10.1.80.2
|
||||
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu: 100m
|
||||
memory: 128Mi
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 128Mi
|
||||
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "central-devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
kubernetes.io/os: linux
|
||||
@@ -1,95 +0,0 @@
|
||||
fullnameOverride: "elasticsearch-mcp"
|
||||
|
||||
replicas: 1
|
||||
|
||||
image:
|
||||
repository: docker.elastic.co/mcp/elasticsearch
|
||||
tag: "0.4.6"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
labels:
|
||||
bu: central
|
||||
team: devops
|
||||
service: elasticsearch-mcp
|
||||
env: prd
|
||||
|
||||
serviceAccount:
|
||||
create: true
|
||||
annotations: {}
|
||||
|
||||
podAnnotations: {}
|
||||
|
||||
podSecurityContext: {}
|
||||
|
||||
securityContext:
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
|
||||
priorityClassName: ""
|
||||
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: "devops-mcp"
|
||||
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "devops-mcp"
|
||||
effect: NoSchedule
|
||||
|
||||
affinity: {}
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 500m
|
||||
memory: 1Gi
|
||||
limits:
|
||||
cpu: 2000m
|
||||
memory: 2Gi
|
||||
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /
|
||||
port: 8080
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /
|
||||
port: 8080
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
|
||||
externalSecrets:
|
||||
refreshInterval: "150s"
|
||||
secretStoreRef:
|
||||
name: vault-backend
|
||||
kind: ClusterSecretStore
|
||||
dataFrom:
|
||||
secretKey: "meesho/prd/cntr/devop/elasticsearch-mcp"
|
||||
|
||||
createContourGateway: true
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
ingressClassName: contour-internal-1
|
||||
servicePortNumber: 8080
|
||||
hosts:
|
||||
- host: elastic-mcp.prd.meesho.int
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
annotations: {}
|
||||
slowStart:
|
||||
enabled: false
|
||||
window: "120s"
|
||||
aggression: 1
|
||||
minPercent: 10
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1,62 +0,0 @@
|
||||
external-secrets:
|
||||
replicaCount: 1
|
||||
concurrent: 8
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 256Mi
|
||||
|
||||
# -- If set, install and upgrade CRDs through helm chart.
|
||||
installCRDs: true
|
||||
|
||||
crds:
|
||||
# -- If true, create CRDs for Cluster External Secret.
|
||||
createClusterExternalSecret: true
|
||||
# -- If true, create CRDs for Cluster Secret Store.
|
||||
createClusterSecretStore: true
|
||||
metrics:
|
||||
service:
|
||||
# -- Enable if you use another monitoring tool than Prometheus to scrape the metrics
|
||||
enabled: false
|
||||
|
||||
# -- Metrics service port to scrape
|
||||
port: 8080
|
||||
|
||||
|
||||
# -- Annotations to add to Pod
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8080"
|
||||
prometheus.io/path: "/metrics"
|
||||
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: central-devops
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
certController:
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: central-devops
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8080"
|
||||
prometheus.io/path: "/metrics"
|
||||
webhook:
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: central-devops
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8080"
|
||||
prometheus.io/path: "/metrics"
|
||||
@@ -1,279 +0,0 @@
|
||||
# Central production values for the Bifrost 1.5.12 upgrade candidate.
|
||||
# Chart: helm-templates/bifrost-v1.5.12
|
||||
|
||||
replicaCount: 1
|
||||
|
||||
fullnameOverride: "fireworks-ai"
|
||||
|
||||
image:
|
||||
repository: docker.io/maximhq/bifrost
|
||||
pullPolicy: IfNotPresent
|
||||
tag: "v1.5.12"
|
||||
|
||||
serviceAccount:
|
||||
create: true
|
||||
automount: true
|
||||
annotations:
|
||||
iam.gke.io/gcp-service-account: sa-dvops-ai-gateway@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
name: "fireworks-ai"
|
||||
|
||||
deploymentLabels:
|
||||
bu: central
|
||||
env: prod
|
||||
team: devops
|
||||
priority: p1
|
||||
priority_v2: sp1
|
||||
primary_owner: deep.shah
|
||||
secondary_owner: ramiz.mehran
|
||||
service: fireworks-ai
|
||||
service_type: producer-httpstateless
|
||||
|
||||
podLabels:
|
||||
bu: central
|
||||
env: prod
|
||||
team: devops
|
||||
priority: p1
|
||||
priority_v2: sp1
|
||||
primary_owner: deep.shah
|
||||
secondary_owner: ramiz.mehran
|
||||
service: fireworks-ai
|
||||
service_type: producer-httpstateless
|
||||
|
||||
podAnnotations:
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: "8080"
|
||||
prometheus.io/scrape: "true"
|
||||
telegraf.influxdata.com/class: infra
|
||||
|
||||
podSecurityContext:
|
||||
fsGroup: 65534
|
||||
runAsUser: 65534
|
||||
runAsGroup: 65534
|
||||
runAsNonRoot: true
|
||||
|
||||
securityContext:
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
readOnlyRootFilesystem: false
|
||||
runAsNonRoot: true
|
||||
runAsUser: 65534
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 8080
|
||||
|
||||
httpProxy:
|
||||
enabled: true
|
||||
createContourGateway: true
|
||||
namespace: prd-fireworks-ai
|
||||
contourResponseTimeout: false
|
||||
ingress:
|
||||
enabled: false
|
||||
ingressClassName: contour-internal-1
|
||||
servicePortNumber: 8080
|
||||
enableWebsocket: false
|
||||
hosts:
|
||||
- host: fireworks-ai.prd.meesho.int
|
||||
paths:
|
||||
- path: /
|
||||
pathType: ImplementationSpecific
|
||||
slowStart:
|
||||
enabled: false
|
||||
aggression: 1
|
||||
minPercent: 10
|
||||
window: 120s
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu: "4"
|
||||
memory: 8Gi
|
||||
requests:
|
||||
cpu: "1"
|
||||
memory: 2Gi
|
||||
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: http
|
||||
scheme: HTTP
|
||||
initialDelaySeconds: 15
|
||||
periodSeconds: 5
|
||||
timeoutSeconds: 3
|
||||
failureThreshold: 5
|
||||
successThreshold: 1
|
||||
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: http
|
||||
scheme: HTTP
|
||||
initialDelaySeconds: 15
|
||||
periodSeconds: 5
|
||||
timeoutSeconds: 3
|
||||
failureThreshold: 5
|
||||
successThreshold: 1
|
||||
|
||||
autoscaling:
|
||||
enabled: false
|
||||
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: megatetralite
|
||||
|
||||
tolerations:
|
||||
- key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: megatetralite
|
||||
effect: NoSchedule
|
||||
|
||||
affinity: {}
|
||||
|
||||
strategy:
|
||||
type: RollingUpdate
|
||||
rollingUpdate:
|
||||
maxSurge: 100%
|
||||
maxUnavailable: 0
|
||||
|
||||
terminationGracePeriodSeconds: 300
|
||||
lifecycle:
|
||||
preStop:
|
||||
exec:
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- sleep 120
|
||||
|
||||
bifrost:
|
||||
appDir: /app/data
|
||||
port: 8080
|
||||
host: 0.0.0.0
|
||||
logLevel: warn
|
||||
logStyle: json
|
||||
|
||||
client:
|
||||
dropExcessRequests: false
|
||||
initialPoolSize: 300
|
||||
allowedOrigins:
|
||||
- "*"
|
||||
enableLogging: true
|
||||
disableContentLogging: false
|
||||
disableDbPingsInHealth: false
|
||||
dumpErrorsInConsoleLogs: false
|
||||
logRetentionDays: 365
|
||||
enforceGovernanceHeader: true
|
||||
enforceAuthOnInference: false
|
||||
allowDirectKeys: false
|
||||
maxRequestBodySizeMb: 100
|
||||
|
||||
storage:
|
||||
mode: postgres
|
||||
configStore:
|
||||
enabled: true
|
||||
logsStore:
|
||||
enabled: true
|
||||
|
||||
# PostgreSQL is managed by this Helm release as a separate Deployment.
|
||||
postgresql:
|
||||
enabled: true
|
||||
external:
|
||||
enabled: false
|
||||
image:
|
||||
repository: docker.io/library/postgres
|
||||
tag: "16-alpine"
|
||||
pullPolicy: IfNotPresent
|
||||
auth:
|
||||
username: bifrost
|
||||
database: bifrost
|
||||
existingSecret: fireworks-ai-vault
|
||||
passwordKey: BIFROST_POSTGRES_PASSWORD
|
||||
primary:
|
||||
persistence:
|
||||
enabled: true
|
||||
size: 100Gi
|
||||
storageClass: hyperdisk-balanced
|
||||
resources:
|
||||
limits:
|
||||
cpu: "1"
|
||||
memory: 2Gi
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 512Mi
|
||||
podSecurityContext:
|
||||
fsGroup: 999
|
||||
containerSecurityContext: {}
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: megatetralite
|
||||
tolerations:
|
||||
- key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: megatetralite
|
||||
effect: NoSchedule
|
||||
affinity: {}
|
||||
|
||||
vectorStore:
|
||||
enabled: false
|
||||
type: none
|
||||
|
||||
env:
|
||||
- name: TZ
|
||||
value: "Asia/Kolkata"
|
||||
- name: TELEGRAF_UDP_HOST
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.podIP
|
||||
- name: NODE_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: spec.nodeName
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.name
|
||||
- name: POD_NAMESPACE
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.namespace
|
||||
- name: POD_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.podIP
|
||||
|
||||
podDisruptionBudget:
|
||||
enabled: true
|
||||
maxUnavailable: "10%"
|
||||
|
||||
# Reuses the current production Vault path until a dedicated path is provisioned.
|
||||
externalSecret:
|
||||
enabled: true
|
||||
secretName: fireworks-ai-vault
|
||||
path: "prd/cntr/devop/ai-gateway"
|
||||
refreshInterval: "0"
|
||||
secretStoreRef: vault-backend
|
||||
|
||||
keda:
|
||||
enabled: true
|
||||
pollingInterval: 30
|
||||
minReplicaCount: 2
|
||||
maxReplicaCount: 200
|
||||
scaledown:
|
||||
stabilizationWindowSeconds: 1800
|
||||
selectpolicy: Min
|
||||
policies:
|
||||
- type: Pods
|
||||
value: 2
|
||||
periodseconds: 15
|
||||
scaleup:
|
||||
stabilizationWindowSeconds: 120
|
||||
selectpolicy: Max
|
||||
policies:
|
||||
- type: Pods
|
||||
value: 2
|
||||
periodseconds: 15
|
||||
- type: Percent
|
||||
value: 10
|
||||
periodseconds: 15
|
||||
triggers:
|
||||
- type: cpu
|
||||
metricType: Utilization
|
||||
metadata:
|
||||
value: "40"
|
||||
@@ -1,68 +0,0 @@
|
||||
# Default values for flagger.
|
||||
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/flagger
|
||||
tag: rollout-service-v2.0.0
|
||||
|
||||
# accepted values are debug, info, warning, error (defaults to info)
|
||||
logLevel: info
|
||||
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8080"
|
||||
appmesh.k8s.aws/sidecarInjectorWebhook: disabled
|
||||
|
||||
crd:
|
||||
# crd.create: `true` if custom resource definitions should be created
|
||||
create: false
|
||||
|
||||
resources:
|
||||
limits:
|
||||
memory: "1024Mi"
|
||||
cpu: "2"
|
||||
requests:
|
||||
memory: "512Mi"
|
||||
cpu: "500m"
|
||||
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
operator: Equal
|
||||
value: central-devops
|
||||
|
||||
prometheus:
|
||||
install: false
|
||||
image: docker.io/prom/prometheus:v2.39.1
|
||||
pullSecret:
|
||||
retention: 2h
|
||||
securityContext:
|
||||
enabled: false
|
||||
context:
|
||||
readOnlyRootFilesystem: true
|
||||
runAsUser: 10001
|
||||
|
||||
podDisruptionBudget:
|
||||
enabled: false
|
||||
minAvailable: 1
|
||||
|
||||
podLabels:
|
||||
env: prd
|
||||
team: central-devops
|
||||
bu: infra
|
||||
|
||||
env:
|
||||
- name: ROLLOUT_SERVICE_URL
|
||||
value: "http://prd-central-rollout-service.prd-central-rollout-service.svc.cluster.local"
|
||||
|
||||
|
||||
rolloutService:
|
||||
enabled: true
|
||||
apps:
|
||||
prd-devops-node-app-consumers: true
|
||||
prd-devops-node-app: true
|
||||
prd-devops-golang-app: true
|
||||
prd-devops-golang-app-test: true
|
||||
prd-devops-golang-app-crons: true
|
||||
@@ -1,787 +0,0 @@
|
||||
nameOverride: ""
|
||||
fullnameOverride: ""
|
||||
|
||||
# DaemonSet, Deployment or StatefulSet
|
||||
kind: "DaemonSet"
|
||||
# azureblob, cloudwatch, elasticsearch7, elasticsearch8, gcs, graylog , kafka, kafka2, kinesis, opensearch
|
||||
variant: gcs
|
||||
# # Only applicable for Deployment or StatefulSet
|
||||
# replicaCount: 1
|
||||
|
||||
image:
|
||||
repository: "asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/fluentd-v2"
|
||||
pullPolicy: "Always"
|
||||
tag: "edge-debian"
|
||||
|
||||
## Optional array of imagePullSecrets containing private registry credentials
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
||||
imagePullSecrets: []
|
||||
|
||||
serviceAccount:
|
||||
create: true
|
||||
annotations: {
|
||||
iam.gke.io/gcp-service-account: sa-cntr-cnsre-fluentd-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
}
|
||||
name: null
|
||||
|
||||
rbac:
|
||||
create: true
|
||||
|
||||
# from Kubernetes 1.25, PSP is deprecated
|
||||
# See: https://kubernetes.io/blog/2022/08/23/kubernetes-v1-25-release/#pod-security-changes
|
||||
# We automatically disable PSP if Kubernetes version is 1.25 or higher
|
||||
podSecurityPolicy:
|
||||
enabled: true
|
||||
annotations: {}
|
||||
|
||||
## Security Context policies for controller pods
|
||||
## See https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/ for
|
||||
## notes on enabling and using sysctls
|
||||
##
|
||||
podSecurityContext: {}
|
||||
# seLinuxOptions:
|
||||
# type: "spc_t"
|
||||
|
||||
securityContext: {}
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
|
||||
# Configure the livecycle
|
||||
# Ref: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/
|
||||
lifecycle: {}
|
||||
# preStop:
|
||||
# exec:
|
||||
# command: ["/bin/sh", "-c", "sleep 20"]
|
||||
|
||||
# Configure the livenessProbe
|
||||
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/
|
||||
#livenessProbe:
|
||||
# httpGet:
|
||||
# path: /metrics
|
||||
# port: metrics
|
||||
# initialDelaySeconds: 0
|
||||
# periodSeconds: 10
|
||||
# timeoutSeconds: 1
|
||||
# successThreshold: 1
|
||||
# failureThreshold: 3
|
||||
|
||||
# Configure the readinessProbe
|
||||
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/
|
||||
#readinessProbe:
|
||||
# httpGet:
|
||||
# path: /metrics
|
||||
# port: metrics
|
||||
# initialDelaySeconds: 0
|
||||
# periodSeconds: 10
|
||||
# timeoutSeconds: 1
|
||||
# successThreshold: 1
|
||||
# failureThreshold: 3
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 50Mi
|
||||
limits:
|
||||
memory: 2000Mi
|
||||
cpu: 2000m
|
||||
|
||||
## only available if kind is Deployment
|
||||
autoscaling:
|
||||
enabled: false
|
||||
minReplicas: 1
|
||||
maxReplicas: 100
|
||||
targetCPUUtilizationPercentage: 80
|
||||
# targetMemoryUtilizationPercentage: 80
|
||||
## see https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough/#autoscaling-on-multiple-metrics-and-custom-metrics
|
||||
customRules: []
|
||||
# - type: Pods
|
||||
# pods:
|
||||
# metric:
|
||||
# name: packets-per-second
|
||||
# target:
|
||||
# type: AverageValue
|
||||
# averageValue: 1k
|
||||
## see https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/#support-for-configurable-scaling-behavior
|
||||
# behavior:
|
||||
# scaleDown:
|
||||
# policies:
|
||||
# - type: Pods
|
||||
# value: 4
|
||||
# periodSeconds: 60
|
||||
# - type: Percent
|
||||
# value: 10
|
||||
# periodSeconds: 60
|
||||
|
||||
|
||||
priorityClassName: "system-node-critical"
|
||||
|
||||
nodeSelector: {}
|
||||
|
||||
## Node tolerations for server scheduling to nodes with taints
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
|
||||
##
|
||||
tolerations:
|
||||
- operator: Exists
|
||||
|
||||
## Affinity and anti-affinity
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
|
||||
##
|
||||
affinity:
|
||||
nodeAffinity:
|
||||
requiredDuringSchedulingIgnoredDuringExecution:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: node_pool
|
||||
operator: In
|
||||
values:
|
||||
- np-cntr-cndvs-blue-amd-prd-ase1
|
||||
|
||||
## Annotations to be added to fluentd DaemonSet/Deployment
|
||||
##
|
||||
annotations: {}
|
||||
|
||||
## Labels to be added to fluentd DaemonSet/Deployment
|
||||
##
|
||||
labels:
|
||||
bu: central
|
||||
team: sre
|
||||
type: fluentd
|
||||
service: fluentd-copy-central-prd
|
||||
priority: p0
|
||||
env: prd
|
||||
|
||||
## Annotations to be added to fluentd pods
|
||||
##
|
||||
podAnnotations: {}
|
||||
|
||||
## Labels to be added to fluentd pods
|
||||
##
|
||||
podLabels:
|
||||
bu: central
|
||||
team: sre
|
||||
type: fluentd
|
||||
service: fluentd-copy-central-prd
|
||||
priority: p0
|
||||
env: prd
|
||||
|
||||
|
||||
## How long (in seconds) a pods needs to be stable before progressing the deployment
|
||||
##
|
||||
minReadySeconds:
|
||||
|
||||
## How long (in seconds) a pod may take to exit (useful with lifecycle hooks to ensure lb deregistration is done)
|
||||
##
|
||||
terminationGracePeriodSeconds:
|
||||
|
||||
## Deployment strategy / DaemonSet updateStrategy
|
||||
##
|
||||
updateStrategy:
|
||||
type: RollingUpdate
|
||||
rollingUpdate:
|
||||
maxUnavailable: 25%
|
||||
maxSurge: 0
|
||||
|
||||
## Additional environment variables to set for fluentd pods
|
||||
## Additional environment variables to set for fluentd pods
|
||||
env:
|
||||
- name: APP_NAME
|
||||
value: namespace_name
|
||||
- name: SUB_SYSTEM
|
||||
value: container_name
|
||||
# - name: FLUENTD_CONF
|
||||
# value: "../../etc/fluent/fluent.conf"
|
||||
- name: APP_NAME_SYSTEMD
|
||||
value: systemd
|
||||
- name: SUB_SYSTEM_SYSTEMD
|
||||
value: kubelet.service
|
||||
- name: ENDPOINT
|
||||
value: ingress.coralogixsg.com
|
||||
- name: LOG_LEVEL
|
||||
value: debug
|
||||
- name: TZ
|
||||
value: "Asia/Kolkata"
|
||||
- name: K8S_NODE_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: spec.nodeName
|
||||
|
||||
|
||||
externalSecret:
|
||||
secretStoreRef:
|
||||
name: vault-backend
|
||||
path: meesho/prd/cntr/devop/coralogix-keys
|
||||
|
||||
# externalSecret:
|
||||
# enabled: true
|
||||
# key: dev/devops/coralogix
|
||||
# secretStoreRef:
|
||||
# name: vault-backend
|
||||
|
||||
envFrom:
|
||||
- secretRef:
|
||||
name: integrations-privatekey
|
||||
|
||||
initContainers: []
