global: scrape_interval: 10s # scrape self by default scrape_configs: - job_name: vmagent static_configs: - targets: ["localhost:8428"] ## COPY from Prometheus helm chart https://github.com/helm/charts/blob/master/stable/prometheus/values.yaml # - job_name: "kubernetes-apiservers" # kubernetes_sd_configs: # - role: endpoints # # Default to scraping over https. If required, just disable this or change to # # `http`. # scheme: https # # This TLS & bearer token file config is used to connect to the actual scrape # # endpoints for cluster components. This is separate to discovery auth # # configuration because discovery & scraping are two separate concerns in # # Prometheus. The discovery auth config is automatic if Prometheus runs inside # # the cluster. Otherwise, more config options have to be provided within the # # . # tls_config: # ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt # # If your node certificates are self-signed or use a different CA to the # # master CA, then disable certificate verification below. Note that # # certificate verification is an integral part of a secure infrastructure # # so this should only be disabled in a controlled environment. You can # # disable certificate verification by uncommenting the line below. # # # insecure_skip_verify: true # bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token # # Keep only the default/kubernetes service endpoints for the https port. This # # will add targets for each API server which Kubernetes adds an endpoint to # # the default/kubernetes service. # relabel_configs: # - target_label: cluster # replacement: k8s-supply-prd-ase1 # - source_labels: # [ # __meta_kubernetes_namespace, # __meta_kubernetes_service_name, # __meta_kubernetes_endpoint_port_name, # ] # action: keep # regex: default;kubernetes;https # - job_name: "kubernetes-nodes" # # Default to scraping over https. If required, just disable this or change to # # `http`. # scheme: https # # This TLS & bearer token file config is used to connect to the actual scrape # # endpoints for cluster components. This is separate to discovery auth # # configuration because discovery & scraping are two separate concerns in # # Prometheus. The discovery auth config is automatic if Prometheus runs inside # # the cluster. Otherwise, more config options have to be provided within the # # . # tls_config: # ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt # # If your node certificates are self-signed or use a different CA to the # # master CA, then disable certificate verification below. Note that # # certificate verification is an integral part of a secure infrastructure # # so this should only be disabled in a controlled environment. You can # # disable certificate verification by uncommenting the line below. # # # insecure_skip_verify: true # bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token # kubernetes_sd_configs: # - role: node # relabel_configs: # - target_label: cluster # replacement: k8s-supply-prd-ase1 # - action: labelmap # regex: __meta_kubernetes_node_label_(.+) # - target_label: __address__ # replacement: kubernetes.default.svc:443 # - source_labels: [__meta_kubernetes_node_name] # regex: (.+) # target_label: __metrics_path__ # replacement: /api/v1/nodes/$1/proxy/metrics # - job_name: "kubernetes-nodes-cadvisor" # # Default to scraping over https. If required, just disable this or change to # # `http`. # scheme: https # # This TLS & bearer token file config is used to connect to the actual scrape # # endpoints for cluster components. This is separate to discovery auth # # configuration because discovery & scraping are two separate concerns in # # Prometheus. The discovery auth config is automatic if Prometheus runs inside # # the cluster. Otherwise, more config options have to be provided within the # # . # tls_config: # ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt # # If your node certificates are self-signed or use a different CA to the # # master CA, then disable certificate verification below. Note that # # certificate verification is an integral part of a secure infrastructure # # so this should only be disabled in a controlled environment. You can # # disable certificate verification by uncommenting the line below. # # # insecure_skip_verify: true # bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token # kubernetes_sd_configs: # - role: node # # This configuration will work only on kubelet 1.7.3+ # # As the scrape endpoints for cAdvisor have changed # # if you are using older version you need to change the replacement to # # replacement: /api/v1/nodes/$1:4194/proxy/metrics # # more info here https://github.com/coreos/prometheus-operator/issues/633 # relabel_configs: # - action: labelmap # regex: __meta_kubernetes_node_label_(.+) # - target_label: __address__ # replacement: kubernetes.default.svc:443 # - source_labels: [__meta_kubernetes_node_name] # regex: (.+) # target_label: __metrics_path__ # replacement: /api/v1/nodes/$1/proxy/metrics/cadvisor - job_name: kube-state-metrics-k8s-supply-prd-ase1 metrics_path: /metrics honor_timestamps: true scrape_interval: 60s scrape_timeout: 30s scheme: http static_configs: - targets: ['kube-state-metrics-supply-prd.kube-system.svc.cluster.local:8080'] relabel_configs: - target_label: cluster replacement: k8s-supply-prd-ase1 metric_relabel_configs: - source_labels: [namespace] regex: victoriametrics action: keep - source_labels: [__name__] regex: 'kube_pod_status_phase|kube_statefulset_replicas|kube_pod_labels|kube_statefulset_status_replicas_ready|kube_statefulset_labels|kube_deployment_status_replicas_ready|kube_deployment_spec_replicas|kube_deployment_labels' action: keep