161 lines
7.3 KiB
YAML
161 lines
7.3 KiB
YAML
global:
|
|
scrape_interval: 60s
|
|
|
|
# scrape self by default
|
|
scrape_configs:
|
|
- job_name: vmagent
|
|
static_configs:
|
|
- targets: ["localhost:8428"]
|
|
|
|
## COPY from Prometheus helm chart https://github.com/helm/charts/blob/master/stable/prometheus/values.yaml
|
|
|
|
# - job_name: "kubernetes-apiservers"
|
|
# kubernetes_sd_configs:
|
|
# - role: endpoints
|
|
# # Default to scraping over https. If required, just disable this or change to
|
|
# # `http`.
|
|
# scheme: https
|
|
# # This TLS & bearer token file config is used to connect to the actual scrape
|
|
# # endpoints for cluster components. This is separate to discovery auth
|
|
# # configuration because discovery & scraping are two separate concerns in
|
|
# # Prometheus. The discovery auth config is automatic if Prometheus runs inside
|
|
# # the cluster. Otherwise, more config options have to be provided within the
|
|
# # <kubernetes_sd_config>.
|
|
# tls_config:
|
|
# ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
|
# # If your node certificates are self-signed or use a different CA to the
|
|
# # master CA, then disable certificate verification below. Note that
|
|
# # certificate verification is an integral part of a secure infrastructure
|
|
# # so this should only be disabled in a controlled environment. You can
|
|
# # disable certificate verification by uncommenting the line below.
|
|
# #
|
|
# insecure_skip_verify: true
|
|
# bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
|
|
# # Keep only the default/kubernetes service endpoints for the https port. This
|
|
# # will add targets for each API server which Kubernetes adds an endpoint to
|
|
# # the default/kubernetes service.
|
|
# relabel_configs:
|
|
# - target_label: cluster
|
|
# replacement: k8s-supply-prd-ase1
|
|
# - source_labels:
|
|
# [
|
|
# __meta_kubernetes_namespace,
|
|
# __meta_kubernetes_service_name,
|
|
# __meta_kubernetes_endpoint_port_name,
|
|
# ]
|
|
# action: keep
|
|
# regex: default;kubernetes;https
|
|
# - job_name: "kubernetes-nodes"
|
|
# # Default to scraping over https. If required, just disable this or change to
|
|
# # `http`.
|
|
# scheme: https
|
|
# # This TLS & bearer token file config is used to connect to the actual scrape
|
|
# # endpoints for cluster components. This is separate to discovery auth
|
|
# # configuration because discovery & scraping are two separate concerns in
|
|
# # Prometheus. The discovery auth config is automatic if Prometheus runs inside
|
|
# # the cluster. Otherwise, more config options have to be provided within the
|
|
# # <kubernetes_sd_config>.
|
|
# tls_config:
|
|
# ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
|
# # If your node certificates are self-signed or use a different CA to the
|
|
# # master CA, then disable certificate verification below. Note that
|
|
# # certificate verification is an integral part of a secure infrastructure
|
|
# # so this should only be disabled in a controlled environment. You can
|
|
# # disable certificate verification by uncommenting the line below.
|
|
# #
|
|
# insecure_skip_verify: true
|
|
# bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
|
|
# kubernetes_sd_configs:
|
|
# - role: node
|
|
# relabel_configs:
|
|
# - target_label: cluster
|
|
# replacement: k8s-supply-prd-ase1
|
|
# - action: labelmap
|
|
# regex: __meta_kubernetes_node_label_(.+)
|
|
# - target_label: __address__
|
|
# replacement: kubernetes.default.svc:443
|
|
# - source_labels: [__meta_kubernetes_node_name]
|
|
# regex: (.+)
|
|