|
||||
|
||||
## Name of the configMap containing a custom fluentd.conf configuration file to use instead of the default.
|
||||
# mainConfigMapNameOverride: ""
|
||||
|
||||
## Name of the configMap containing files to be placed under /etc/fluent/config.d/
|
||||
## NOTE: This will replace ALL default files in the aforementioned path!
|
||||
# extraFilesConfigMapNameOverride: ""
|
||||
|
||||
mountVarLogDirectory: true
|
||||
mountDockerContainersDirectory: true
|
||||
|
||||
volumes: []
|
||||
# - name: varlog
|
||||
# hostPath:
|
||||
# path: /var/log
|
||||
# - name: varlibdockercontainers
|
||||
# hostPath:
|
||||
# path: /var/lib/docker/containers
|
||||
# - name: etcfluentd-main
|
||||
# configMap:
|
||||
# name: fluentd-main
|
||||
# defaultMode: 0777
|
||||
# - name: etcfluentd-config
|
||||
# configMap:
|
||||
# name: fluentd-config
|
||||
# defaultMode: 0777
|
||||
|
||||
volumeMounts: []
|
||||
# - name: varlog
|
||||
# mountPath: /var/log
|
||||
# - name: varlibdockercontainers
|
||||
# mountPath: /var/lib/docker/containers
|
||||
# readOnly: true
|
||||
# - name: etcfluentd-main
|
||||
# mountPath: /etc/fluent
|
||||
# - name: etcfluentd-config
|
||||
# mountPath: /etc/fluent/config.d/
|
||||
|
||||
## Only available if kind is StatefulSet
|
||||
## Fluentd persistence
|
||||
##
|
||||
persistence:
|
||||
enabled: false
|
||||
storageClass: ""
|
||||
accessMode: ReadWriteOnce
|
||||
size: 10Gi
|
||||
|
||||
## Fluentd service
|
||||
##
|
||||
service:
|
||||
enabled: true
|
||||
type: "ClusterIP"
|
||||
annotations: {}
|
||||
# loadBalancerIP:
|
||||
# externalTrafficPolicy: Local
|
||||
ports: []
|
||||
# - name: "forwarder"
|
||||
# protocol: TCP
|
||||
# containerPort: 24224
|
||||
|
||||
## Prometheus Monitoring
|
||||
##
|
||||
metrics:
|
||||
serviceMonitor:
|
||||
enabled: false
|
||||
additionalLabels:
|
||||
release: prometheus-operator
|
||||
namespace: ""
|
||||
namespaceSelector: {}
|
||||
## metric relabel configs to apply to samples before ingestion.
|
||||
##
|
||||
metricRelabelings: []
|
||||
# - sourceLabels: [__name__]
|
||||
# separator: ;
|
||||
# regex: ^fluentd_output_status_buffer_(oldest|newest)_.+
|
||||
# replacement: $1
|
||||
# action: drop
|
||||
## relabel configs to apply to samples after ingestion.
|
||||
##
|
||||
relabelings: []
|
||||
# - sourceLabels: [__meta_kubernetes_pod_node_name]
|
||||
# separator: ;
|
||||
# regex: ^(.*)$
|
||||
# targetLabel: nodename
|
||||
# replacement: $1
|
||||
# action: replace
|
||||
## Additional serviceMonitor config
|
||||
##
|
||||
# jobLabel: fluentd
|
||||
# scrapeInterval: 30s
|
||||
# scrapeTimeout: 5s
|
||||
# honorLabels: true
|
||||
|
||||
prometheusRule:
|
||||
enabled: false
|
||||
additionalLabels: {}
|
||||
namespace: ""
|
||||
rules: []
|
||||
# - alert: FluentdDown
|
||||
# expr: up{job="fluentd"} == 0
|
||||
# for: 5m
|
||||
# labels:
|
||||
# context: fluentd
|
||||
# severity: warning
|
||||
# annotations:
|
||||
# summary: "Fluentd Down"
|
||||
# description: "{{ $labels.pod }} on {{ $labels.nodename }} is down"
|
||||
# - alert: FluentdScrapeMissing
|
||||
# expr: absent(up{job="fluentd"} == 1)
|
||||
# for: 15m
|
||||
# labels:
|
||||
# context: fluentd
|
||||
# severity: warning
|
||||
# annotations:
|
||||
# summary: "Fluentd Scrape Missing"
|
||||
# description: "Fluentd instance has disappeared from Prometheus target discovery"
|
||||
|
||||
## Grafana Monitoring Dashboard
|
||||
##
|
||||
dashboards:
|
||||
enabled: "true"
|
||||
namespace: ""
|
||||
labels:
|
||||
grafana_dashboard: '"1"'
|
||||
|
||||
## Fluentd list of plugins to install
|
||||
##
|
||||
plugins: []
|
||||
# - fluent-plugin-out-http
|
||||
|
||||
## Add fluentd config files from K8s configMaps
|
||||
##
|
||||
configMapConfigs: []
|
||||
# - fluentd-prometheus-conf
|
||||
# - fluentd-systemd-conf
|
||||
|
||||
## Fluentd configurations:
|
||||
##
|
||||
fileConfigs:
|
||||
01_sources.conf: |-
|
||||
<source>
|
||||
@type systemd
|
||||
path /var/log/journal
|
||||
tag sys-log
|
||||
read_from_head true
|
||||
</source>
|
||||
<source>
|
||||
@id fluentd-containers.log
|
||||
@type tail
|
||||
encoding utf-8
|
||||
path /var/log/containers/*.log
|
||||
pos_file /var/log/containers.log.pos
|
||||
exclude_path ["/var/log/containers/*telegraf*.log","/var/log/containers/*opentelemetry*.log","/var/log/containers/*fluentbit*.log","/var/log/containers/*gke-metrics*.log","/var/log/containers/*event-exporter-gke*.log","/var/log/containers/*metadata-server*.log","/var/log/containers/*metrics-server*.log","/var/log/containers/*filestore-node*.log"]
|
||||
path_key filename
|
||||
tag raw.containers.*
|
||||
read_from_head true
|
||||
<parse>
|
||||
@type multi_format
|
||||
<pattern>
|
||||
format json
|
||||
time_key time
|
||||
time_format %Y-%m-%dT%H:%M:%S.%NZ
|
||||
keep_time_key true
|
||||
</pattern>
|
||||
<pattern>
|
||||
format /^(?<time>.+) (?<stream>stdout|stderr) [^ ]* (?<log>.*)$/
|
||||
time_format %Y-%m-%dT%H:%M:%S.%N%:z
|
||||
keep_time_key true
|
||||
</pattern>
|
||||
<pattern>
|
||||
format /^(?<log>fsp\s+.+)$/
|
||||
ignorecase false
|
||||
multiline false
|
||||
</pattern>
|
||||
</parse>
|
||||
</source>
|
||||
<match raw.containers.**>
|
||||
@id raw.containers
|
||||
@type detect_exceptions
|
||||
remove_tag_prefix raw
|
||||
message log
|
||||
stream stream
|
||||
multiline_flush_interval 5
|
||||
max_bytes 500000
|
||||
max_lines 1000
|
||||
</match>
|
||||
|
||||
<filter containers.**>
|
||||
@type kubernetes_metadata
|
||||
</filter>
|
||||
|
||||
<filter containers.**>
|
||||
@type record_transformer
|
||||
enable_ruby true
|
||||
<record>
|
||||
container_id ${record.dig("docker", "container_id")}
|
||||
</record>
|
||||
</filter>
|
||||
|
||||
<match containers.**>
|
||||
@type rewrite_tag_filter
|
||||
<rule>
|
||||
key $.kubernetes.namespace_name
|
||||
pattern ^(.+)$
|
||||
tag $1.${tag}
|
||||
</rule>
|
||||
</match>
|
||||
|
||||
02_filters.conf: |-
|
||||
|
||||
03_dispatch.conf: |-
|
||||
<match {kube**,**coredns**,**external-secrets**,**keda**,**gke-mcs**,sys-log,**victoriametrics**}>
|
||||
@type "relabel"
|
||||
@label @NOCONCATDISPATCH
|
||||
</match>
|
||||
<match {**prd**,**int**} >
|
||||
@type "relabel"
|
||||
@label @CONCATDISPATCH
|
||||
</match>
|
||||
|
||||
<label @CONCATDISPATCH>
|
||||
<filter {**prd**,**int**}>
|
||||
@type concat
|
||||
key log
|
||||
stream_identity_key container_id
|
||||
multiline_start_regexp /^.+\d{2}\:\d{2}\:\d{2}\.\d{3}/
|
||||
separator "\n"
|
||||
flush_interval 30
|
||||
timeout_label @DISPATCH
|
||||
</filter>
|
||||
<match **>
|
||||
@type "relabel"
|
||||
@label @DISPATCH
|
||||
</match>
|
||||
</label>
|
||||
|
||||
<label @DISPATCH>
|
||||
<match {**prd**}>
|
||||
@type copy
|
||||
<store>
|
||||
@type "gcs"
|
||||
bucket "gcs-infr-dvps-meesho-logs-prd"
|
||||
path "central/${tag[0]}/dt=%d.%m.%Y/hr=%H/${tag[5]}"
|
||||
time_slice_format %Y%m%d%H
|
||||
object_key_format "%{path}/%{time_slice}_%{index}.%{file_extension}"
|
||||
store_as "gzip"
|
||||
<format>
|
||||
@type "json"
|
||||
localtime true
|
||||
</format>
|
||||
<buffer tag,time>
|
||||
timekey 30m
|
||||
@type "file"
|
||||
path "/tmp/td-agent/buffer/"
|
||||
flush_thread_count 2
|
||||
timekey_wait 10m
|
||||
chunk_limit_size 50m
|
||||
flush_at_shutdown true
|
||||
</buffer>
|
||||
</store>
|
||||
<store>
|
||||
@type "relabel"
|
||||
@label @PRD
|
||||
</store>
|
||||
</match>
|
||||
<match {**int**}>
|
||||
@type copy
|
||||
<store>
|
||||
@type "relabel"
|
||||
@label @PREPROD
|
||||
</store>
|
||||
</match>
|
||||
</label>
|
||||
|
||||
<label @PRD>
|
||||
<filter {**prd**}>
|
||||
@type grep
|
||||
<regexp>
|
||||
key log
|
||||
pattern /ERROR|WARN|error|warn/
|
||||
</regexp>
|
||||
</filter>
|
||||
<filter {**prd**} >
|
||||
@type parser
|
||||
key_name log
|
||||
reserve_time true
|
||||
reserve_data true
|
||||
<parse>
|
||||
@type multi_format
|
||||
<pattern>
|
||||
format regexp
|
||||
expression /(?<timestamp>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d{3}) - \[(?<log_level>[A-Z\s]{1,6})\] - \[(?<logger>[^\]]+):(?<method>[^\]:]+)?:(?<line_number>\d+)?\] - \[(?<pid>\d+)?, (?<thread>[^\]]+)?\] - \((?<x3_trace_id>[^,]*)?,(?<x3_span_id>[^)]*)?\)\|\((?<trace_id>[^,]*)?,(?<span_id>[^)]*)?\) - \[(?<user_id>[^\]]*)?\] - \((?<extras>[^)]*)?\) - (?<log>[^\n]*)\n?(?<throwable>[^|]*)$/
|
||||
</pattern>
|
||||
<pattern>
|
||||
format /^(?<log>.*)$/
|
||||
</pattern>
|
||||
</parse>
|
||||
</filter>
|
||||
<filter {**prd**}>
|
||||
@type record_transformer
|
||||
enable_ruby true
|
||||
auto_typecast true
|
||||
renew_record true
|
||||
<record>
|
||||
log_level ${if record.has_key?('log_level') && !record['log_level'].nil?; then record['log_level']; else 'EMPTY'; end}
|
||||
logger ${record.dig("logger")}
|
||||
method ${record.dig("method")}
|
||||
line_number ${record.dig("line_number")}
|
||||
pid ${record.dig("pid")}
|
||||
thread ${record.dig("thread")}
|
||||
x3_trace_id ${record.dig("x3_trace_id")}
|
||||
x3_span_id ${record.dig("x3_span_id")}
|
||||
trace_id ${record.dig("trace_id")}
|
||||
span_id ${record.dig("span_id")}
|
||||
user_id ${record.dig("user_id")}
|
||||
extras ${record.dig("extras")}
|
||||
message ${record.dig("log")}
|
||||
throwable ${record.dig("throwable")}
|
||||
application_name ${record.dig("kubernetes", "namespace_name")}
|
||||
service_name ${record.dig("kubernetes", "container_name")}
|
||||
host ${record.dig("kubernetes", "host")}
|
||||
pod_name ${record.dig("kubernetes", "pod_name")}
|
||||
pod_ip ${record.dig("kubernetes", "pod_ip")}
|
||||
</record>
|
||||
</filter>
|
||||
<match {**prd**}>
|
||||
@type rewrite_tag_filter
|
||||
<rule>
|
||||
key log_level
|
||||
pattern /^EMPTY$|^$/
|
||||
tag unstructured
|
||||
</rule>
|
||||
<rule>
|
||||
key log_level
|
||||
pattern /^EMPTY$|^$/
|
||||
tag structured
|
||||
invert true
|
||||
</rule>
|
||||
</match>
|
||||
|
||||
<match unstructured>
|
||||
@type elasticsearch
|
||||
host 7d369a3cb09343f3979cb78a02e522df.psc.asia-southeast1.gcp.elastic-cloud.com
|
||||
port 9243
|
||||
scheme https
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gcp-unstructured-prd
|
||||
password "#{ENV['ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
<match structured>
|
||||
@type elasticsearch
|
||||
host 7d369a3cb09343f3979cb78a02e522df.psc.asia-southeast1.gcp.elastic-cloud.com
|
||||
port 9243
|
||||
scheme https
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gcp-prd
|
||||
password "#{ENV['ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
</label>
|
||||
|
||||
<label @NOCONCATDISPATCH>
|
||||
<filter sys-log >
|
||||
@type record_transformer
|
||||
enable_ruby true
|
||||
auto_typecast true
|
||||
renew_record true
|
||||
renew_time_key ${record.dig("SYSLOG_TIMESTAMP")}
|
||||
<record>
|
||||
cluster_name "central-prd"
|
||||
application_name "systemd"
|
||||
node_name ${record.dig("_HOSTNAME")}
|
||||
text ${record.to_json}
|
||||
</record>
|
||||
</filter>
|
||||
<filter {kube**,**coredns**,**external-secrets**,**keda**,**gke-mcs**,**victoriametrics**} >
|
||||
@type record_transformer
|
||||
enable_ruby true
|
||||
auto_typecast true
|
||||
renew_record true
|
||||
<record>
|
||||
application_name ${record.dig("kubernetes", "namespace_name")}
|
||||
service_name ${record.dig("kubernetes", "container_name")}
|
||||
host ${record.dig("kubernetes", "host")}
|
||||
pod_name ${record.dig("kubernetes", "pod_name")}
|
||||
pod_ip ${record.dig("kubernetes", "pod_ip")}
|
||||
text ${record.dig("log")}
|
||||
</record>
|
||||
</filter>
|
||||
<match {**kube-events**,**kube-system**,**external-secrets**,**keda**,sys-log,**victoriametrics**}>
|
||||
@type elasticsearch
|
||||
host 7d369a3cb09343f3979cb78a02e522df.psc.asia-southeast1.gcp.elastic-cloud.com
|
||||
port 9243
|
||||
scheme https
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gcp-kubeevents
|
||||
password "#{ENV['ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
<match {**gke-mcs**}>
|
||||
@type elasticsearch
|
||||
host 7d369a3cb09343f3979cb78a02e522df.psc.asia-southeast1.gcp.elastic-cloud.com
|
||||
port 9243
|
||||
scheme https
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gke-mcs
|
||||
password "#{ENV['ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
<match **>
|
||||
@type elasticsearch
|
||||
host 7d369a3cb09343f3979cb78a02e522df.psc.asia-southeast1.gcp.elastic-cloud.com
|
||||
port 9243
|
||||
scheme https
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gcp-prd
|
||||
password "#{ENV['ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
</label>
|
||||
|
||||
<label @PREPROD>
|
||||
<filter {**int**}>
|
||||
@type grep
|
||||
<regexp>
|
||||
key log
|
||||
pattern /INFO|ERROR|WARN|info|error|warn/
|
||||
</regexp>
|
||||
</filter>
|
||||
<filter {**int**}>
|
||||
@type parser
|
||||
key_name log
|
||||
reserve_time true
|
||||
reserve_data true
|
||||
<parse>
|
||||
@type multi_format
|
||||
<pattern>
|
||||
format regexp
|
||||
expression /(?<timestamp>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d{3}) - \[(?<log_level>[A-Z\s]{1,6})\] - \[(?<logger>[^\]]+):(?<method>[^\]:]+)?:(?<line_number>\d+)?\] - \[(?<pid>\d+)?, (?<thread>[^\]]+)?\] - \((?<x3_trace_id>[^,]*)?,(?<x3_span_id>[^)]*)?\)\|\((?<trace_id>[^,]*)?,(?<span_id>[^)]*)?\) - \[(?<user_id>[^\]]*)?\] - \((?<extras>[^)]*)?\) - (?<log>[^\n]*)\n?(?<throwable>[^|]*)$/
|
||||
</pattern>
|
||||
<pattern>
|
||||
format /^(?<log>.*)$/
|
||||
</pattern>
|
||||
</parse>
|
||||
</filter>
|
||||
<filter {**int**}>
|
||||
@type record_transformer
|
||||
enable_ruby true
|
||||
auto_typecast true
|
||||
renew_record true
|
||||
<record>
|
||||
log_level ${if record.has_key?('log_level') && !record['log_level'].nil?; then record['log_level']; else 'EMPTY'; end}
|
||||
logger ${record.dig("logger")}
|
||||
method ${record.dig("method")}
|
||||
line_number ${record.dig("line_number")}
|
||||
pid ${record.dig("pid")}
|
||||
thread ${record.dig("thread")}
|
||||
x3_trace_id ${record.dig("x3_trace_id")}
|
||||
x3_span_id ${record.dig("x3_span_id")}
|
||||
trace_id ${record.dig("trace_id")}
|
||||
span_id ${record.dig("span_id")}
|
||||
user_id ${record.dig("user_id")}
|
||||
extras ${record.dig("extras")}
|
||||
message ${record.dig("log")}
|
||||
throwable ${record.dig("throwable")}
|
||||
application_name ${record.dig("kubernetes", "namespace_name")}
|
||||
service_name ${record.dig("kubernetes", "container_name")}
|
||||
host ${record.dig("kubernetes", "host")}
|
||||
pod_name ${record.dig("kubernetes", "pod_name")}
|
||||
pod_ip ${record.dig("kubernetes", "pod_ip")}
|
||||
</record>
|
||||
</filter>
|
||||
<match {**int**}>
|
||||
@type rewrite_tag_filter
|
||||
<rule>
|
||||
key log_level
|
||||
pattern /^EMPTY$|^$/
|
||||
tag usint
|
||||
</rule>
|
||||
<rule>
|
||||
key log_level
|
||||
pattern /^EMPTY$|^$/
|
||||
tag sint
|
||||
invert true
|
||||
</rule>
|
||||
</match>
|
||||
<match usint>
|
||||
@type elasticsearch
|
||||
host 7d369a3cb09343f3979cb78a02e522df.psc.asia-southeast1.gcp.elastic-cloud.com
|
||||
port 9243
|
||||
scheme https
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gcp-unstructured-int
|
||||
password "#{ENV['ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
<match sint>
|
||||
@type elasticsearch
|
||||
host 7d369a3cb09343f3979cb78a02e522df.psc.asia-southeast1.gcp.elastic-cloud.com
|
||||
port 9243
|
||||
scheme https
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gcp-int
|
||||
password "#{ENV['ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
</label>
|
||||
|
||||
04_outputs.conf: |-
|
||||
@@ -1,829 +0,0 @@
|
||||
nameOverride: ""
|
||||
fullnameOverride: ""
|
||||
|
||||
# DaemonSet, Deployment or StatefulSet
|
||||
kind: "DaemonSet"
|
||||
# azureblob, cloudwatch, elasticsearch7, elasticsearch8, gcs, graylog , kafka, kafka2, kinesis, opensearch
|
||||
variant: gcs
|
||||
# # Only applicable for Deployment or StatefulSet
|
||||
# replicaCount: 1
|
||||
|
||||
image:
|
||||
repository: "asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/fluentd-v2"
|
||||
pullPolicy: "Always"
|
||||
tag: "edge-debian"
|
||||
|
||||
## Optional array of imagePullSecrets containing private registry credentials
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
||||
imagePullSecrets: []
|
||||
|
||||
serviceAccount:
|
||||
create: true
|
||||
annotations: {
|
||||
iam.gke.io/gcp-service-account: sa-cntr-cnsre-fluentd-prd@meesho-central-prd-0622.iam.gserviceaccount.com
|
||||
