forked from openshift/cluster-monitoring-operator
-
Notifications
You must be signed in to change notification settings - Fork 0
/
deployment.yaml
143 lines (143 loc) · 5.72 KB
/
deployment.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
apiVersion: apps/v1beta2
kind: Deployment
metadata:
labels:
k8s-app: telemeter-client
name: telemeter-client
namespace: openshift-monitoring
spec:
replicas: 1
selector:
matchLabels:
k8s-app: telemeter-client
template:
metadata:
labels:
k8s-app: telemeter-client
spec:
containers:
- command:
- /usr/bin/telemeter-client
- --id=$(ID)
- --from=$(FROM)
- --from-ca-file=/etc/serving-certs-ca-bundle/service-ca.crt
- --from-token-file=/var/run/secrets/kubernetes.io/serviceaccount/token
- --to=$(TO)
- --to-token-file=/etc/telemeter/token
- --listen=localhost:8080
- --anonymize-salt-file=/etc/telemeter/salt
- --anonymize-labels=$(ANONYMIZE_LABELS)
- --match={__name__="up"}
- --match={__name__="cluster_version"}
- --match={__name__="cluster_version_available_updates"}
- --match={__name__="cluster_operator_up"}
- --match={__name__="cluster_operator_conditions"}
- --match={__name__="cluster_version_payload"}
- --match={__name__="cluster_installer"}
- --match={__name__="cluster_infrastructure_provider"}
- --match={__name__="cluster_feature_set"}
- --match={__name__="node_uname_info"}
- --match={__name__="instance:etcd_object_counts:sum"}
- --match={__name__="ALERTS",alertstate="firing"}
- --match={__name__="code:apiserver_request_count:rate:sum"}
- --match={__name__="cluster:capacity_cpu_cores:sum"}
- --match={__name__="cluster:capacity_memory_bytes:sum"}
- --match={__name__="cluster:cpu_usage_cores:sum"}
- --match={__name__="cluster:memory_usage_bytes:sum"}
- --match={__name__="openshift:cpu_usage_cores:sum"}
- --match={__name__="openshift:memory_usage_bytes:sum"}
- --match={__name__="workload:cpu_usage_cores:sum"}
- --match={__name__="workload:memory_usage_bytes:sum"}
- --match={__name__="cluster:virt_platform_nodes:sum"}
- --match={__name__="cluster:node_instance_type_count:sum"}
- --match={__name__="cnv:vmi_status_running:count"}
- --match={__name__="node_role_os_version_machine:cpu_capacity_cores:sum"}
- --match={__name__="node_role_os_version_machine:cpu_capacity_sockets:sum"}
- --match={__name__="subscription_sync_total"}
- --match={__name__="csv_succeeded"}
- --match={__name__="csv_abnormal"}
- --match={__name__="ceph_cluster_total_bytes"}
- --match={__name__="ceph_cluster_total_used_raw_bytes"}
- --match={__name__="ceph_health_status"}
- --match={__name__="job:ceph_osd_metadata:count"}
- --match={__name__="job:kube_pv:count"}
- --match={__name__="job:ceph_pools_iops:total"}
- --match={__name__="job:ceph_pools_iops_bytes:total"}
- --match={__name__="job:ceph_versions_running:count"}
- --match={__name__="job:noobaa_total_unhealthy_buckets:sum"}
- --match={__name__="job:noobaa_bucket_count:sum"}
- --match={__name__="job:noobaa_total_object_count:sum"}
- --match={__name__="noobaa_accounts_num"}
- --match={__name__="noobaa_total_usage"}
- --match={__name__="console_url"}
- --match={__name__="cluster:network_attachment_definition_instances:max"}
- --match={__name__="cluster:network_attachment_definition_enabled_instance_up:max"}
env:
- name: ANONYMIZE_LABELS
value: ""
- name: FROM
value: https://prometheus-k8s.openshift-monitoring.svc:9091
- name: ID
value: ""
- name: TO
value: https://infogw.api.openshift.com
- name: HTTP_PROXY
value: ""
- name: HTTPS_PROXY
value: ""
- name: NO_PROXY
value: ""
image: quay.io/openshift/origin-telemeter:v4.0
name: telemeter-client
ports:
- containerPort: 8080
name: http
volumeMounts:
- mountPath: /etc/serving-certs-ca-bundle
name: serving-certs-ca-bundle
readOnly: false
- mountPath: /etc/telemeter
name: secret-telemeter-client
readOnly: false
- args:
- --webhook-url=http://localhost:8080/-/reload
- --volume-dir=/etc/serving-certs-ca-bundle
image: quay.io/openshift/origin-configmap-reload:v3.11
name: reload
volumeMounts:
- mountPath: /etc/serving-certs-ca-bundle
name: serving-certs-ca-bundle
readOnly: false
- args:
- --secure-listen-address=:8443
- --upstream=http://127.0.0.1:8080/
- --tls-cert-file=/etc/tls/private/tls.crt
- --tls-private-key-file=/etc/tls/private/tls.key
- --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
image: quay.io/coreos/kube-rbac-proxy:v0.4.1
name: kube-rbac-proxy
ports:
- containerPort: 8443
name: https
resources:
requests:
cpu: 10m
memory: 20Mi
volumeMounts:
- mountPath: /etc/tls/private
name: telemeter-client-tls
readOnly: false
nodeSelector:
beta.kubernetes.io/os: linux
priorityClassName: system-cluster-critical
serviceAccountName: telemeter-client
volumes:
- configMap:
name: telemeter-client-serving-certs-ca-bundle
name: serving-certs-ca-bundle
- name: secret-telemeter-client
secret:
secretName: telemeter-client
- name: telemeter-client-tls
secret:
secretName: telemeter-client-tls