# target_label: __metrics_path__
|
|
# replacement: /api/v1/nodes/$1/proxy/metrics
|
|
# - job_name: "kubernetes-nodes-cadvisor"
|
|
# # Default to scraping over https. If required, just disable this or change to
|
|
# # `http`.
|
|
# scheme: https
|
|
# # This TLS & bearer token file config is used to connect to the actual scrape
|
|
# # endpoints for cluster components. This is separate to discovery auth
|
|
# # configuration because discovery & scraping are two separate concerns in
|
|
# # Prometheus. The discovery auth config is automatic if Prometheus runs inside
|
|
# # the cluster. Otherwise, more config options have to be provided within the
|
|
# # <kubernetes_sd_config>.
|
|
# tls_config:
|
|
# ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
|
# # If your node certificates are self-signed or use a different CA to the
|
|
# # master CA, then disable certificate verification below. Note that
|
|
# # certificate verification is an integral part of a secure infrastructure
|
|
# # so this should only be disabled in a controlled environment. You can
|
|
# # disable certificate verification by uncommenting the line below.
|
|
# #
|
|
# insecure_skip_verify: true
|
|
# bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
|
|
# kubernetes_sd_configs:
|
|
# - role: node
|
|
# # This configuration will work only on kubelet 1.7.3+
|
|
# # As the scrape endpoints for cAdvisor have changed
|
|
# # if you are using older version you need to change the replacement to
|
|
# # replacement: /api/v1/nodes/$1:4194/proxy/metrics
|
|
# # more info here https://github.com/coreos/prometheus-operator/issues/633
|
|
# relabel_configs:
|
|
# - action: labelmap
|
|
# regex: __meta_kubernetes_node_label_(.+)
|
|
# - target_label: __address__
|
|
# replacement: kubernetes.default.svc:443
|
|
# - source_labels: [__meta_kubernetes_node_name]
|
|
# regex: (.+)
|
|
# target_label: __metrics_path__
|
|
# replacement: /api/v1/nodes/$1/proxy/metrics/cadvisor
|
|
|
|
- job_name: kube-state-metrics-k8s-supply-prd-ase1
|
|
metrics_path: /metrics
|
|
honor_timestamps: true
|
|
scrape_interval: 60s
|
|
scrape_timeout: 30s
|
|
scheme: http
|
|
static_configs:
|
|
- targets: ['kube-state-metrics-supply-prd.kube-system.svc.cluster.local:8080']
|
|
relabel_configs:
|
|
- target_label: cluster
|
|
replacement: k8s-supply-prd-ase1
|
|
metric_relabel_configs:
|
|
- source_labels: [namespace]
|
|
regex: victoriametrics
|
|
action: keep
|
|
- source_labels: [__name__]
|
|
regex: 'kube_pod_status_phase|kube_statefulset_replicas|kube_pod_labels|kube_statefulset_status_replicas_ready|kube_statefulset_labels|kube_deployment_status_replicas_ready|kube_deployment_spec_replicas|kube_deployment_labels|kube_pod_container_resource_requests|kube_pod_labels'
|
|
action: keep
|
|
|
|
- bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
|
|
job_name: kubernetes-nodes-cadvisor
|
|
kubernetes_sd_configs:
|
|
- role: node
|
|
relabel_configs:
|
|
- target_label: cluster
|
|
replacement: k8s-supply-prd-ase1
|
|
- replacement: kubernetes.default.svc:443
|
|
target_label: __address__
|
|
- regex: (.+)
|
|
replacement: /api/v1/nodes/$1/proxy/metrics/cadvisor
|
|
source_labels:
|
|
- __meta_kubernetes_node_name
|
|
target_label: __metrics_path__
|
|
scheme: https
|
|
tls_config:
|
|
ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
|
insecure_skip_verify: true
|
|
metric_relabel_configs:
|
|
- source_labels: [namespace]
|
|
regex: victoriametrics
|
|
action: keep
|
|
- source_labels: [__name__]
|
|
regex: 'container_cpu_usage_seconds_total|container_memory_working_set_bytes'
|
|
action: keep |