}
|
||||
name: null
|
||||
|
||||
rbac:
|
||||
create: true
|
||||
|
||||
# from Kubernetes 1.25, PSP is deprecated
|
||||
# See: https://kubernetes.io/blog/2022/08/23/kubernetes-v1-25-release/#pod-security-changes
|
||||
# We automatically disable PSP if Kubernetes version is 1.25 or higher
|
||||
podSecurityPolicy:
|
||||
enabled: true
|
||||
annotations: {}
|
||||
|
||||
## Security Context policies for controller pods
|
||||
## See https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/ for
|
||||
## notes on enabling and using sysctls
|
||||
##
|
||||
podSecurityContext: {}
|
||||
# seLinuxOptions:
|
||||
# type: "spc_t"
|
||||
|
||||
securityContext: {}
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
|
||||
# Configure the livecycle
|
||||
# Ref: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/
|
||||
lifecycle: {}
|
||||
# preStop:
|
||||
# exec:
|
||||
# command: ["/bin/sh", "-c", "sleep 20"]
|
||||
|
||||
# Configure the livenessProbe
|
||||
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/
|
||||
#livenessProbe:
|
||||
# httpGet:
|
||||
# path: /metrics
|
||||
# port: metrics
|
||||
# initialDelaySeconds: 0
|
||||
# periodSeconds: 10
|
||||
# timeoutSeconds: 1
|
||||
# successThreshold: 1
|
||||
# failureThreshold: 3
|
||||
|
||||
# Configure the readinessProbe
|
||||
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/
|
||||
#readinessProbe:
|
||||
# httpGet:
|
||||
# path: /metrics
|
||||
# port: metrics
|
||||
# initialDelaySeconds: 0
|
||||
# periodSeconds: 10
|
||||
# timeoutSeconds: 1
|
||||
# successThreshold: 1
|
||||
# failureThreshold: 3
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 50Mi
|
||||
limits:
|
||||
memory: 2000Mi
|
||||
cpu: 2000m
|
||||
|
||||
## only available if kind is Deployment
|
||||
autoscaling:
|
||||
enabled: false
|
||||
minReplicas: 1
|
||||
maxReplicas: 100
|
||||
targetCPUUtilizationPercentage: 80
|
||||
# targetMemoryUtilizationPercentage: 80
|
||||
## see https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough/#autoscaling-on-multiple-metrics-and-custom-metrics
|
||||
customRules: []
|
||||
# - type: Pods
|
||||
# pods:
|
||||
# metric:
|
||||
# name: packets-per-second
|
||||
# target:
|
||||
# type: AverageValue
|
||||
# averageValue: 1k
|
||||
## see https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/#support-for-configurable-scaling-behavior
|
||||
# behavior:
|
||||
# scaleDown:
|
||||
# policies:
|
||||
# - type: Pods
|
||||
# value: 4
|
||||
# periodSeconds: 60
|
||||
# - type: Percent
|
||||
# value: 10
|
||||
# periodSeconds: 60
|
||||
|
||||
|
||||
priorityClassName: "system-node-critical"
|
||||
|
||||
nodeSelector: {}
|
||||
|
||||
## Node tolerations for server scheduling to nodes with taints
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
|
||||
##
|
||||
tolerations:
|
||||
- operator: Exists
|
||||
|
||||
## Affinity and anti-affinity
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
|
||||
##
|
||||
affinity:
|
||||
nodeAffinity:
|
||||
requiredDuringSchedulingIgnoredDuringExecution:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: node_pool
|
||||
operator: NotIn
|
||||
values:
|
||||
- np-cntr-cndvs-blue-amd-prd-ase1
|
||||
|
||||
## Annotations to be added to fluentd DaemonSet/Deployment
|
||||
##
|
||||
annotations: {}
|
||||
|
||||
## Labels to be added to fluentd DaemonSet/Deployment
|
||||
##
|
||||
labels:
|
||||
bu: central
|
||||
team: sre
|
||||
type: fluentd
|
||||
service: fluentd-central-a-prd
|
||||
priority: p0
|
||||
env: prd
|
||||
|
||||
## Annotations to be added to fluentd pods
|
||||
##
|
||||
podAnnotations: {}
|
||||
|
||||
## Labels to be added to fluentd pods
|
||||
##
|
||||
podLabels:
|
||||
bu: central
|
||||
team: sre
|
||||
type: fluentd
|
||||
service: fluentd-central-a-prd
|
||||
priority: p0
|
||||
env: prd
|
||||
|
||||
|
||||
## How long (in seconds) a pods needs to be stable before progressing the deployment
|
||||
##
|
||||
minReadySeconds:
|
||||
|
||||
## How long (in seconds) a pod may take to exit (useful with lifecycle hooks to ensure lb deregistration is done)
|
||||
##
|
||||
terminationGracePeriodSeconds:
|
||||
|
||||
## Deployment strategy / DaemonSet updateStrategy
|
||||
##
|
||||
updateStrategy:
|
||||
type: RollingUpdate
|
||||
rollingUpdate:
|
||||
maxUnavailable: 25%
|
||||
maxSurge: 0
|
||||
|
||||
## Additional environment variables to set for fluentd pods
|
||||
## Additional environment variables to set for fluentd pods
|
||||
env:
|
||||
- name: APP_NAME
|
||||
value: namespace_name
|
||||
- name: SUB_SYSTEM
|
||||
value: container_name
|
||||
# - name: FLUENTD_CONF
|
||||
# value: "../../etc/fluent/fluent.conf"
|
||||
- name: APP_NAME_SYSTEMD
|
||||
value: systemd
|
||||
- name: SUB_SYSTEM_SYSTEMD
|
||||
value: kubelet.service
|
||||
- name: ENDPOINT
|
||||
value: ingress.coralogixsg.com
|
||||
- name: LOG_LEVEL
|
||||
value: error
|
||||
- name: TZ
|
||||
value: "Asia/Kolkata"
|
||||
- name: K8S_NODE_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: spec.nodeName
|
||||
|
||||
|
||||
externalSecret:
|
||||
secretStoreRef:
|
||||
name: vault-backend
|
||||
path: meesho/prd/cntr/devop/coralogix-keys
|
||||
|
||||
# externalSecret:
|
||||
# enabled: true
|
||||
# key: dev/devops/coralogix
|
||||
# secretStoreRef:
|
||||
# name: vault-backend
|
||||
|
||||
envFrom:
|
||||
# - secretRef:
|
||||
# name: integrations-privatekey
|
||||
- secretRef:
|
||||
name: es-password
|
||||
|
||||
initContainers: []
|
||||
|
||||
## Name of the configMap containing a custom fluentd.conf configuration file to use instead of the default.
|
||||
# mainConfigMapNameOverride: ""
|
||||
|
||||
## Name of the configMap containing files to be placed under /etc/fluent/config.d/
|
||||
## NOTE: This will replace ALL default files in the aforementioned path!
|
||||
# extraFilesConfigMapNameOverride: ""
|
||||
|
||||
mountVarLogDirectory: true
|
||||
mountDockerContainersDirectory: true
|
||||
|
||||
volumes: []
|
||||
# - name: varlog
|
||||
# hostPath:
|
||||
# path: /var/log
|
||||
# - name: varlibdockercontainers
|
||||
# hostPath:
|
||||
# path: /var/lib/docker/containers
|
||||
# - name: etcfluentd-main
|
||||
# configMap:
|
||||
# name: fluentd-main
|
||||
# defaultMode: 0777
|
||||
# - name: etcfluentd-config
|
||||
# configMap:
|
||||
# name: fluentd-config
|
||||
# defaultMode: 0777
|
||||
|
||||
volumeMounts: []
|
||||
# - name: varlog
|
||||
# mountPath: /var/log
|
||||
# - name: varlibdockercontainers
|
||||
# mountPath: /var/lib/docker/containers
|
||||
# readOnly: true
|
||||
# - name: etcfluentd-main
|
||||
# mountPath: /etc/fluent
|
||||
# - name: etcfluentd-config
|
||||
# mountPath: /etc/fluent/config.d/
|
||||
|
||||
## Only available if kind is StatefulSet
|
||||
## Fluentd persistence
|
||||
##
|
||||
persistence:
|
||||
enabled: false
|
||||
storageClass: ""
|
||||
accessMode: ReadWriteOnce
|
||||
size: 10Gi
|
||||
|
||||
## Fluentd service
|
||||
##
|
||||
service:
|
||||
enabled: true
|
||||
type: "ClusterIP"
|
||||
annotations: {}
|
||||
# loadBalancerIP:
|
||||
# externalTrafficPolicy: Local
|
||||
ports: []
|
||||
# - name: "forwarder"
|
||||
# protocol: TCP
|
||||
# containerPort: 24224
|
||||
|
||||
## Prometheus Monitoring
|
||||
##
|
||||
metrics:
|
||||
serviceMonitor:
|
||||
enabled: false
|
||||
additionalLabels:
|
||||
release: prometheus-operator
|
||||
namespace: ""
|
||||
namespaceSelector: {}
|
||||
## metric relabel configs to apply to samples before ingestion.
|
||||
##
|
||||
metricRelabelings: []
|
||||
# - sourceLabels: [__name__]
|
||||
# separator: ;
|
||||
# regex: ^fluentd_output_status_buffer_(oldest|newest)_.+
|
||||
# replacement: $1
|
||||
# action: drop
|
||||
## relabel configs to apply to samples after ingestion.
|
||||
##
|
||||
relabelings: []
|
||||
# - sourceLabels: [__meta_kubernetes_pod_node_name]
|
||||
# separator: ;
|
||||
# regex: ^(.*)$
|
||||
# targetLabel: nodename
|
||||
# replacement: $1
|
||||
# action: replace
|
||||
## Additional serviceMonitor config
|
||||
##
|
||||
# jobLabel: fluentd
|
||||
# scrapeInterval: 30s
|
||||
# scrapeTimeout: 5s
|
||||
# honorLabels: true
|
||||
|
||||
prometheusRule:
|
||||
enabled: false
|
||||
additionalLabels: {}
|
||||
namespace: ""
|
||||
rules: []
|
||||
# - alert: FluentdDown
|
||||
# expr: up{job="fluentd"} == 0
|
||||
# for: 5m
|
||||
# labels:
|
||||
# context: fluentd
|
||||
# severity: warning
|
||||
# annotations:
|
||||
# summary: "Fluentd Down"
|
||||
# description: "{{ $labels.pod }} on {{ $labels.nodename }} is down"
|
||||
# - alert: FluentdScrapeMissing
|
||||
# expr: absent(up{job="fluentd"} == 1)
|
||||
# for: 15m
|
||||
# labels:
|
||||
# context: fluentd
|
||||
# severity: warning
|
||||
# annotations:
|
||||
# summary: "Fluentd Scrape Missing"
|
||||
# description: "Fluentd instance has disappeared from Prometheus target discovery"
|
||||
|
||||
## Grafana Monitoring Dashboard
|
||||
##
|
||||
dashboards:
|
||||
enabled: "true"
|
||||
namespace: ""
|
||||
labels:
|
||||
grafana_dashboard: '"1"'
|
||||
|
||||
## Fluentd list of plugins to install
|
||||
##
|
||||
plugins: []
|
||||
# - fluent-plugin-out-http
|
||||
|
||||
## Add fluentd config files from K8s configMaps
|
||||
##
|
||||
configMapConfigs:
|
||||
- fluentd-prometheus-conf
|
||||
# - fluentd-systemd-conf
|
||||
|
||||
## Fluentd configurations:
|
||||
##
|
||||
fileConfigs:
|
||||
01_sources.conf: |-
|
||||
<source>
|
||||
@type systemd
|
||||
path /var/log/journal
|
||||
tag sys-log
|
||||
read_from_head true
|
||||
</source>
|
||||
<source>
|
||||
@id fluentd-containers.log
|
||||
@type tail
|
||||
encoding utf-8
|
||||
from_encoding "utf-8"
|
||||
path /var/log/containers/*.log
|
||||
pos_file /var/log/containers.log.pos
|
||||
exclude_path ["/var/log/containers/*telegraf*.log","/var/log/containers/*opentelemetry*.log","/var/log/containers/*fluentbit*.log","/var/log/containers/*gke-metrics*.log","/var/log/containers/*event-exporter-gke*.log","/var/log/containers/*metadata-server*.log","/var/log/containers/*metrics-server*.log","/var/log/containers/*filestore-node*.log"]
|
||||
path_key filename
|
||||
tag raw.containers.*
|
||||
read_from_head true
|
||||
<parse>
|
||||
@type multi_format
|
||||
<pattern>
|
||||
format json
|
||||
time_key time
|
||||
time_format %Y-%m-%dT%H:%M:%S.%NZ
|
||||
keep_time_key true
|
||||
</pattern>
|
||||
<pattern>
|
||||
format /^(?<time>.+) (?<stream>stdout|stderr) [^ ]* (?<log>.*)$/
|
||||
time_format %Y-%m-%dT%H:%M:%S.%N%:z
|
||||
keep_time_key true
|
||||
</pattern>
|
||||
<pattern>
|
||||
format /^(?<log>fsp\s+.+)$/
|
||||
ignorecase false
|
||||
multiline false
|
||||
</pattern>
|
||||
</parse>
|
||||
</source>
|
||||
<match raw.containers.**>
|
||||
@id raw.containers
|
||||
@type detect_exceptions
|
||||
remove_tag_prefix raw
|
||||
message log
|
||||
stream stream
|
||||
multiline_flush_interval 5
|
||||
max_bytes 500000
|
||||
max_lines 1000
|
||||
</match>
|
||||
|
||||
<filter containers.**>
|
||||
@type kubernetes_metadata
|
||||
</filter>
|
||||
|
||||
<filter containers.**>
|
||||
@type record_transformer
|
||||
enable_ruby true
|
||||
<record>
|
||||
container_id ${record.dig("docker", "container_id")}
|
||||
</record>
|
||||
</filter>
|
||||
|
||||
<match containers.**>
|
||||
@type rewrite_tag_filter
|
||||
<rule>
|
||||
key $.kubernetes.namespace_name
|
||||
pattern ^(.+)$
|
||||
tag $1.${tag}
|
||||
</rule>
|
||||
</match>
|
||||
|
||||
02_filters.conf: |-
|
||||
|
||||
03_dispatch.conf: |-
|
||||
<match {kube**,**coredns**,**external-secrets**,**keda**,**gke-mcs**,sys-log,**victoriametrics**}>
|
||||
@type "relabel"
|
||||
@label @NOCONCATDISPATCH
|
||||
</match>
|
||||
<match {**prd**,**int**} >
|
||||
@type "relabel"
|
||||
@label @CONCATDISPATCH
|
||||
</match>
|
||||
|
||||
<label @CONCATDISPATCH>
|
||||
<filter {**prd**,**int**}>
|
||||
@type concat
|
||||
key log
|
||||
stream_identity_key container_id
|
||||
multiline_start_regexp /^(?:.+\d{2}:\d{2}:\d{2}\.\d{3}|\{)/
|
||||
separator "\n"
|
||||
flush_interval 30
|
||||
timeout_label @DISPATCH
|
||||
</filter>
|
||||
<match **>
|
||||
@type "relabel"
|
||||
@label @DISPATCH
|
||||
</match>
|
||||
</label>
|
||||
|
||||
<label @DISPATCH>
|
||||
<match {**prd**}>
|
||||
@type copy
|
||||
<store>
|
||||
@type "gcs"
|
||||
bucket "gcs-infr-dvps-meesho-logs-prd"
|
||||
path "central/${tag[0]}/dt=%d.%m.%Y/hr=%H/${tag[5]}"
|
||||
time_slice_format %Y%m%d%H
|
||||
object_key_format "%{path}/%{time_slice}_%{index}.%{file_extension}"
|
||||
store_as "gzip"
|
||||
<format>
|
||||
@type "json"
|
||||
localtime true
|
||||
</format>
|
||||
<buffer tag,time>
|
||||
timekey 30m
|
||||
@type "file"
|
||||
path "/tmp/td-agent/buffer/"
|
||||
flush_thread_count 10
|
||||
timekey_wait 10m
|
||||
chunk_limit_size 50m
|
||||
flush_at_shutdown true
|
||||
</buffer>
|
||||
</store>
|
||||
<store>
|
||||
@type "relabel"
|
||||
@label @PRD
|
||||
</store>
|
||||
<store>
|
||||
@type "relabel"
|
||||
@label @PRDDEBUG
|
||||
</store>
|
||||
</match>
|
||||
<match {**int**}>
|
||||
@type copy
|
||||
<store>
|
||||
@type "relabel"
|
||||
@label @PREPROD
|
||||
</store>
|
||||
</match>
|
||||
</label>
|
||||
|
||||
<label @PRD>
|
||||
<filter {**prd**}>
|
||||
@type grep
|
||||
<regexp>
|
||||
key log
|
||||
pattern /ERROR|WARN|error|warn/
|
||||
</regexp>
|
||||
</filter>
|
||||
<filter {**prd**} >
|
||||
@type parser
|
||||
key_name log
|
||||
reserve_time true
|
||||
reserve_data true
|
||||
<parse>
|
||||
@type multi_format
|
||||
<pattern>
|
||||
format regexp
|
||||
expression /(?<timestamp>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d{3}) - \[(?<log_level>[A-Z\s]{1,6})\] - \[(?<logger>[^\]]+):(?<method>[^\]:]+)?:(?<line_number>\d+)?\] - \[(?<pid>\d+)?, (?<thread>[^\]]+)?\] - \((?<x3_trace_id>[^,]*)?,(?<x3_span_id>[^)]*)?\)\|\((?<trace_id>[^,]*)?,(?<span_id>[^)]*)?\) - \[(?<user_id>[^\]]*)?\] - \((?<extras>[^)]*)?\) - (?<log>[^\n]*)\n?(?<throwable>[^|]*)$/
|
||||
</pattern>
|
||||
<pattern>
|
||||
format json
|
||||
time_key timestamp
|
||||
keep_time_key true
|
||||
</pattern>
|
||||
<pattern>
|
||||
format /^(?<log>.*)$/
|
||||
</pattern>
|
||||
</parse>
|
||||
</filter>
|
||||
<filter {**prd**}>
|
||||
@type record_transformer
|
||||
enable_ruby true
|
||||
auto_typecast true
|
||||
renew_record true
|
||||
<record>
|
||||
log_level ${record.dig("log_level") || record.dig("level") || record.dig("severity")}
|
||||
logger ${record.dig("logger") || record.dig("logger_name") || record.dig("loggerName")}
|
||||
method ${record.dig("method")}
|
||||
line_number ${record.dig("line_number") || record.dig("lineNumber")}
|
||||
pid ${record.dig("pid")}
|
||||
thread ${record.dig("thread") || record.dig("thread_name") || record.dig("threadName")}
|
||||
x3_trace_id ${record.dig("x3_trace_id") || record.dig("x3TraceId")}
|
||||
x3_span_id ${record.dig("x3_span_id") || record.dig("x3SpanId")}
|
||||
trace_id ${record.dig("trace_id") || record.dig("traceId")}
|
||||
span_id ${record.dig("span_id") || record.dig("spanId")}
|
||||
user_id ${record.dig("user_id") || record.dig("userId")}
|
||||
extras ${record.dig("extras")}
|
||||
message ${record.dig("message") || record.dig("msg") || record.dig("log")}
|
||||
throwable ${record.dig("throwable") || record.dig("stack_trace") || record.dig("stackTrace") || record.dig("exception")}
|
||||
application_name ${record.dig("kubernetes", "namespace_name")}
|
||||
service_name ${record.dig("kubernetes", "container_name")}
|
||||
host ${record.dig("kubernetes", "host")}
|
||||
pod_name ${record.dig("kubernetes", "pod_name")}
|
||||
pod_ip ${record.dig("kubernetes", "pod_ip")}
|
||||
</record>
|
||||
</filter>
|
||||
<filter {**prd**}>
|
||||
@type prometheus
|
||||
<metric>
|
||||
name fluentd_log_count_total
|
||||
type counter
|
||||
desc Total number of log entries processed by Fluentd (prd namespace breakdown)
|
||||
<labels>
|
||||
application_name $.application_name
|
||||
log_level $.log_level
|
||||
pod_name $.pod_name
|
||||
</labels>
|
||||
</metric>
|
||||
</filter>
|
||||
<match {**prd**}>
|
||||
@type elasticsearch
|
||||
host eck-observability-prd-es-hot-warm.eck-observability-prd.svc.clusterset.local
|
||||
port 9200
|
||||
scheme http
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gcp-prd
|
||||
password "#{ENV['ECK_ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
</label>
|
||||
|
||||
<label @PRDDEBUG>
|
||||
<filter {**prd-ringmaster**}>
|
||||
@type grep
|
||||
<regexp>
|
||||
key log
|
||||
pattern /ERROR|WARN|INFO|DEBUG|debug|error|warn|info/
|
||||
</regexp>
|
||||
</filter>
|
||||
<filter {**prd-ringmaster**}>
|
||||
@type parser
|
||||
key_name log
|
||||
reserve_time true
|
||||
reserve_data true
|
||||
<parse>
|
||||
@type multi_format
|
||||
<pattern>
|
||||
format regexp
|
||||
expression /(?<timestamp>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d{3}) - \[(?<log_level>[A-Z\s]{1,6})\] - \[(?<logger>[^\]]+):(?<method>[^\]:]+)?:(?<line_number>\d+)?\] - \[(?<pid>\d+)?, (?<thread>[^\]]+)?\] - \((?<x3_trace_id>[^,]*)?,(?<x3_span_id>[^)]*)?\)\|\((?<trace_id>[^,]*)?,(?<span_id>[^)]*)?\) - \[(?<user_id>[^\]]*)?\] - \((?<extras>[^)]*)?\) - (?<log>[^\n]*)\n?(?<throwable>[^|]*)$/
|
||||
</pattern>
|
||||
<pattern>
|
||||
format json
|
||||
time_key timestamp
|
||||
keep_time_key true
|
||||
</pattern>
|
||||
<pattern>
|
||||
format /^(?<log>.*)$/
|
||||
</pattern>
|
||||
</parse>
|
||||
</filter>
|
||||
<filter {**prd-ringmaster**}>
|
||||
@type record_transformer
|
||||
enable_ruby true
|
||||
auto_typecast true
|
||||
renew_record true
|
||||
<record>
|
||||
log_level ${record.dig("log_level") || record.dig("level") || record.dig("severity")}
|
||||
logger ${record.dig("logger") || record.dig("logger_name") || record.dig("loggerName")}
|
||||
method ${record.dig("method")}
|
||||
line_number ${record.dig("line_number") || record.dig("lineNumber")}
|
||||
pid ${record.dig("pid")}
|
||||
thread ${record.dig("thread") || record.dig("thread_name") || record.dig("threadName")}
|
||||
x3_trace_id ${record.dig("x3_trace_id") || record.dig("x3TraceId")}
|
||||
x3_span_id ${record.dig("x3_span_id") || record.dig("x3SpanId")}
|
||||
trace_id ${record.dig("trace_id") || record.dig("traceId")}
|
||||
span_id ${record.dig("span_id") || record.dig("spanId")}
|
||||
user_id ${record.dig("user_id") || record.dig("userId")}
|
||||
extras ${record.dig("extras")}
|
||||
message ${record.dig("message") || record.dig("msg") || record.dig("log")}
|
||||
throwable ${record.dig("throwable") || record.dig("stack_trace") || record.dig("stackTrace") || record.dig("exception")}
|
||||
application_name ${record.dig("kubernetes", "namespace_name")}
|
||||
service_name ${record.dig("kubernetes", "container_name")}
|
||||
host ${record.dig("kubernetes", "host")}
|
||||
pod_name ${record.dig("kubernetes", "pod_name")}
|
||||
pod_ip ${record.dig("kubernetes", "pod_ip")}
|
||||
</record>
|
||||
</filter>
|
||||
<match {**prd-ringmaster**}>
|
||||
@type elasticsearch
|
||||
host eck-observability-prd-es-hot-warm.eck-observability-prd.svc.clusterset.local
|
||||
port 9200
|
||||
scheme http
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gcp-prd
|
||||
password "#{ENV['ECK_ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
</label>
|
||||
|
||||
<label @NOCONCATDISPATCH>
|
||||
<filter sys-log >
|
||||
@type record_transformer
|
||||
enable_ruby true
|
||||
auto_typecast true
|
||||
renew_record true
|
||||
renew_time_key ${record.dig("SYSLOG_TIMESTAMP")}
|
||||
<record>
|
||||
cluster_name "central-prd"
|
||||
application_name "systemd"
|
||||
node_name ${record.dig("_HOSTNAME")}
|
||||
text ${record.to_json}
|
||||
</record>
|
||||
</filter>
|
||||
<filter {kube**,**coredns**,**external-secrets**,**keda**,**gke-mcs**,**victoriametrics**} >
|
||||
@type record_transformer
|
||||
enable_ruby true
|
||||
auto_typecast true
|
||||
renew_record true
|
||||
<record>
|
||||
application_name ${record.dig("kubernetes", "namespace_name")}
|
||||
service_name ${record.dig("kubernetes", "container_name")}
|
||||
host ${record.dig("kubernetes", "host")}
|
||||
pod_name ${record.dig("kubernetes", "pod_name")}
|
||||
pod_ip ${record.dig("kubernetes", "pod_ip")}
|
||||
text ${record.dig("log")}
|
||||
</record>
|
||||
</filter>
|
||||
<match {**kube-events**,**kube-system**,**external-secrets**,**keda**,sys-log,**victoriametrics**}>
|
||||
@type elasticsearch
|
||||
host eck-observability-prd-es-hot-warm.eck-observability-prd.svc.clusterset.local
|
||||
port 9200
|
||||
scheme http
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gcp-kubeevents
|
||||
password "#{ENV['ECK_ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
<match {**gke-mcs**}>
|
||||
@type elasticsearch
|
||||
host eck-observability-prd-es-hot-warm.eck-observability-prd.svc.clusterset.local
|
||||
port 9200
|
||||
scheme http
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gke-mcs
|
||||
password "#{ENV['ECK_ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
<match **>
|
||||
@type elasticsearch
|
||||
host eck-observability-prd-es-hot-warm.eck-observability-prd.svc.clusterset.local
|
||||
port 9200
|
||||
scheme http
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gcp-prd
|
||||
password "#{ENV['ECK_ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
</label>
|
||||
|
||||
<label @PREPROD>
|
||||
<filter {**int**}>
|
||||
@type grep
|
||||
<regexp>
|
||||
key log
|
||||
pattern /INFO|ERROR|WARN|info|error|warn/
|
||||
</regexp>
|
||||
</filter>
|
||||
<filter {**int**}>
|
||||
@type parser
|
||||
key_name log
|
||||
reserve_time true
|
||||
reserve_data true
|
||||
<parse>
|
||||
@type multi_format
|
||||
<pattern>
|
||||
format regexp
|
||||
expression /(?<timestamp>\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d{3}) - \[(?<log_level>[A-Z\s]{1,6})\] - \[(?<logger>[^\]]+):(?<method>[^\]:]+)?:(?<line_number>\d+)?\] - \[(?<pid>\d+)?, (?<thread>[^\]]+)?\] - \((?<x3_trace_id>[^,]*)?,(?<x3_span_id>[^)]*)?\)\|\((?<trace_id>[^,]*)?,(?<span_id>[^)]*)?\) - \[(?<user_id>[^\]]*)?\] - \((?<extras>[^)]*)?\) - (?<log>[^\n]*)\n?(?<throwable>[^|]*)$/
|
||||
</pattern>
|
||||
<pattern>
|
||||
format json
|
||||
time_key timestamp
|
||||
keep_time_key true
|
||||
</pattern>
|
||||
<pattern>
|
||||
format /^(?<log>.*)$/
|
||||
</pattern>
|
||||
</parse>
|
||||
</filter>
|
||||
<filter {**int**}>
|
||||
@type record_transformer
|
||||
enable_ruby true
|
||||
auto_typecast true
|
||||
renew_record true
|
||||
<record>
|
||||
log_level ${record.dig("log_level") || record.dig("level") || record.dig("severity")}
|
||||
logger ${record.dig("logger") || record.dig("logger_name") || record.dig("loggerName")}
|
||||
method ${record.dig("method")}
|
||||
line_number ${record.dig("line_number") || record.dig("lineNumber")}
|
||||
pid ${record.dig("pid")}
|
||||
thread ${record.dig("thread") || record.dig("thread_name") || record.dig("threadName")}
|
||||
x3_trace_id ${record.dig("x3_trace_id") || record.dig("x3TraceId")}
|
||||
x3_span_id ${record.dig("x3_span_id") || record.dig("x3SpanId")}
|
||||
trace_id ${record.dig("trace_id") || record.dig("traceId")}
|
||||
span_id ${record.dig("span_id") || record.dig("spanId")}
|
||||
user_id ${record.dig("user_id") || record.dig("userId")}
|
||||
extras ${record.dig("extras")}
|
||||
message ${record.dig("message") || record.dig("msg") || record.dig("log")}
|
||||
throwable ${record.dig("throwable") || record.dig("stack_trace") || record.dig("stackTrace") || record.dig("exception")}
|
||||
application_name ${record.dig("kubernetes", "namespace_name")}
|
||||
service_name ${record.dig("kubernetes", "container_name")}
|
||||
host ${record.dig("kubernetes", "host")}
|
||||
pod_name ${record.dig("kubernetes", "pod_name")}
|
||||
pod_ip ${record.dig("kubernetes", "pod_ip")}
|
||||
</record>
|
||||
</filter>
|
||||
<match {**int**}>
|
||||
@type elasticsearch
|
||||
host eck-observability-prd-es-hot-warm.eck-observability-prd.svc.clusterset.local
|
||||
port 9200
|
||||
scheme http
|
||||
compression_level best_speed
|
||||
ssl_verify false
|
||||
emit_error_for_missing_id true
|
||||
id_key request_id
|
||||
user elastic
|
||||
index_name gcp-int
|
||||
password "#{ENV['ECK_ES_PASSWORD']}"
|
||||
reload_on_failure true
|
||||
reconnect_on_error true
|
||||
include_timestamp true
|
||||
request_timeout 60s
|
||||
</match>
|
||||
</label>
|
||||
|
||||
04_outputs.conf: |-
|
||||
@@ -1,42 +0,0 @@
|
||||
keda:
|
||||
operator:
|
||||
replicaCount: 2
|
||||
metricsServer:
|
||||
replicaCount: 2
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "central-devops"
|
||||
effect: "NoSchedule"
|
||||
podLabels:
|
||||
bu: "central"
|
||||
team: "central-devops"
|
||||
metricsAdapter:
|
||||
bu: "central"
|
||||
team: "central-devops"
|
||||
resources:
|
||||
# -- Manage [resource request & limits] of KEDA operator pod
|
||||
operator:
|
||||
limits:
|
||||
cpu: 1
|
||||
memory: 1000Mi
|
||||
requests:
|
||||
cpu: 200m
|
||||
memory: 200Mi
|
||||
metricServer:
|
||||
limits:
|
||||
cpu: 1
|
||||
memory: 1000Mi
|
||||
requests:
|
||||
cpu: 200m
|
||||
memory: 200Mi
|
||||
# -- Manage [resource request & limits] of KEDA admission webhooks pod
|
||||
webhooks:
|
||||
limits:
|
||||
cpu: 50m
|
||||
memory: 150Mi
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 80Mi
|
||||
@@ -1,2 +0,0 @@
|
||||
stubDomains: >-
|
||||
{"clusterset.local":["169.254.169.254"],"prd.meesho.int.svc.cluster.local":["10.1.80.2"],"prd.mrouter.int.svc.cluster.local":["10.1.80.2"],"mq-server.meeshoint.in.svc.cluster.local":["10.1.80.2"]}
|
||||
@@ -1,149 +0,0 @@
|
||||
|
||||
fullnameOverride: kube-events-central-prd
|
||||
|
||||
operator:
|
||||
enabled: true
|
||||
image:
|
||||
repository: kubesphere/kube-events-operator
|
||||
tag: "" # If unset use v+ .Chart.appVersion
|
||||
pullPolicy: IfNotPresent
|
||||
configReloader:
|
||||
image: jimmidyson/configmap-reload:v0.7.1
|
||||
affinity: {}
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
value: central-devops
|
||||
operator: Equal
|
||||
resources:
|
||||
limits:
|
||||
cpu: 200m
|
||||
memory: 200Mi
|
||||
requests:
|
||||
cpu: 20m
|
||||
memory: 20Mi
|
||||
# Additional volumes on the Deployment definition.
|
||||
volumes: []
|
||||
# Additional volumeMounts on the Deployment definition.
|
||||
volumeMounts: []
|
||||
serviceAccount:
|
||||
create: true
|
||||
name: ""
|
||||
# If true, just clean up cr but not crd
|
||||
cleanupAllCustomResources: false
|
||||
kubectlImage: docker.io/bitnami/kubectl:1.14.1
|
||||
|
||||
exporter:
|
||||
enabled: true
|
||||
image:
|
||||
repository: kubesphere/kube-events-exporter
|
||||
tag: "" # If unset use v+ .Chart.appVersion
|
||||
pullPolicy: IfNotPresent
|
||||
affinity: {}
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
value: central-devops
|
||||
operator: Equal
|
||||
resources:
|
||||
limits:
|
||||
cpu: 200m
|
||||
memory: 500Mi
|
||||
requests:
|
||||
cpu: 20m
|
||||
memory: 50Mi
|
||||
# Additional volumes on the output Deployment definition.
|
||||
volumes: []
|
||||
# Additional volumeMounts on the output Deployment definition.
|
||||
volumeMounts: []
|
||||
sinks:
|
||||
stdout:
|
||||
enabled: true
|
||||
additionalWebhooks: []
|
||||
# - url:
|
||||
# service:
|
||||
# namespace:
|
||||
# name:
|
||||
# port:
|
||||
# path:
|
||||
|
||||
# Configure fluentbit(operated by https://github.com/fluent/fluent-operator) to collect events logs of exporter.
|
||||
# These will be applied only when exporter.stdout.enabled=true and fluentbit.enabled=true.
|
||||
fluentbit:
|
||||
enabled: false
|
||||
# Set this to containerd or crio if you want fluentbit to collect CRI format logs.
|
||||
# If not set, it will be auto detected.
|
||||
containerRuntime: ""
|
||||
input:
|
||||
enabled: true
|
||||
tail:
|
||||
refreshIntervalSeconds: 10
|
||||
memBufLimit: 5MB
|
||||
skipLongLines: true
|
||||
dbSync: Normal
|
||||
filter:
|
||||
enabled: true
|
||||
additionalFilters: []
|
||||
output:
|
||||
enabled: true
|
||||
opensearch:
|
||||
host: opensearch-cluster-data.kubesphere-logging-system.svc
|
||||
port: 9200
|
||||
logstashPrefix: ks-whizard-events
|
||||
suppressTypeName: true
|
||||
logstashFormat: true
|
||||
generateID: true
|
||||
|
||||
ruler:
|
||||
enabled: false
|
||||
replicas: 2
|
||||
image:
|
||||
repository: kubesphere/kube-events-ruler
|
||||
tag: "" # If unset use v+ .Chart.appVersion
|
||||
pullPolicy: IfNotPresent
|
||||
affinity: {}
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: cloud.google.com/compute-class
|
||||
value: central-devops
|
||||
operator: Equal
|
||||
resources:
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 500Mi
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 50Mi
|
||||
# Additional volumes on the output Deployment definition.
|
||||
volumes: []
|
||||
# Additional volumeMounts on the output Deployment definition.
|
||||
volumeMounts: []
|
||||
ruleNamespaceSelector: {}
|
||||
ruleSelector: {}
|
||||
sinks:
|
||||
alertmanagers:
|
||||
- namespace: kubesphere-monitoring-system
|
||||
name: alertmanager-operated
|
||||
# webhooks:
|
||||
# - type:
|
||||
# url:
|
||||
# service:
|
||||
# namespace:
|
||||
# name:
|
||||
# port:
|
||||
# path:
|
||||
## 'stdout' sink type can be either 'notification' or 'alert'
|
||||
# stdout:
|
||||
# type: notification
|
||||
rule:
|
||||
createDefaults: true
|
||||
overrideDefaults: false
|
||||
|
||||
# Set timezone env variable to be set in containers
|
||||
timezone: "Asia/Kolkata"
|
||||
@@ -1,478 +0,0 @@
|
||||
# Default values for kube-state-metrics.
|
||||
prometheusScrape: true
|
||||
image:
|
||||
registry: asia-southeast1-docker.pkg.dev
|
||||
repository: meesho-devops-admin-0622/admin/sre/kube-state-metrics
|
||||
# If unset use v + .Charts.appVersion
|
||||
tag: v2.9.2
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
fullnameOverride: kube-state-metrics-central-a-prd
|
||||
|
||||
dedicatedValue: false
|
||||
|
||||
imagePullSecrets: []
|
||||
# - name: "image-pull-secret"
|
||||
|
||||
ingress:
|
||||
enabled: false
|
||||
ingressClassName: internal
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
||||
# kubernetes.io/ingress.class: nginx
|
||||
# kubernetes.io/tls-acme: 'true'
|
||||
|
||||
extraLabels: {}
|
||||
hosts:
|
||||
- name: clustermetrics-central-prd.meesho.com
|
||||
path: /
|
||||
port: http
|
||||
tls: []
|
||||
# - secretName: vmagent-ingress-tls
|
||||
# hosts:
|
||||
# - vmagent.local
|
||||
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||
# ingressClassName: nginx
|
||||
# -- pathType is only for k8s >= 1.1=
|
||||
pathType: Prefix
|
||||
|
||||
global:
|
||||
# To help compatibility with other charts which use global.imagePullSecrets.
|
||||
# Allow either an array of {name: pullSecret} maps (k8s-style), or an array of strings (more common helm-style).
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - name: pullSecret1
|
||||
# - name: pullSecret2
|
||||
# or
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - pullSecret1
|
||||
# - pullSecret2
|
||||
imagePullSecrets: []
|
||||
#
|
||||
# Allow parent charts to override registry hostname
|
||||
imageRegistry: ""
|
||||
|
||||
# If set to true, this will deploy kube-state-metrics as a StatefulSet and the data
|
||||
# will be automatically sharded across <.Values.replicas> pods using the built-in
|
||||
# autodiscovery feature: https://github.com/kubernetes/kube-state-metrics#automated-sharding
|
||||
# This is an experimental feature and there are no stability guarantees.
|
||||
autosharding:
|
||||
enabled: false
|
||||
|
||||
replicas: 2
|
||||
|
||||
# List of additional cli arguments to configure kube-state-metrics
|
||||
# for example: --enable-gzip-encoding, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/kubernetes/kube-state-metrics/blob/master/docs/cli-arguments.md
|
||||
extraArgs: []
|
||||
|
||||
service:
|
||||
port: 8080
|
||||
# Default to clusterIP for backward compatibility
|
||||
type: ClusterIP
|
||||
nodePort: 0
|
||||
loadBalancerIP: ""
|
||||
# Only allow access to the loadBalancerIP from these IPs
|
||||
loadBalancerSourceRanges: []
|
||||
clusterIP: ""
|
||||
annotations: {}
|
||||
|
||||
## Additional labels to add to all resources
|
||||
customLabels:
|
||||
bu: "central"
|
||||
team: "central-sre"
|
||||
service: "kube-state-metrics-central-a-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "exporter"
|
||||
|
||||
# app: kube-state-metrics
|
||||
|
||||
## Override selector labels
|
||||
selectorOverride: {}
|
||||
|
||||
## set to true to add the release label so scraping of the servicemonitor with kube-prometheus-stack works out of the box
|
||||
releaseLabel: false
|
||||
|
||||
hostNetwork: false
|
||||
|
||||
rbac:
|
||||
# If true, create & use RBAC resources
|
||||
create: true
|
||||
|
||||
# Set to a rolename to use existing role - skipping role creating - but still doing serviceaccount and rolebinding to it, rolename set here.
|
||||
# useExistingRole: your-existing-role
|
||||
|
||||
# If set to false - Run without Cluteradmin privs needed - ONLY works if namespace is also set (if useExistingRole is set this name is used as ClusterRole or Role to bind to)
|
||||
useClusterRole: true
|
||||
|
||||
# Add permissions for CustomResources' apiGroups in Role/ClusterRole. Should be used in conjunction with Custom Resource State Metrics configuration
|
||||
# Example:
|
||||
# - apiGroups: ["monitoring.coreos.com"]
|
||||
# resources: ["prometheuses"]
|
||||
# verbs: ["list", "watch"]
|
||||
extraRules: []
|
||||
|
||||
# Configure kube-rbac-proxy. When enabled, creates one kube-rbac-proxy container per exposed HTTP endpoint (metrics and telemetry if enabled).
|
||||
# The requests are served through the same service but requests are then HTTPS.
|
||||
kubeRBACProxy:
|
||||
enabled: false
|
||||
image:
|
||||
registry: quay.io
|
||||
repository: brancz/kube-rbac-proxy
|
||||
tag: v0.14.0
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# List of additional cli arguments to configure kube-rbac-prxy
|
||||
# for example: --tls-cipher-suites, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/brancz/kube-rbac-proxy#usage
|
||||
extraArgs: []
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext: {}
|
||||
|
||||
resources: {}
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
# requests:
|
||||
# cpu: 10m
|
||||
# memory: 32Mi
|
||||
|
||||
## volumeMounts enables mounting custom volumes in rbac-proxy containers
|
||||
## Useful for TLS certificates and keys
|
||||
volumeMounts: []
|
||||
# - mountPath: /etc/tls
|
||||
# name: kube-rbac-proxy-tls
|
||||
# readOnly: true
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a ServiceAccount should be created, require rbac true
|
||||
create: true
|
||||
# The name of the ServiceAccount to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name:
|
||||
# Reference to one or more secrets to be used when pulling images
|
||||
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
||||
imagePullSecrets: []
|
||||
# ServiceAccount annotations.
|
||||
# Use case: AWS EKS IAM roles for service accounts
|
||||
# ref: https://docs.aws.amazon.com/eks/latest/userguide/specify-service-account-role.html
|
||||
annotations: {}
|
||||
|
||||
prometheus:
|
||||
monitor:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
additionalLabels: {}
|
||||
namespace: ""
|
||||
jobLabel: ""
|
||||
targetLabels: []
|
||||
podTargetLabels: []
|
||||
interval: ""
|
||||
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
|
||||
##
|
||||
sampleLimit: 0
|
||||
|
||||
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
|
||||
##
|
||||
targetLimit: 0
|
||||
|
||||
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelNameLengthLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelValueLengthLimit: 0
|
||||
scrapeTimeout: ""
|
||||
proxyUrl: ""
|
||||
selectorOverride: {}
|
||||
honorLabels: false
|
||||
metricRelabelings: []
|
||||
relabelings: []
|
||||
scheme: ""
|
||||
## File to read bearer token for scraping targets
|
||||
bearerTokenFile: ""
|
||||
## Secret to mount to read bearer token for scraping targets. The secret needs
|
||||
## to be in the same namespace as the service monitor and accessible by the
|
||||
## Prometheus Operator
|
||||
bearerTokenSecret: {}
|
||||
# name: secret-name
|
||||
# key: key-name
|
||||
tlsConfig: {}
|
||||
|
||||
## Specify if a Pod Security Policy for kube-state-metrics must be created
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
|
||||
##
|
||||
podSecurityPolicy:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
## Specify pod annotations
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#apparmor
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#seccomp
|
||||
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#sysctl
|
||||
##
|
||||
# seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
|
||||
# seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
|
||||
# apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
|
||||
|
||||
additionalVolumes: []
|
||||
|
||||
## Configure network policy for kube-state-metrics
|
||||
networkPolicy:
|
||||
enabled: false
|
||||
# networkPolicy.flavor -- Flavor of the network policy to use.
|
||||
# Can be:
|
||||
# * kubernetes for networking.k8s.io/v1/NetworkPolicy
|
||||
# * cilium for cilium.io/v2/CiliumNetworkPolicy
|
||||
flavor: kubernetes
|
||||
|
||||
## Configure the cilium network policy kube-apiserver selector
|
||||
# cilium:
|
||||
# kubeApiServerSelector:
|
||||
# - toEntities:
|
||||
# - kube-apiserver
|
||||
|
||||
# egress:
|
||||
# - {}
|
||||
# ingress:
|
||||
# - {}
|
||||
# podSelector:
|
||||
# matchLabels:
|
||||
# app.kubernetes.io/name: kube-state-metrics
|
||||
|
||||
securityContext:
|
||||
enabled: true
|
||||
runAsGroup: 65534
|
||||
runAsUser: 65534
|
||||
fsGroup: 65534
|
||||
runAsNonRoot: true
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
|
||||
## Node labels for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: "vmselect-mds"
|
||||
|
||||
## Affinity settings for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
|
||||
affinity: {}
|
||||
|
||||
## Tolerations for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "vmselect-mds"
|
||||
effect: "NoSchedule"
|
||||
|
||||
## Topology spread constraints for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
|
||||
topologySpreadConstraints:
|
||||
- maxSkew: 1
|
||||
topologyKey: topology.kubernetes.io/zone
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: exporter
|
||||
- maxSkew: 1
|
||||
topologyKey: kubernetes.io/hostname
|
||||
whenUnsatisfiable: DoNotSchedule
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
type: exporter
|
||||
|
||||
# Annotations to be added to the deployment/statefulset
|
||||
annotations:
|
||||
kubernetes.io/psp: eks.privileged
|
||||
|
||||
# Annotations to be added to the pod
|
||||
podAnnotations: {}
|
||||
|
||||
## Assign a PriorityClassName to pods if set
|
||||
# priorityClassName: ""
|
||||
|
||||
# Ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
|
||||
podDisruptionBudget: {}
|
||||
|
||||
# Comma-separated list of metrics to be exposed.
|
||||
# This list comprises of exact metric names and/or regex patterns.
|
||||
# The allowlist and denylist are mutually exclusive.
|
||||
metricAllowlist: []
|
||||
|
||||
# Comma-separated list of metrics not to be enabled.
|
||||
# This list comprises of exact metric names and/or regex patterns.
|
||||
# The allowlist and denylist are mutually exclusive.
|
||||
metricDenylist: []
|
||||
|
||||
# Comma-separated list of additional Kubernetes label keys that will be used in the resource's
|
||||
# labels metric. By default the metric contains only name and namespace labels.
|
||||
# To include additional labels, provide a list of resource names in their plural form and Kubernetes
|
||||
# label keys you would like to allow for them (Example: '=namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...)'.
|
||||
# A single '*' can be provided per resource instead to allow any labels, but that has
|
||||
# severe performance implications (Example: '=pods=[*]').
|
||||
metricLabelsAllowlist:
|
||||
- pods=[*]
|
||||
- nodes=[*]
|
||||
- deployments=[*]
|
||||
- statefulsets=[*]
|
||||
- persistentvolumeclaims=[*]
|
||||
- persistentvolumes=[*]
|
||||
- ingresses=[*]
|
||||
- namespaces=[*]
|
||||
- horizontalpodautoscalers=[*]
|
||||
# - namespaces=[k8s-label-1,k8s-label-n]
|
||||
|
||||
# Comma-separated list of Kubernetes annotations keys that will be used in the resource'
|
||||
# labels metric. By default the metric contains only name and namespace labels.
|
||||
# To include additional annotations provide a list of resource names in their plural form and Kubernetes
|
||||
# annotation keys you would like to allow for them (Example: '=namespaces=[kubernetes.io/team,...],pods=[kubernetes.io/team],...)'.
|
||||
# A single '*' can be provided per resource instead to allow any annotations, but that has
|
||||
# severe performance implications (Example: '=pods=[*]').
|
||||
metricAnnotationsAllowList: []
|
||||
# - pods=[k8s-annotation-1,k8s-annotation-n]
|
||||
|
||||
# Available collectors for kube-state-metrics.
|
||||
# By default, all available resources are enabled, comment out to disable.
|
||||
collectors:
|
||||
- certificatesigningrequests
|
||||
- configmaps
|
||||
- cronjobs
|
||||
- daemonsets
|
||||
- deployments
|
||||
- endpoints
|
||||
- horizontalpodautoscalers
|
||||
- ingresses
|
||||
- jobs
|
||||
- leases
|
||||
- limitranges
|
||||
- mutatingwebhookconfigurations
|
||||
- namespaces
|
||||
- networkpolicies
|
||||
- nodes
|
||||
- persistentvolumeclaims
|
||||
- persistentvolumes
|
||||
- poddisruptionbudgets
|
||||
- pods
|
||||
- replicasets
|
||||
- replicationcontrollers
|
||||
- resourcequotas
|
||||
- secrets
|
||||
- services
|
||||
- statefulsets
|
||||
- storageclasses
|
||||
- validatingwebhookconfigurations
|
||||
- volumeattachments
|
||||
|
||||
# Enabling kubeconfig will pass the --kubeconfig argument to the container
|
||||
kubeconfig:
|
||||
enabled: false
|
||||
# base64 encoded kube-config file
|
||||
secret:
|
||||
|
||||
# Enabling support for customResourceState, will create a configMap including your config that will be read from kube-state-metrics
|
||||
customResourceState:
|
||||
enabled: false
|
||||
# Add (Cluster)Role permissions to list/watch the customResources defined in the config to rbac.extraRules
|
||||
config: {}
|
||||
|
||||
# Enable only the release namespace for collecting resources. By default all namespaces are collected.
|
||||
# If releaseNamespace and namespaces are both set a merged list will be collected.
|
||||
releaseNamespace: false
|
||||
|
||||
# Comma-separated list(string) or yaml list of namespaces to be enabled for collecting resources. By default all namespaces are collected.
|
||||
namespaces: ""
|
||||
|
||||
# Comma-separated list of namespaces not to be enabled. If namespaces and namespaces-denylist are both set,
|
||||
# only namespaces that are excluded in namespaces-denylist will be used.
|
||||
namespacesDenylist: ""
|
||||
|
||||
## Override the deployment namespace
|
||||
##
|
||||
namespaceOverride: ""
|
||||
|
||||
resources:
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
requests:
|
||||
cpu: 500m
|
||||
memory: 1.5Gi
|
||||
|
||||
## Provide a k8s version to define apiGroups for podSecurityPolicy Cluster Role.
|
||||
## For example: kubeTargetVersionOverride: 1.14.9
|
||||
##
|
||||
kubeTargetVersionOverride: ""
|
||||
|
||||
# Enable self metrics configuration for service and Service Monitor
|
||||
# Default values for telemetry configuration can be overridden
|
||||
# If you set telemetryNodePort, you must also set service.type to NodePort
|
||||
selfMonitor:
|
||||
enabled: true
|
||||
# telemetryHost: 0.0.0.0
|
||||
telemetryPort: 8081
|
||||
# telemetryNodePort: 0
|
||||
|
||||
# Enable vertical pod autoscaler support for kube-state-metrics
|
||||
verticalPodAutoscaler:
|
||||
enabled: false
|
||||
# List of resources that the vertical pod autoscaler can control. Defaults to cpu and memory
|
||||
controlledResources: []
|
||||
|
||||
# Define the max allowed resources for the pod
|
||||
maxAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
# Define the min allowed resources for the pod
|
||||
minAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
|
||||
# updatePolicy:
|
||||
# Specifies whether recommended updates are applied when a Pod is started and whether recommended updates
|
||||
# are applied during the life of a Pod. Possible values are "Off", "Initial", "Recreate", and "Auto".
|
||||
# updateMode: Auto
|
||||
|
||||
# volumeMounts are used to add custom volume mounts to deployment.
|
||||
# See example below
|
||||
volumeMounts: []
|
||||
# - mountPath: /etc/config
|
||||
# name: config-volume
|
||||
|
||||
# volumes are used to add custom volumes to deployment
|
||||
# See example below
|
||||
volumes: []
|
||||
# - configMap:
|
||||
# name: cm-for-volume
|
||||
# name: config-volume
|
||||
@@ -1,144 +0,0 @@
|
||||
fullnameOverride: "kubectl-mcp-server"
|
||||
|
||||
replicas: 1
|
||||
|
||||
image:
|
||||
# In-house hardened build (helm-templates/kubectl-mcp-server/docker/) —
|
||||
# NOT the upstream Docker Hub image. 266→18 HIGH/CRIT vulns, non-root,
|
||||
# multi-stage slim base, kubectl v1.33.12 / helm v3.21.0.
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/prd/devop/kubectl-mcp-server
|
||||
tag: "v2"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
labels:
|
||||
bu: infra
|
||||
team: devops
|
||||
service: kubectl-mcp-server
|
||||
env: prd
|
||||
|
||||
serviceAccount:
|
||||
create: true
|
||||
annotations: {}
|
||||
|
||||
rbac:
|
||||
create: true
|
||||
|
||||
podAnnotations: {}
|
||||
|
||||
podSecurityContext: {}
|
||||
|
||||
securityContext:
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
|
||||
priorityClassName: ""
|
||||
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: "central-devops"
|
||||
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "central-devops"
|
||||
effect: NoSchedule
|
||||
|
||||
affinity: {}
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 512Mi
|
||||
limits:
|
||||
cpu: 1000m
|
||||
memory: 1Gi
|
||||
|
||||
mcp:
|
||||
mode: multi
|
||||
transport: http
|
||||
host: "0.0.0.0"
|
||||
port: 8000
|
||||
|
||||
auth:
|
||||
allowAnonymous: false
|
||||
|
||||
externalSecrets:
|
||||
enabled: true
|
||||
refreshInterval: "150s"
|
||||
secretStoreRef:
|
||||
name: vault-backend
|
||||
kind: ClusterSecretStore
|
||||
dataFrom:
|
||||
secretKey: "meesho/prd/cntr/devop/kubectl-mcp-server"
|
||||
|
||||
federation:
|
||||
forwardTimeout: 30
|
||||
clusters:
|
||||
- name: self
|
||||
self: true
|
||||
- name: admin
|
||||
endpoint: http://kubectl-mcp-server-admin.prd.meesho.int/mcp
|
||||
tokenEnv: ADMIN_MCP_TOKEN
|
||||
- name: dataengg
|
||||
endpoint: http://kubectl-mcp-server-dataengg.prd.meesho.int/mcp
|
||||
tokenEnv: DATAENGG_MCP_TOKEN
|
||||
- name: datascience
|
||||
endpoint: http://kubectl-mcp-server-datascience.prd.meesho.int/mcp
|
||||
tokenEnv: DATASCIENCE_MCP_TOKEN
|
||||
- name: demand
|
||||
endpoint: http://kubectl-mcp-server-demand.prd.meesho.int/mcp
|
||||
tokenEnv: DEMAND_MCP_TOKEN
|
||||
- name: dsgpu
|
||||
endpoint: http://kubectl-mcp-server-dsgpu.prd.meesho.int/mcp
|
||||
tokenEnv: DSGPU_MCP_TOKEN
|
||||
- name: farmiso
|
||||
endpoint: http://kubectl-mcp-server-farmiso.prd.meesho.int/mcp
|
||||
tokenEnv: FARMISO_MCP_TOKEN
|
||||
- name: supply
|
||||
endpoint: http://kubectl-mcp-server-supply.prd.meesho.int/mcp
|
||||
tokenEnv: SUPPLY_MCP_TOKEN
|
||||
|
||||
# tcpSocket on purpose — streamable-http transport exposes only /mcp,
|
||||
# there is no /health route (see chart values.yaml note).
|
||||
livenessProbe:
|
||||
tcpSocket:
|
||||
port: 8000
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
|
||||
readinessProbe:
|
||||
tcpSocket:
|
||||
port: 8000
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
|
||||
service:
|
||||
port: 8000
|
||||
type: ClusterIP
|
||||
|
||||
# Contour standard (2.0.0-style): renders HTTPProxy parent/child + -intra
|
||||
# instead of a networking.k8s.io Ingress.
|
||||
createContourGateway: true
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
ingressClassName: contour-internal-1
|
||||
servicePortNumber: 8000
|
||||
hosts:
|
||||
- host: kubectl-mcp-server-central.prd.meesho.int
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
annotations: {}
|
||||
slowStart:
|
||||
enabled: false
|
||||
window: "120s"
|
||||
aggression: 1
|
||||
minPercent: 10
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1,40 +0,0 @@
|
||||
apiVersion: kyverno.io/v1
|
||||
kind: ClusterPolicy
|
||||
metadata:
|
||||
name: protect-critical-namespaces
|
||||
spec:
|
||||
validationFailureAction: Enforce
|
||||
background: false
|
||||
rules:
|
||||
- name: deny-deletion-of-critical-namespaces
|
||||
match:
|
||||
any:
|
||||
- resources:
|
||||
kinds:
|
||||
- Namespace
|
||||
names:
|
||||
- keda-central-prd
|
||||
- contour-internal-0-central-prd
|
||||
- contour-internal-0-central-prd-intra
|
||||
- contour-external-central-prd
|
||||
- external-secrets-central-prd
|
||||
- flagger-central-prd
|
||||
- victoriametrics
|
||||
- kube-system
|
||||
- monitoring
|
||||
- telegraf-operator
|
||||
- loadtester
|
||||
- opentelemetry
|
||||
- fluentd
|
||||
- kube-events
|
||||
- observability
|
||||
- contour-cert-checker-ns
|
||||
- aurva-dataplane
|
||||
validate:
|
||||
message: "Deletion of critical namespaces is not allowed."
|
||||
deny:
|
||||
conditions:
|
||||
any:
|
||||
- key: "{{request.operation}}"
|
||||
operator: Equals
|
||||
value: DELETE
|
||||
@@ -1,29 +0,0 @@
|
||||
apiVersion: kyverno.io/v1
|
||||
kind: ClusterPolicy
|
||||
metadata:
|
||||
name: restrict-minimum-replicas-selected-ns
|
||||
spec:
|
||||
validationFailureAction: Enforce
|
||||
background: false
|
||||
rules:
|
||||
- name: min-replicas-deployments-statefulsets
|
||||
match:
|
||||
resources:
|
||||
kinds:
|
||||
- Deployment
|
||||
- StatefulSet
|
||||
- Deployment/scale
|
||||
- StatefulSet/scale
|
||||
names:
|
||||
- coredns
|
||||
namespaces:
|
||||
- kube-system
|
||||
operations:
|
||||
- CREATE
|
||||
- UPDATE
|
||||
validate:
|
||||
message: "Deployments and StatefulSets must have at least 5 replicas in this namespace."
|
||||
anyPattern:
|
||||
# Case 1: replicas explicitly set and >= 5
|
||||
- spec:
|
||||
replicas: ">=5"
|
||||
@@ -1,116 +0,0 @@
|
||||
replicaCount: 1
|
||||
|
||||
Namespace: loadtester
|
||||
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/dev/devops/flagger-loadtester
|
||||
tag: 0.30.0
|
||||
pullPolicy: IfNotPresent
|
||||
pullSecret:
|
||||
|
||||
podLabels:
|
||||
bu: central
|
||||
team: central-shared
|
||||
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "8080"
|
||||
|
||||
podPriorityClassName: ""
|
||||
|
||||
logLevel: info
|
||||
cmd:
|
||||
timeout: 1h
|
||||
namespaceRegexp: ""
|
||||
|
||||
nameOverride: "loadtester"
|
||||
fullnameOverride: ""
|
||||
|
||||
env: []
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 80
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 64Mi
|
||||
|
||||
volumes: []
|
||||
volumeMounts: []
|
||||
|
||||
nodeSelector:
|
||||
cloud.google.com/compute-class: central-devops
|
||||
|
||||
tolerations:
|
||||
- key: "cloud.google.com/compute-class"
|
||||
operator: "Equal"
|
||||
value: "central-devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
affinity: {}
|
||||
|
||||
ingress:
|
||||
slowStart:
|
||||
enabled: false
|
||||
enabled: true
|
||||
ingressClassName: contour-internal-1
|
||||
servicePort: http
|
||||
hosts:
|
||||
- host: central-flagger-loadtester.prd.meesho.int
|
||||
paths:
|
||||
- pathType: ImplementationSpecific
|
||||
path: /
|
||||
createContourGateway: true
|
||||
contourResponseTimeout: false
|
||||
rbac:
|
||||
# rbac.create: `true` if rbac resources should be created
|
||||
create: true
|
||||
# rbac.scope: `cluster` to create cluster-scope rbac resources (ClusterRole/ClusterRoleBinding)
|
||||
# otherwise, namespace-scope rbac resources will be created (Role/RoleBinding)
|
||||
scope:
|
||||
# rbac.rules: array of rules to apply to the role. example:
|
||||
# rules:
|
||||
# - apiGroups: [""]
|
||||
# resources: ["pods"]
|
||||
# verbs: ["list", "get"]
|
||||
rules: []
|
||||
|
||||
# name of an existing service account to use - if not creating rbac resources
|
||||
serviceAccountName: ""
|
||||
|
||||
# App Mesh virtual node settings (to be used for AppMesh v1beta1)
|
||||
meshName: ""
|
||||
#backends:
|
||||
# - app1.namespace
|
||||
# - app2.namespace
|
||||
|
||||
# App Mesh virtual node settings (to be used for AppMesh v1beta2)
|
||||
appmesh:
|
||||
enabled: false
|
||||
backends:
|
||||
- podinfo
|
||||
- podinfo-canary
|
||||
|
||||
#Istio virtual service and gatway settings. TLS secrets should be in namespace before enbaled it. ( secret format loadtester.fullname )
|
||||
istio:
|
||||
enabled: false
|
||||
host: flagger-loadtester.flagger
|
||||
gateway:
|
||||
enabled: false
|
||||
tls:
|
||||
enabled: false
|
||||
httpsRedirect: false
|
||||
|
||||
# when enabled, it will add a security context for the loadtester pod
|
||||
securityContext:
|
||||
enabled: false
|
||||
context:
|
||||
readOnlyRootFilesystem: true
|
||||
runAsUser: 100
|
||||
runAsGroup: 101
|
||||
|
||||
podDisruptionBudget:
|
||||
enabled: false
|
||||
minAvailable: 1
|
||||
@@ -1,338 +0,0 @@
|
||||
nameOverride: ""
|
||||
fullnameOverride: "opentelemetry-claude-metrics"
|
||||
|
||||
additionalLabels:
|
||||
bu: "central"
|
||||
team: "sre"
|
||||
service: "opentelemetry-claude-metrics"
|
||||
env: "prd"
|
||||
priority: "p1"
|
||||
type: "opentelemetry"
|
||||
arch: "any"
|
||||
runpod: "ondemand"
|
||||
|
||||
externalSecret:
|
||||
enabled: true
|
||||
key: meesho/prd/cntr/xcntr/otel-claude-metrics
|
||||
secretStoreRef:
|
||||
name: vault-backend
|
||||
|
||||
mode: "deployment"
|
||||
|
||||
namespaceOverride: ""
|
||||
|
||||
presets:
|
||||
logsCollection:
|
||||
enabled: false
|
||||
hostMetrics:
|
||||
enabled: false
|
||||
kubernetesAttributes:
|
||||
enabled: false
|
||||
kubeletMetrics:
|
||||
enabled: false
|
||||
kubernetesEvents:
|
||||
enabled: false
|
||||
clusterMetrics:
|
||||
enabled: false
|
||||
|
||||
configMap:
|
||||
create: true
|
||||
|
||||
config:
|
||||
receivers:
|
||||
otlp:
|
||||
protocols:
|
||||
grpc:
|
||||
endpoint: ${env:MY_POD_IP}:4317
|
||||
auth:
|
||||
authenticator: bearertokenauth
|
||||
http:
|
||||
endpoint: ${env:MY_POD_IP}:4318
|
||||
auth:
|
||||
authenticator: bearertokenauth
|
||||
|
||||
processors:
|
||||
batch:
|
||||
send_batch_size: 1024
|
||||
send_batch_max_size: 2048
|
||||
timeout: 10s
|
||||
memory_limiter:
|
||||
check_interval: 1s
|
||||
limit_percentage: 85
|
||||
spike_limit_percentage: 20
|
||||
|
||||
# --- PII redaction for Cowork event bodies (prompt text) --------------
|
||||
# Cowork events carry raw prompt text. This drops it BEFORE the events
|
||||
# reach ClickHouse, while keeping cost/token/tool fields for stats.
|
||||
# error_mode: ignore => a wrong key is a silent no-op (won't crash the
|
||||
# pipeline), which ALSO means: do NOT assume prompts are redacted until
|
||||
# you confirm the real key/location from the debug output.
|
||||
# - If prompt text is a log ATTRIBUTE -> delete_key(attributes, "<key>")
|
||||
# - If it is in the log BODY -> set(body, "") (uncomment below)
|
||||
# Confirm the exact key ("prompt", "prompt.text", …) from step-1 debug logs.
|
||||
transform/redact:
|
||||
error_mode: ignore
|
||||
log_statements:
|
||||
- context: log
|
||||
statements:
|
||||
# - delete_key(attributes, "prompt") # commented: allow prompt text through for observability
|
||||
# - delete_key(attributes, "prompt.text") # commented: allow prompt text through for observability
|
||||
# - set(body, "") where attributes["event.name"] == "user_prompt"
|
||||
|
||||
# Pin the HELP (description) string for claude_code.lines_of_code.count so
|
||||
# a mixed fleet (CLI < 2.1.172 emits the old description; >= 2.1.172 emits
|
||||
# the new one) doesn't trigger the prometheus exporter's "N error(s)
|
||||
# occurred for claude_observability_claude_code_lines_of_code_count_total"
|
||||
# HELP-collision error. If the same pattern shows up on other metrics
|
||||
# (token.usage, cost.usage, ...), add another `where name == "..."` line
|
||||
# here rather than defining a second processor.
|
||||
transform/claude_metrics_help_fix:
|
||||
error_mode: ignore
|
||||
metric_statements:
|
||||
- context: metric
|
||||
statements:
|
||||
- set(description, "Count of lines of code modified, with the 'type' attribute indicating whether lines were added or removed and the 'model' attribute indicating which model made the change") where name == "claude_code.lines_of_code.count"
|
||||
|
||||
exporters:
|
||||
# Claude Code metrics path — unchanged.
|
||||
prometheus:
|
||||
endpoint: "0.0.0.0:8889"
|
||||
namespace: claude_observability
|
||||
resource_to_telemetry_conversion:
|
||||
enabled: true
|
||||
metric_expiration: 5m
|
||||
|
||||
# Cowork events land here as raw OTel logs.
|
||||
# NOTE: verify DSN scheme (tcp:// vs clickhouse://) and the `ttl` field
|
||||
# name against the clickhouseexporter README for image tag 0.111.0 —
|
||||
# both changed across releases and are the most likely mismatch.
|
||||
clickhouse:
|
||||
endpoint: http://claude-observability.prd.meesho.int:8080?dial_timeout=10s&compress=lz4 # ClickHouse HTTP interface (DNS — VM IP is not stable)
|
||||
database: otel
|
||||
username: claude
|
||||
password: ${CLICKHOUSE_PASSWORD} # must be injected via the vault secret (see note)
|
||||
logs_table_name: otel_logs
|
||||
ttl: 720h # 30d retention, enforced by ClickHouse
|
||||
create_schema: true # needs CREATE priv on the writer role; else set false + pre-create table
|
||||
async_insert: true
|
||||
timeout: 10s
|
||||
sending_queue:
|
||||
queue_size: 5000
|
||||
retry_on_failure:
|
||||
enabled: true
|
||||
|
||||
# TEMPORARY: prints full event bodies (incl. prompt text) to stdout.
|
||||
# Keep for first-deploy validation only, then remove from the logs pipeline.
|
||||
debug:
|
||||
verbosity: detailed
|
||||
|
||||
extensions:
|
||||
health_check:
|
||||
path: /health
|
||||
bearertokenauth:
|
||||
token: ${AUTH_TOKEN}
|
||||
|
||||
service:
|
||||
telemetry:
|
||||
metrics:
|
||||
level: normal
|
||||
address: ${env:MY_POD_IP}:8888
|
||||
extensions:
|
||||
- health_check
|
||||
- bearertokenauth
|
||||
pipelines:
|
||||
traces: null
|
||||
# Cowork events arrive as OTLP logs, get redacted, and are stored raw in
|
||||
# ClickHouse. Aggregation happens at query time in SQL — no connectors.
|
||||
# `debug` is validation-only; remove it (and the redact caveat aside)
|
||||
# once you've confirmed events land and the redaction key is correct.
|
||||
logs:
|
||||
receivers:
|
||||
- otlp
|
||||
processors:
|
||||
- memory_limiter
|
||||
- transform/redact
|
||||
- batch
|
||||
exporters:
|
||||
- clickhouse
|
||||
- debug
|
||||
# Existing Claude Code metrics only — Cowork no longer feeds this pipeline.
|
||||
metrics:
|
||||
receivers:
|
||||
- otlp
|
||||
processors:
|
||||
- memory_limiter
|
||||
- transform/claude_metrics_help_fix
|
||||
- batch
|
||||
exporters:
|
||||
- prometheus
|
||||
|
||||
image:
|
||||
repository: otel/opentelemetry-collector-contrib
|
||||
pullPolicy: IfNotPresent
|
||||
tag: "0.111.0"
|
||||
digest: ""
|
||||
|
||||
imagePullSecrets: []
|
||||
|
||||
command:
|
||||
name: otelcol-contrib
|
||||
extraArgs: []
|
||||
|
||||
serviceAccount:
|
||||
create: true
|
||||
annotations: {}
|
||||
name: ""
|
||||
|
||||
clusterRole:
|
||||
create: false
|
||||
annotations: {}
|
||||
name: ""
|
||||
rules: []
|
||||
clusterRoleBinding:
|
||||
annotations: {}
|
||||
name: ""
|
||||
|
||||
podSecurityContext: {}
|
||||
securityContext: {}
|
||||
|
||||
nodeSelector: {}
|
||||
|
||||
tolerations: []
|
||||
|
||||
affinity: {}
|
||||
topologySpreadConstraints: []
|
||||
priorityClassName: ""
|
||||
|
||||
extraEnvs:
|
||||
- name: OTEL_RESOURCE_ATTRIBUTES
|
||||
value: "k8s.node.name=$(K8S_NODE_NAME)"
|
||||
- name: KUBE_NODE_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
apiVersion: v1
|
||||
fieldPath: spec.nodeName
|
||||
|
||||
extraEnvsFrom:
|
||||
- secretRef:
|
||||
name: opentelemetry-claude-metrics-secret
|
||||
extraVolumes: []
|
||||
extraVolumeMounts: []
|
||||
|
||||
ports:
|
||||
otlp:
|
||||
enabled: true
|
||||
containerPort: 4317
|
||||
servicePort: 4317
|
||||
protocol: TCP
|
||||
appProtocol: grpc
|
||||
otlp-http:
|
||||
enabled: true
|
||||
containerPort: 4318
|
||||
servicePort: 4318
|
||||
protocol: TCP
|
||||
prom-exporter:
|
||||
enabled: true
|
||||
containerPort: 8889
|
||||
servicePort: 8889
|
||||
protocol: TCP
|
||||
jaeger-compact:
|
||||
enabled: false
|
||||
jaeger-thrift:
|
||||
enabled: false
|
||||
jaeger-grpc:
|
||||
enabled: false
|
||||
zipkin:
|
||||
enabled: false
|
||||
metrics:
|
||||
enabled: true
|
||||
containerPort: 8888
|
||||
servicePort: 8888
|
||||
protocol: TCP
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 2
|
||||
memory: 2Gi
|
||||
limits:
|
||||
cpu: 2
|
||||
memory: 2Gi
|
||||
|
||||
podAnnotations:
|
||||
otel.io/path: /metrics
|
||||
otel.io/port: "8888"
|
||||
otel.io/scrape: "true"
|
||||
|
||||
podLabels: {}
|
||||
|
||||
hostNetwork: false
|
||||
dnsPolicy: "ClusterFirstWithHostNet"
|
||||
dnsConfig: {}
|
||||
|
||||
replicaCount: 2
|
||||
revisionHistoryLimit: 10
|
||||
|
||||
annotations: {}
|
||||
extraContainers: []
|
||||
initContainers: []
|
||||
lifecycleHooks: {}
|
||||
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
port: 13133
|
||||
path: /health
|
||||
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
port: 13133
|
||||
path: /health
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
annotations:
|
||||
io.cilium/global-service: "true"
|
||||
cloud.google.com/neg: '{"exposed_ports": {"4318":{"name": "otel-cld-ext-cntr-prd-a"}}}'
|
||||
|
||||
ingress:
|
||||
enabled: false
|
||||
|
||||
podMonitor:
|
||||
enabled: false
|
||||
|
||||
serviceMonitor:
|
||||
enabled: false
|
||||
|
||||
podDisruptionBudget:
|
||||
enabled: true
|
||||
maxUnavailable: 1
|
||||
|
||||
autoscaling:
|
||||
enabled: true
|
||||
minReplicas: 2
|
||||
maxReplicas: 10
|
||||
behavior: {}
|
||||
targetCPUUtilizationPercentage: 70
|
||||
targetMemoryUtilizationPercentage: 60
|
||||
|
||||
rollout:
|
||||
rollingUpdate:
|
||||
maxUnavailable: 1
|
||||
strategy: RollingUpdate
|
||||
|
||||
prometheusRule:
|
||||
enabled: false
|
||||
groups: []
|
||||
defaultRules:
|
||||
enabled: false
|
||||
extraLabels: {}
|
||||
|
||||
statefulset:
|
||||
volumeClaimTemplates: []
|
||||
podManagementPolicy: "Parallel"
|
||||
|
||||
networkPolicy:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
allowIngressFrom: []
|
||||
extraIngressRules: []
|
||||
egressRules: []
|
||||
@@ -1,330 +0,0 @@
|
||||
nameOverride: ""
|
||||
fullnameOverride: "opentelemetry-codex-metrics"
|
||||
|
||||
additionalLabels:
|
||||
bu: "central"
|
||||
team: "sre"
|
||||
service: "opentelemetry-codex-metrics"
|
||||
env: "prd"
|
||||
priority: "p1"
|
||||
type: "opentelemetry"
|
||||
arch: "any"
|
||||
runpod: "ondemand"
|
||||
|
||||
externalSecret:
|
||||
enabled: true
|
||||
key: meesho/prd/cntr/xcntr/otel-codex-metrics
|
||||
secretStoreRef:
|
||||
name: vault-backend
|
||||
|
||||
mode: "deployment"
|
||||
|
||||
namespaceOverride: ""
|
||||
|
||||
presets:
|
||||
logsCollection:
|
||||
enabled: false
|
||||
hostMetrics:
|
||||
enabled: false
|
||||
kubernetesAttributes:
|
||||
enabled: false
|
||||
kubeletMetrics:
|
||||
enabled: false
|
||||
kubernetesEvents:
|
||||
enabled: false
|
||||
clusterMetrics:
|
||||
enabled: false
|
||||
|
||||
configMap:
|
||||
create: true
|
||||
|
||||
config:
|
||||
receivers:
|
||||
otlp:
|
||||
protocols:
|
||||
grpc:
|
||||
endpoint: ${env:MY_POD_IP}:4317
|
||||
auth:
|
||||
authenticator: bearertokenauth
|
||||
http:
|
||||
endpoint: ${env:MY_POD_IP}:4318
|
||||
auth:
|
||||
authenticator: bearertokenauth
|
||||
|
||||
processors:
|
||||
batch:
|
||||
send_batch_size: 1024
|
||||
send_batch_max_size: 2048
|
||||
timeout: 10s
|
||||
memory_limiter:
|
||||
check_interval: 1s
|
||||
limit_percentage: 85
|
||||
spike_limit_percentage: 20
|
||||
# codex.tool_result events carry raw shell command arguments and raw
|
||||
# command output, which can contain secrets. Drop them before export.
|
||||
# User prompts are already redacted client-side (log_user_prompt=false).
|
||||
attributes/scrub-sensitive:
|
||||
actions:
|
||||
- key: arguments
|
||||
action: delete
|
||||
- key: output
|
||||
action: delete
|
||||
# Codex uses reasoning_effort on conversation events and
|
||||
# model_reasoning_effort on completed response events. Normalize both so
|
||||
# the derived metric exposes one bounded label.
|
||||
transform/codex-log-attributes:
|
||||
error_mode: ignore
|
||||
log_statements:
|
||||
- context: log
|
||||
statements:
|
||||
- set(attributes["codex.reasoning_effort"], attributes["reasoning_effort"]) where attributes["reasoning_effort"] != nil
|
||||
- set(attributes["codex.reasoning_effort"], attributes["model_reasoning_effort"]) where attributes["codex.reasoning_effort"] == nil and attributes["model_reasoning_effort"] != nil
|
||||
|
||||
connectors:
|
||||
# Convert selected Codex log dimensions into a Prometheus counter.
|
||||
# user.email and user.account_id are included intentionally for per-user
|
||||
# usage attribution (parity with Claude Code telemetry). Do NOT add
|
||||
# conversation ID, prompt, arguments, or output as labels.
|
||||
count/codex_logs:
|
||||
logs:
|
||||
codex.log.events:
|
||||
description: Count of Codex OTLP log events by bounded dimensions
|
||||
conditions:
|
||||
- 'attributes["event.name"] != nil'
|
||||
attributes:
|
||||
- key: event.name
|
||||
default_value: unknown
|
||||
- key: event.kind
|
||||
default_value: unknown
|
||||
- key: user.account_id
|
||||
default_value: unknown
|
||||
- key: user.email
|
||||
default_value: unknown
|
||||
- key: codex.reasoning_effort
|
||||
default_value: unknown
|
||||
- key: model
|
||||
default_value: unknown
|
||||
- key: originator
|
||||
default_value: unknown
|
||||
- key: app.version
|
||||
default_value: unknown
|
||||
|
||||
exporters:
|
||||
prometheus:
|
||||
endpoint: "0.0.0.0:8889"
|
||||
namespace: codex_observability
|
||||
resource_to_telemetry_conversion:
|
||||
enabled: true
|
||||
metric_expiration: 5m
|
||||
# Phase 1 log sink: registers /v1/logs on the OTLP HTTP receiver and
|
||||
# surfaces traffic in collector stdout for validation. A follow-up will
|
||||
# switch this to a persistent store once the backend is finalised.
|
||||
debug/logs:
|
||||
verbosity: basic
|
||||
|
||||
extensions:
|
||||
health_check:
|
||||
path: /health
|
||||
bearertokenauth:
|
||||
token: ${AUTH_TOKEN}
|
||||
|
||||
service:
|
||||
telemetry:
|
||||
metrics:
|
||||
level: normal
|
||||
address: ${env:MY_POD_IP}:8888
|
||||
extensions:
|
||||
- health_check
|
||||
- bearertokenauth
|
||||
pipelines:
|
||||
traces: null
|
||||
logs:
|
||||
receivers:
|
||||
- otlp
|
||||
processors:
|
||||
- memory_limiter
|
||||
- attributes/scrub-sensitive
|
||||
- transform/codex-log-attributes
|
||||
- batch
|
||||
exporters:
|
||||
- debug/logs
|
||||
- count/codex_logs
|
||||
metrics:
|
||||
receivers:
|
||||
- otlp
|
||||
- count/codex_logs
|
||||
processors:
|
||||
- memory_limiter
|
||||
- batch
|
||||
exporters:
|
||||
- prometheus
|
||||
|
||||
image:
|
||||
repository: otel/opentelemetry-collector-contrib
|
||||
pullPolicy: IfNotPresent
|
||||
tag: "0.111.0"
|
||||
digest: ""
|
||||
|
||||
imagePullSecrets: []
|
||||
|
||||
command:
|
||||
name: otelcol-contrib
|
||||
extraArgs: []
|
||||
|
||||
serviceAccount:
|
||||
create: true
|
||||
annotations: {}
|
||||
name: ""
|
||||
|
||||
clusterRole:
|
||||
create: false
|
||||
annotations: {}
|
||||
name: ""
|
||||
rules: []
|
||||
clusterRoleBinding:
|
||||
annotations: {}
|
||||
name: ""
|
||||
|
||||
podSecurityContext: {}
|
||||
securityContext: {}
|
||||
|
||||
nodeSelector: {}
|
||||
|
||||
tolerations: []
|
||||
|
||||
affinity: {}
|
||||
topologySpreadConstraints: []
|
||||
priorityClassName: ""
|
||||
|
||||
extraEnvs:
|
||||
- name: OTEL_RESOURCE_ATTRIBUTES
|
||||
value: "k8s.node.name=$(K8S_NODE_NAME)"
|
||||
- name: KUBE_NODE_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
apiVersion: v1
|
||||
fieldPath: spec.nodeName
|
||||
|
||||
extraEnvsFrom:
|
||||
- secretRef:
|
||||
name: opentelemetry-codex-metrics-secret
|
||||
extraVolumes: []
|
||||
extraVolumeMounts: []
|
||||
|
||||
ports:
|
||||
otlp:
|
||||
enabled: true
|
||||
containerPort: 4317
|
||||
servicePort: 4317
|
||||
protocol: TCP
|
||||
appProtocol: grpc
|
||||
otlp-http:
|
||||
enabled: true
|
||||
containerPort: 4318
|
||||
servicePort: 4318
|
||||
protocol: TCP
|
||||
prom-exporter:
|
||||
enabled: true
|
||||
containerPort: 8889
|
||||
servicePort: 8889
|
||||
protocol: TCP
|
||||
jaeger-compact:
|
||||
enabled: false
|
||||
jaeger-thrift:
|
||||
enabled: false
|
||||
jaeger-grpc:
|
||||
enabled: false
|
||||
zipkin:
|
||||
enabled: false
|
||||
metrics:
|
||||
enabled: true
|
||||
containerPort: 8888
|
||||
servicePort: 8888
|
||||
protocol: TCP
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 2
|
||||
memory: 2Gi
|
||||
limits:
|
||||
cpu: 2
|
||||
memory: 2Gi
|
||||
|
||||
podAnnotations:
|
||||
otel.io/path: /metrics
|
||||
otel.io/port: "8888"
|
||||
otel.io/scrape: "true"
|
||||
|
||||
podLabels: {}
|
||||
|
||||
hostNetwork: false
|
||||
dnsPolicy: "ClusterFirstWithHostNet"
|
||||
dnsConfig: {}
|
||||
|
||||
replicaCount: 2
|
||||
revisionHistoryLimit: 10
|
||||
|
||||
annotations: {}
|
||||
extraContainers: []
|
||||
initContainers: []
|
||||
lifecycleHooks: {}
|
||||
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
port: 13133
|
||||
path: /health
|
||||
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
port: 13133
|
||||
path: /health
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
annotations:
|
||||
io.cilium/global-service: "true"
|
||||
cloud.google.com/neg: '{"exposed_ports": {"4318":{"name": "otel-cdx-ext-cntr-prd-a"}}}'
|
||||
|
||||
ingress:
|
||||
enabled: false
|
||||
|
||||
podMonitor:
|
||||
enabled: false
|
||||
|
||||
serviceMonitor:
|
||||
enabled: false
|
||||
|
||||
podDisruptionBudget:
|
||||
enabled: true
|
||||
maxUnavailable: 1
|
||||
|
||||
autoscaling:
|
||||
enabled: true
|
||||
minReplicas: 2
|
||||
maxReplicas: 10
|
||||
behavior: {}
|
||||
targetCPUUtilizationPercentage: 70
|
||||
targetMemoryUtilizationPercentage: 60
|
||||
|
||||
rollout:
|
||||
rollingUpdate:
|
||||
maxUnavailable: 1
|
||||
strategy: RollingUpdate
|
||||
|
||||
prometheusRule:
|
||||
enabled: false
|
||||
groups: []
|
||||
defaultRules:
|
||||
enabled: false
|
||||
extraLabels: {}
|
||||
|
||||
statefulset:
|
||||
volumeClaimTemplates: []
|
||||
podManagementPolicy: "Parallel"
|
||||
|
||||
networkPolicy:
|
||||
enabled: false
|
||||
annotations: {}
|
||||
allowIngressFrom: []
|
||||
extraIngressRules: []
|
||||
egressRules: []
|
||||
@@ -1,277 +0,0 @@
|
||||
global:
|
||||
domain: "coralogixsg.com"
|
||||
defaultApplicationName: "default"
|
||||
defaultSubsystemName: "nodes"
|
||||
|
||||
# Old endpoint based configuration,
|
||||
# please use domain instead.
|
||||
traces:
|
||||
endpoint: ""
|
||||
metrics:
|
||||
endpoint: ""
|
||||
logs:
|
||||
endpoint: ""
|
||||
|
||||
# set distribution to openshift for openshift clusters
|
||||
distribution: ""
|
||||
|
||||
# Opentelemetry collector configuration
|
||||
dedicatedValue: false
|
||||
schedulerName: default-scheduler
|
||||
|
||||
labels:
|
||||
bu: "central"
|
||||
team: "sre-shared"
|
||||
service: "opentelemetry-central-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "opentelemetry"
|
||||
arch: "any"
|
||||
runpod: "ondemand"
|
||||
|
||||
externalSecret:
|
||||
enabled: false
|
||||
key: prd/admin/coralogix-keys
|
||||
secretStoreRef:
|
||||
name: vault-backend
|
||||
|
||||
image:
|
||||
# If you want to use the core image `otel/opentelemetry-collector`, you also need to change `command.name` value to `otelcol`.
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/opentelemetry-collector-contrib
|
||||
# repository: otel/opentelemetry-collector-contrib
|
||||
pullPolicy: IfNotPresent
|
||||
# Overrides the image tag whose default is the chart appVersion.
|
||||
tag: "0.87.0"
|
||||
# When digest is set to a non-empty value, images will be pulled by digest (regardless of tag value).
|
||||
digest: ""
|
||||
mode: daemonset
|
||||
rollout:
|
||||
rollingUpdate:
|
||||
# When 'mode: daemonset', maxSurge cannot be used when hostPort is set for any of the ports
|
||||
# maxSurge: 25%
|
||||
maxUnavailable: 10
|
||||
strategy: RollingUpdate
|
||||
serviceAccount:
|
||||
# Specifies whether a service account should be created
|
||||
create: true
|
||||
# Annotations to add to the service account
|
||||
annotations: {}
|
||||
# The name of the service account to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name: ""
|
||||
hostNetwork: true
|
||||
dnsPolicy: "ClusterFirstWithHostNet"
|
||||
fullnameOverride: opentelemetry-central-prd
|
||||
|
||||
presets:
|
||||
logsCollection:
|
||||
enabled: false
|
||||
storeCheckpoints: false
|
||||
maxRecombineLogSize: 1048576
|
||||
extraFilelogOperators: []
|
||||
# - type: recombine
|
||||
# combine_field: body
|
||||
# source_identifier: attributes["log.file.path"]
|
||||
# is_first_entry: body matches "^(YOUR-LOGS-REGEX)"
|
||||
kubernetesAttributes:
|
||||
enabled: false
|
||||
hostMetrics:
|
||||
enabled: false
|
||||
kubeletMetrics:
|
||||
enabled: false
|
||||
|
||||
extraEnvs:
|
||||
- name: OTEL_RESOURCE_ATTRIBUTES
|
||||
value: "k8s.node.name=$(K8S_NODE_NAME)"
|
||||
- name: KUBE_NODE_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
apiVersion: v1
|
||||
fieldPath: spec.nodeName
|
||||
config:
|
||||
extensions: {}
|
||||
# zpages:
|
||||
# endpoint: localhost:55679
|
||||
# pprof:
|
||||
# endpoint: localhost:1777
|
||||
exporters:
|
||||
loadbalancing:
|
||||
protocol:
|
||||
otlp:
|
||||
timeout: 4s
|
||||
tls:
|
||||
insecure: true
|
||||
sending_queue:
|
||||
enabled: true
|
||||
queue_size: 50000
|
||||
num_consumers: 500
|
||||
resolver:
|
||||
dns:
|
||||
hostname: "opentelemetry-admin-prd.opentelemetry.svc.clusterset.local"
|
||||
otlp:
|
||||
endpoint: opentelemetry-deployment-central-prd.opentelemetry.svc.cluster.local:4317
|
||||
tls:
|
||||
insecure: true
|
||||
keepalive:
|
||||
timeout: 2s
|
||||
# coralogix:
|
||||
# timeout: "30s"
|
||||
# private_key: "${CORALOGIX_PRIVATE_KEY}"
|
||||
# domain: "{{.Values.global.domain}}"
|
||||
# traces:
|
||||
# endpoint: "{{ .Values.global.traces.endpoint }}"
|
||||
# metrics:
|
||||
# endpoint: "{{ .Values.global.metrics.endpoint }}"
|
||||
# logs:
|
||||
# endpoint: "{{ .Values.global.logs.endpoint }}"
|
||||
# application_name_attributes:
|
||||
# - "k8s.namespace.name"
|
||||
# - "service.namespace"
|
||||
# subsystem_name_attributes:
|
||||
# - "k8s.deployment.name"
|
||||
# - "k8s.statefulset.name"
|
||||
# - "k8s.daemonset.name"
|
||||
# - "k8s.cronjob.name"
|
||||
# - "k8s.job.name"
|
||||
# - "k8s.container.name"
|
||||
# - "k8s.node.name"
|
||||
# - "service.name"
|
||||
# application_name: "{{.Values.global.defaultApplicationName }}"
|
||||
# subsystem_name: "{{.Values.global.defaultSubsystemName }}"
|
||||
processors:
|
||||
k8sattributes:
|
||||
filter:
|
||||
node_from_env_var: KUBE_NODE_NAME
|
||||
extract:
|
||||
metadata:
|
||||
- "k8s.namespace.name"
|
||||
- "k8s.deployment.name"
|
||||
- "k8s.statefulset.name"
|
||||
- "k8s.daemonset.name"
|
||||
- "k8s.cronjob.name"
|
||||
- "k8s.job.name"
|
||||
- "k8s.pod.name"
|
||||
- "k8s.node.name"
|
||||
memory_limiter: null # Will get the k8s resource limits
|
||||
groupbytrace:
|
||||
wait_duration: 1s
|
||||
groupbyattrs:
|
||||
keys:
|
||||
- host.name
|
||||
resourcedetection/env:
|
||||
detectors: ["system","env"]
|
||||
timeout: 5s
|
||||
override: false
|
||||
# spanmetrics:
|
||||
# metrics_exporter: coralogix
|
||||
# dimensions:
|
||||
# - name: "k8s.deployment.name"
|
||||
# - name: "k8s.statefulset.name"
|
||||
# - name: "k8s.daemonset.name"
|
||||
# - name: "k8s.cronjob.name"
|
||||
# - name: "k8s.job.name"
|
||||
# - name: "k8s.container.name"
|
||||
# - name: "k8s.node.name"
|
||||
# - name: "k8s.namespace.name"
|
||||
receivers:
|
||||
otlp:
|
||||
protocols:
|
||||
grpc:
|
||||
endpoint: ${MY_POD_IP}:4317
|
||||
http:
|
||||
endpoint: ${MY_POD_IP}:4318
|
||||
zipkin:
|
||||
endpoint: ${MY_POD_IP}:9411
|
||||
jaeger:
|
||||
protocols:
|
||||
grpc:
|
||||
endpoint: ${MY_POD_IP}:14250
|
||||
thrift_http:
|
||||
endpoint: ${MY_POD_IP}:14268
|
||||
thrift_compact:
|
||||
endpoint: ${MY_POD_IP}:6831
|
||||
thrift_binary:
|
||||
endpoint: ${MY_POD_IP}:6832
|
||||
prometheus:
|
||||
config:
|
||||
scrape_configs:
|
||||
- job_name: opentelemetry-collector
|
||||
scrape_interval: 30s
|
||||
static_configs:
|
||||
- targets:
|
||||
- ${MY_POD_IP}:8888
|
||||
service:
|
||||
extensions:
|
||||
# - zpages
|
||||
# - pprof
|
||||
- health_check
|
||||
# - memory_ballast
|
||||
telemetry:
|
||||
metrics:
|
||||
address: ${env:MY_POD_IP}:8888
|
||||
pipelines:
|
||||
traces:
|
||||
exporters:
|
||||
- loadbalancing
|
||||
processors:
|
||||
- memory_limiter
|
||||
- batch
|
||||
receivers:
|
||||
- otlp
|
||||
metrics: null
|
||||
logs: null
|
||||
tolerations:
|
||||
- operator: Exists
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 350m
|
||||
memory: 350Mi
|
||||
limits:
|
||||
cpu: 1
|
||||
memory: 1G
|
||||
|
||||
ports:
|
||||
jaeger-binary:
|
||||
enabled: true
|
||||
containerPort: 6832
|
||||
servicePort: 6832
|
||||
hostPort: 6832
|
||||
protocol: TCP
|
||||
# In order to enable podMonitor, following part must be enabled in order to expose the required port:
|
||||
# metrics:
|
||||
# enabled: true
|
||||
|
||||
# podMonitor:
|
||||
# enabled: true
|
||||
|
||||
# prometheusRule:
|
||||
# enabled: true
|
||||
# defaultRules:
|
||||
# enabled: true
|
||||
|
||||
# Annotations to be added to pod
|
||||
podAnnotations:
|
||||
otel.io/path: "/metrics"
|
||||
otel.io/scrape: "true"
|
||||
otel.io/port: "8888"
|
||||
|
||||
affinity:
|
||||
nodeAffinity:
|
||||
requiredDuringSchedulingIgnoredDuringExecution:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: dedicated
|
||||
operator: NotIn
|
||||
values:
|
||||
- vmstorage
|
||||
- vmselect
|
||||
- vmagent
|
||||
- vminsert
|
||||
- contour-internal-0
|
||||
- contour-internal-1
|
||||
- contour-external
|
||||
- key: node_pool
|
||||
operator: NotIn
|
||||
values:
|
||||
- np-central-default-prd-ase1
|
||||
@@ -1,119 +0,0 @@
|
||||
fullnameOverride: opentelemetry-central-prd
|
||||
|
||||
mode: daemonset
|
||||
|
||||
priorityClassName: "system-node-critical"
|
||||
|
||||
config:
|
||||
exporters:
|
||||
loadbalancing:
|
||||
routing_key: "traceID"
|
||||
protocol:
|
||||
otlp:
|
||||
timeout: 5s
|
||||
tls:
|
||||
insecure: true
|
||||
sending_queue:
|
||||
num_consumers: 500
|
||||
queue_size: 50000
|
||||
resolver:
|
||||
dns:
|
||||
hostname: opentelemetry-admin-prd-headless.opentelemetry.svc.clusterset.local
|
||||
processors: {}
|
||||
receivers:
|
||||
otlp:
|
||||
protocols:
|
||||
grpc:
|
||||
endpoint: ${env:MY_POD_IP}:4317
|
||||
http:
|
||||
endpoint: ${env:MY_POD_IP}:4318
|
||||
service:
|
||||
telemetry:
|
||||
metrics:
|
||||
level: detailed
|
||||
readers:
|
||||
- pull:
|
||||
exporter:
|
||||
prometheus:
|
||||
host: '0.0.0.0'
|
||||
port: 8888
|
||||
extensions:
|
||||
- health_check
|
||||
pipelines:
|
||||
logs: null
|
||||
metrics: null
|
||||
traces:
|
||||
exporters:
|
||||
- loadbalancing
|
||||
processors: []
|
||||
receivers:
|
||||
- otlp
|
||||
|
||||
image:
|
||||
repository: asia-southeast1-docker.pkg.dev/meesho-devops-admin-0622/admin/sre/opentelemetry-collector-contrib
|
||||
tag: "0.111.0"
|
||||
|
||||
tolerations:
|
||||
- operator: Exists
|
||||
|
||||
affinity:
|
||||
nodeAffinity:
|
||||
requiredDuringSchedulingIgnoredDuringExecution:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: dedicated
|
||||
operator: NotIn
|
||||
values:
|
||||
- vmstorage
|
||||
- megaduo
|
||||
- vmselect
|
||||
- vmagent
|
||||
- vminsert
|
||||
- alloy
|
||||
- contour-internal-0
|
||||
- contour-internal-1
|
||||
- contour-external
|
||||
- key: node_pool
|
||||
operator: NotIn
|
||||
values:
|
||||
- np-central-default-prd-ase1
|
||||
|
||||
extraEnvs:
|
||||
- name: K8S_NODE_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
apiVersion: v1
|
||||
fieldPath: spec.nodeName
|
||||
- name: OTEL_RESOURCE_ATTRIBUTES
|
||||
value: "k8s.node.name=$(K8S_NODE_NAME)"
|
||||
|
||||
ports:
|
||||
metrics:
|
||||
enabled: true
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 124Mi
|
||||
limits:
|
||||
cpu: 200m
|
||||
memory: 256Mi
|
||||
|
||||
podAnnotations:
|
||||
otel.io/path: "/metrics"
|
||||
otel.io/scrape: "true"
|
||||
otel.io/port: "8888"
|
||||
|
||||
podLabels:
|
||||
bu: "central"
|
||||
team: "sre"
|
||||
service: "opentelemetry-central-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "opentelemetry"
|
||||
arch: "any"
|
||||
runpod: "ondemand"
|
||||
|
||||
rollout:
|
||||
rollingUpdate:
|
||||
maxUnavailable: 10%
|
||||
@@ -1,497 +0,0 @@
|
||||
# Default values for prometheus-node-exporter.
|
||||
# This is a YAML-formatted file.
|
||||
# Declare variables to be passed into your templates.
|
||||
image:
|
||||
registry: quay.io
|
||||
repository: prometheus/node-exporter
|
||||
# Overrides the image tag whose default is {{ printf "v%s" .Chart.AppVersion }}
|
||||
tag: ""
|
||||
pullPolicy: IfNotPresent
|
||||
digest: ""
|
||||
|
||||
imagePullSecrets: []
|
||||
# - name: "image-pull-secret"
|
||||
nameOverride: ""
|
||||
fullnameOverride: ""
|
||||
|
||||
# Number of old history to retain to allow rollback
|
||||
# Default Kubernetes value is set to 10
|
||||
revisionHistoryLimit: 10
|
||||
|
||||
global:
|
||||
# To help compatibility with other charts which use global.imagePullSecrets.
|
||||
# Allow either an array of {name: pullSecret} maps (k8s-style), or an array of strings (more common helm-style).
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - name: pullSecret1
|
||||
# - name: pullSecret2
|
||||
# or
|
||||
# global:
|
||||
# imagePullSecrets:
|
||||
# - pullSecret1
|
||||
# - pullSecret2
|
||||
imagePullSecrets: []
|
||||
#
|
||||
# Allow parent charts to override registry hostname
|
||||
imageRegistry: ""
|
||||
|
||||
# Configure kube-rbac-proxy. When enabled, creates a kube-rbac-proxy to protect the node-exporter http endpoint.
|
||||
# The requests are served through the same service but requests are HTTPS.
|
||||
kubeRBACProxy:
|
||||
enabled: false
|
||||
image:
|
||||
registry: quay.io
|
||||
repository: brancz/kube-rbac-proxy
|
||||
tag: v0.14.0
|
||||
sha: ""
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# List of additional cli arguments to configure kube-rbac-prxy
|
||||
# for example: --tls-cipher-suites, --log-file, etc.
|
||||
# all the possible args can be found here: https://github.com/brancz/kube-rbac-proxy#usage
|
||||
extraArgs: []
|
||||
|
||||
## Specify security settings for a Container
|
||||
## Allows overrides and additional options compared to (Pod) securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
containerSecurityContext: {}
|
||||
|
||||
resources: {}
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
# limits:
|
||||
# cpu: 100m
|
||||
# memory: 64Mi
|
||||
# requests:
|
||||
# cpu: 10m
|
||||
# memory: 32Mi
|
||||
|
||||
service:
|
||||
enabled: true
|
||||
type: ClusterIP
|
||||
port: 9100
|
||||
targetPort: 9100
|
||||
nodePort:
|
||||
portName: metrics
|
||||
listenOnAllInterfaces: true
|
||||
annotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "9100"
|
||||
prometheus.io/path: "/metrics"
|
||||
ipDualStack:
|
||||
enabled: false
|
||||
ipFamilies: ["IPv6", "IPv4"]
|
||||
ipFamilyPolicy: "PreferDualStack"
|
||||
|
||||
# Set a NetworkPolicy with:
|
||||
# ingress only on service.port
|
||||
# no egress permitted
|
||||
networkPolicy:
|
||||
enabled: false
|
||||
|
||||
# Additional environment variables that will be passed to the daemonset
|
||||
env: {}
|
||||
## env:
|
||||
## VARIABLE: value
|
||||
|
||||
prometheus:
|
||||
monitor:
|
||||
enabled: false
|
||||
additionalLabels: {}
|
||||
namespace: ""
|
||||
|
||||
jobLabel: ""
|
||||
|
||||
# List of pod labels to add to node exporter metrics
|
||||
# https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#servicemonitor
|
||||
podTargetLabels: []
|
||||
|
||||
scheme: http
|
||||
basicAuth: {}
|
||||
bearerTokenFile:
|
||||
tlsConfig: {}
|
||||
|
||||
## proxyUrl: URL of a proxy that should be used for scraping.
|
||||
##
|
||||
proxyUrl: ""
|
||||
|
||||
## Override serviceMonitor selector
|
||||
##
|
||||
selectorOverride: {}
|
||||
|
||||
## Attach node metadata to discovered targets. Requires Prometheus v2.35.0 and above.
|
||||
##
|
||||
attachMetadata:
|
||||
node: false
|
||||
|
||||
relabelings: []
|
||||
metricRelabelings: []
|
||||
interval: ""
|
||||
scrapeTimeout: 10s
|
||||
## prometheus.monitor.apiVersion ApiVersion for the serviceMonitor Resource(defaults to "monitoring.coreos.com/v1")
|
||||
apiVersion: ""
|
||||
|
||||
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
|
||||
##
|
||||
sampleLimit: 0
|
||||
|
||||
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
|
||||
##
|
||||
targetLimit: 0
|
||||
|
||||
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelNameLengthLimit: 0
|
||||
|
||||
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
##
|
||||
labelValueLengthLimit: 0
|
||||
|
||||
# PodMonitor defines monitoring for a set of pods.
|
||||
# ref. https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#monitoring.coreos.com/v1.PodMonitor
|
||||
# Using a PodMonitor may be preferred in some environments where there is very large number
|
||||
# of Node Exporter endpoints (1000+) behind a single service.
|
||||
# The PodMonitor is disabled by default. When switching from ServiceMonitor to PodMonitor,
|
||||
# the time series resulting from the configuration through PodMonitor may have different labels.
|
||||
# For instance, there will not be the service label any longer which might
|
||||
# affect PromQL queries selecting that label.
|
||||
podMonitor:
|
||||
enabled: false
|
||||
# Namespace in which to deploy the pod monitor. Defaults to the release namespace.
|
||||
namespace: ""
|
||||
# Additional labels, e.g. setting a label for pod monitor selector as set in prometheus
|
||||
additionalLabels: {}
|
||||
# release: kube-prometheus-stack
|
||||
# PodTargetLabels transfers labels of the Kubernetes Pod onto the target.
|
||||
podTargetLabels: []
|
||||
# apiVersion defaults to monitoring.coreos.com/v1.
|
||||
apiVersion: ""
|
||||
# Override pod selector to select pod objects.
|
||||
selectorOverride: {}
|
||||
# Attach node metadata to discovered targets. Requires Prometheus v2.35.0 and above.
|
||||
attachMetadata:
|
||||
node: false
|
||||
# The label to use to retrieve the job name from. Defaults to label app.kubernetes.io/name.
|
||||
jobLabel: ""
|
||||
|
||||
# Scheme/protocol to use for scraping.
|
||||
scheme: "http"
|
||||
# Path to scrape metrics at.
|
||||
path: "/metrics"
|
||||
|
||||
# BasicAuth allow an endpoint to authenticate over basic authentication.
|
||||
# More info: https://prometheus.io/docs/operating/configuration/#endpoint
|
||||
basicAuth: {}
|
||||
# Secret to mount to read bearer token for scraping targets.
|
||||
# The secret needs to be in the same namespace as the pod monitor and accessible by the Prometheus Operator.
|
||||
# https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.24/#secretkeyselector-v1-core
|
||||
bearerTokenSecret: {}
|
||||
# TLS configuration to use when scraping the endpoint.
|
||||
tlsConfig: {}
|
||||
# Authorization section for this endpoint.
|
||||
# https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#monitoring.coreos.com/v1.SafeAuthorization
|
||||
authorization: {}
|
||||
# OAuth2 for the URL. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
# https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#monitoring.coreos.com/v1.OAuth2
|
||||
oauth2: {}
|
||||
|
||||
# ProxyURL eg http://proxyserver:2195. Directs scrapes through proxy to this endpoint.
|
||||
proxyUrl: ""
|
||||
# Interval at which endpoints should be scraped. If not specified Prometheus’ global scrape interval is used.
|
||||
interval: ""
|
||||
# Timeout after which the scrape is ended. If not specified, the Prometheus global scrape interval is used.
|
||||
scrapeTimeout: ""
|
||||
# HonorTimestamps controls whether Prometheus respects the timestamps present in scraped data.
|
||||
honorTimestamps: true
|
||||
# HonorLabels chooses the metric’s labels on collisions with target labels.
|
||||
honorLabels: true
|
||||
# Whether to enable HTTP2. Default false.
|
||||
enableHttp2: ""
|
||||
# Drop pods that are not running. (Failed, Succeeded).
|
||||
# Enabled by default. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#pod-phase
|
||||
filterRunning: ""
|
||||
# FollowRedirects configures whether scrape requests follow HTTP 3xx redirects. Default false.
|
||||
followRedirects: ""
|
||||
# Optional HTTP URL parameters
|
||||
params: {}
|
||||
|
||||
# RelabelConfigs to apply to samples before scraping. Prometheus Operator automatically adds
|
||||
# relabelings for a few standard Kubernetes fields. The original scrape job’s name
|
||||
# is available via the __tmp_prometheus_job_name label.
|
||||
# More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config
|
||||
relabelings: []
|
||||
# MetricRelabelConfigs to apply to samples before ingestion.
|
||||
metricRelabelings: []
|
||||
|
||||
# SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
|
||||
sampleLimit: 0
|
||||
# TargetLimit defines a limit on the number of scraped targets that will be accepted.
|
||||
targetLimit: 0
|
||||
# Per-scrape limit on number of labels that will be accepted for a sample.
|
||||
# Only valid in Prometheus versions 2.27.0 and newer.
|
||||
labelLimit: 0
|
||||
# Per-scrape limit on length of labels name that will be accepted for a sample.
|
||||
# Only valid in Prometheus versions 2.27.0 and newer.
|
||||
labelNameLengthLimit: 0
|
||||
# Per-scrape limit on length of labels value that will be accepted for a sample.
|
||||
# Only valid in Prometheus versions 2.27.0 and newer.
|
||||
labelValueLengthLimit: 0
|
||||
|
||||
## Customize the updateStrategy if set
|
||||
updateStrategy:
|
||||
type: RollingUpdate
|
||||
rollingUpdate:
|
||||
maxUnavailable: 1
|
||||
|
||||
resources:
|
||||
# We usually recommend not to specify default resources and to leave this as a conscious
|
||||
# choice for the user. This also increases chances charts run on environments with little
|
||||
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
||||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||
limits:
|
||||
cpu: 200m
|
||||
memory: 50Mi
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 30Mi
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a ServiceAccount should be created
|
||||
create: true
|
||||
# The name of the ServiceAccount to use.
|
||||
# If not set and create is true, a name is generated using the fullname template
|
||||
name:
|
||||
annotations: {}
|
||||
# annotations: {
|
||||
# iam.gke.io/gcp-service-account: node-exporter-admin-prd@meesho-admin-prd-0622.iam.gserviceaccount.com
|
||||
# }
|
||||
imagePullSecrets: []
|
||||
automountServiceAccountToken: false
|
||||
|
||||
securityContext:
|
||||
fsGroup: 65534
|
||||
runAsGroup: 65534
|
||||
runAsNonRoot: true
|
||||
runAsUser: 65534
|
||||
|
||||
containerSecurityContext:
|
||||
readOnlyRootFilesystem: true
|
||||
# capabilities:
|
||||
# add:
|
||||
# - SYS_TIME
|
||||
|
||||
rbac:
|
||||
## If true, create & use RBAC resources
|
||||
##
|
||||
create: true
|
||||
## If true, create & use Pod Security Policy resources
|
||||
## https://kubernetes.io/docs/concepts/policy/pod-security-policy/
|
||||
pspEnabled: true
|
||||
pspAnnotations: {}
|
||||
|
||||
# for deployments that have node_exporter deployed outside of the cluster, list
|
||||
# their addresses here
|
||||
endpoints: []
|
||||
|
||||
# Expose the service to the host network
|
||||
hostNetwork: true
|
||||
|
||||
# Share the host process ID namespace
|
||||
hostPID: true
|
||||
|
||||
# Mount the node's root file system (/) at /host/root in the container
|
||||
hostRootFsMount:
|
||||
enabled: true
|
||||
# Defines how new mounts in existing mounts on the node or in the container
|
||||
# are propagated to the container or node, respectively. Possible values are
|
||||
# None, HostToContainer, and Bidirectional. If this field is omitted, then
|
||||
# None is used. More information on:
|
||||
# https://kubernetes.io/docs/concepts/storage/volumes/#mount-propagation
|
||||
mountPropagation: HostToContainer
|
||||
|
||||
## Assign a group of affinity scheduling rules
|
||||
##
|
||||
affinity: {}
|
||||
# nodeAffinity:
|
||||
# requiredDuringSchedulingIgnoredDuringExecution:
|
||||
# nodeSelectorTerms:
|
||||
# - matchFields:
|
||||
# - key: metadata.name
|
||||
# operator: In
|
||||
# values:
|
||||
# - target-host-name
|
||||
|
||||
# Annotations to be added to node exporter pods
|
||||
podAnnotations:
|
||||
# Fix for very slow GKE cluster upgrades
|
||||
cluster-autoscaler.kubernetes.io/safe-to-evict: "true"
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "9100"
|
||||
prometheus.io/path: "/metrics"
|
||||
|
||||
|
||||
# Extra labels to be added to node exporter pods
|
||||
podLabels:
|
||||
bu: "central"
|
||||
team: "central-sre"
|
||||
service: "node-exporter-central-prd"
|
||||
env: "prd"
|
||||
priority: "p0"
|
||||
type: "exporter"
|
||||
|
||||
# Annotations to be added to node exporter daemonset
|
||||
daemonsetAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "9100"
|
||||
prometheus.io/path: "/metrics"
|
||||
|
||||
## set to true to add the release label so scraping of the servicemonitor with kube-prometheus-stack works out of the box
|
||||
releaseLabel: false
|
||||
|
||||
# Custom DNS configuration to be added to prometheus-node-exporter pods
|
||||
dnsConfig: {}
|
||||
# nameservers:
|
||||
# - 1.2.3.4
|
||||
# searches:
|
||||
# - ns1.svc.cluster-domain.example
|
||||
# - my.dns.search.suffix
|
||||
# options:
|
||||
# - name: ndots
|
||||
# value: "2"
|
||||
# - name: edns0
|
||||
|
||||
## Assign a nodeSelector if operating a hybrid cluster
|
||||
##
|
||||
nodeSelector: {}
|
||||
# kubernetes.io/os: linux
|
||||
# kubernetes.io/arch: amd64
|
||||
|
||||
tolerations:
|
||||
- operator: Exists
|
||||
|
||||
## Assign a PriorityClassName to pods if set
|
||||
priorityClassName: "system-node-critical"
|
||||
|
||||
## Additional container arguments
|
||||
##
|
||||
extraArgs: []
|
||||
# - --collector.diskstats.ignored-devices=^(ram|loop|fd|(h|s|v)d[a-z]|nvme\\d+n\\d+p)\\d+$
|
||||
# - --collector.textfile.directory=/run/prometheus
|
||||
|
||||
## Additional mounts from the host to node-exporter container
|
||||
##
|
||||
extraHostVolumeMounts: []
|
||||
# - name: <mountName>
|
||||
# hostPath: <hostPath>
|
||||
# mountPath: <mountPath>
|
||||
# readOnly: true|false
|
||||
# mountPropagation: None|HostToContainer|Bidirectional
|
||||
|
||||
## Additional configmaps to be mounted.
|
||||
##
|
||||
configmaps: []
|
||||
# - name: <configMapName>
|
||||
# mountPath: <mountPath>
|
||||
secrets: []
|
||||
# - name: <secretName>
|
||||
# mountPath: <mountPatch>
|
||||
## Override the deployment namespace
|
||||
##
|
||||
namespaceOverride: "monitoring"
|
||||
|
||||
## Additional containers for export metrics to text file
|
||||
##
|
||||
sidecars: []
|
||||
## - name: nvidia-dcgm-exporter
|
||||
## image: nvidia/dcgm-exporter:1.4.3
|
||||
|
||||
## Volume for sidecar containers
|
||||
##
|
||||
sidecarVolumeMount: []
|
||||
## - name: collector-textfiles
|
||||
## mountPath: /run/prometheus
|
||||
## readOnly: false
|
||||
|
||||
## Additional mounts from the host to sidecar containers
|
||||
##
|
||||
sidecarHostVolumeMounts: []
|
||||
# - name: <mountName>
|
||||
# hostPath: <hostPath>
|
||||
# mountPath: <mountPath>
|
||||
# readOnly: true|false
|
||||
# mountPropagation: None|HostToContainer|Bidirectional
|
||||
|
||||
## Additional InitContainers to initialize the pod
|
||||
##
|
||||
extraInitContainers: []
|
||||
|
||||
## Liveness probe
|
||||
##
|
||||
livenessProbe:
|
||||
failureThreshold: 3
|
||||
httpGet:
|
||||
httpHeaders: []
|
||||
scheme: http
|
||||
initialDelaySeconds: 0
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 1
|
||||
|
||||
## Readiness probe
|
||||
##
|
||||
readinessProbe:
|
||||
failureThreshold: 3
|
||||
httpGet:
|
||||
httpHeaders: []
|
||||
scheme: http
|
||||
initialDelaySeconds: 0
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 1
|
||||
|
||||
# Enable vertical pod autoscaler support for prometheus-node-exporter
|
||||
verticalPodAutoscaler:
|
||||
enabled: false
|
||||
|
||||
# Recommender responsible for generating recommendation for the object.
|
||||
# List should be empty (then the default recommender will generate the recommendation)
|
||||
# or contain exactly one recommender.
|
||||
# recommenders:
|
||||
# - name: custom-recommender-performance
|
||||
|
||||
# List of resources that the vertical pod autoscaler can control. Defaults to cpu and memory
|
||||
controlledResources: []
|
||||
# Specifies which resource values should be controlled: RequestsOnly or RequestsAndLimits.
|
||||
# controlledValues: RequestsAndLimits
|
||||
|
||||
# Define the max allowed resources for the pod
|
||||
maxAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
# Define the min allowed resources for the pod
|
||||
minAllowed: {}
|
||||
# cpu: 200m
|
||||
# memory: 100Mi
|
||||
|
||||
# updatePolicy:
|
||||
# Specifies minimal number of replicas which need to be alive for VPA Updater to attempt pod eviction
|
||||
# minReplicas: 1
|
||||
# Specifies whether recommended updates are applied when a Pod is started and whether recommended updates
|
||||
# are applied during the life of a Pod. Possible values are "Off", "Initial", "Recreate", and "Auto".
|
||||
# updateMode: Auto
|
||||
|
||||
# Extra manifests to deploy as an array
|
||||
extraManifests: []
|
||||
# - |
|
||||
# apiVersion: v1
|
||||
# kind: ConfigMap
|
||||
# metadata:
|
||||
# name: prometheus-extra
|
||||
# data:
|
||||
# extra-data: "value"
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user