feat(monitoring): Scrape node and pod metrics, add logs and Pi dashboards

This commit is contained in:
2026-10-10 13:07:56 +05:30
parent a3c15d1aaa
commit 7c8bcd4ef7
15 changed files with 2314 additions and 110 deletions
-1
View File
@@ -9,7 +9,6 @@ data:
metadata:
name: ArgoCD
entries:
# Public client: the CLI can't keep a secret, so ArgoCD uses PKCE instead.
- model: authentik_providers_oauth2.oauth2provider
id: argocd-provider
identifiers:
-1
View File
@@ -24,7 +24,6 @@ data:
identifiers:
path: mounted/cm-blueprint-qbittorrent/qbittorrent.yaml
required: true
# Serves forward auth for the apps behind the authentik middleware.
- model: authentik_outposts.outpost
identifiers:
managed: goauthentik.io/outposts/embedded
@@ -9,8 +9,7 @@ data:
metadata:
name: WireGuard admin
entries:
# wg-easy rejects logins unless email_verified is true; the default email
# mapping always sends false.
# wg-easy requires email_verified, which the default mapping sends as false.
- model: authentik_providers_oauth2.scopemapping
id: verified-email
identifiers:
@@ -52,7 +51,7 @@ data:
name: WireGuard Admin
provider: !KeyOf wireguard-admin-provider
meta_launch_url: https://wg-admin.whyredfire.dev
# wg-easy makes every user it registers an admin, so only admins may log in.
# wg-easy makes every user an admin.
- model: authentik_policies.policybinding
identifiers:
order: 0
File diff suppressed because it is too large Load Diff
@@ -0,0 +1,213 @@
apiVersion: v1
kind: ConfigMap
metadata:
labels:
grafana_dashboard: "1"
name: grafana-dashboard-http-requests
namespace: monitoring
data:
http-requests.json: |
{
"uid": "http-requests",
"title": "HTTP requests",
"editable": true,
"schemaVersion": 41,
"refresh": "",
"time": {
"from": "now-1h",
"to": "now"
},
"timezone": "browser",
"tags": [],
"templating": {
"list": []
},
"panels": [
{
"type": "timeseries",
"title": "Requests by host",
"id": 1,
"datasource": {
"type": "loki",
"uid": "loki"
},
"gridPos": {
"h": 8,
"w": 12,
"x": 0,
"y": 0
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "loki",
"uid": "loki"
},
"expr": "sum by (RequestHost) (count_over_time({namespace=\"traefik\"} | json | __error__=\"\" | RequestHost != \"\" [$__auto]))",
"legendFormat": "{{RequestHost}}",
"queryType": "range"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "short",
"custom": {
"fillOpacity": 80,
"showPoints": "never",
"stacking": {
"mode": "normal"
},
"drawStyle": "bars"
}
},
"overrides": []
}
},
{
"type": "timeseries",
"title": "Responses by status",
"id": 2,
"datasource": {
"type": "loki",
"uid": "loki"
},
"gridPos": {
"h": 8,
"w": 12,
"x": 12,
"y": 0
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "loki",
"uid": "loki"
},
"expr": "sum by (DownstreamStatus) (count_over_time({namespace=\"traefik\"} | json | __error__=\"\" | RequestHost != \"\" [$__auto]))",
"legendFormat": "{{DownstreamStatus}}",
"queryType": "range"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "short",
"custom": {
"fillOpacity": 80,
"showPoints": "never",
"stacking": {
"mode": "normal"
},
"drawStyle": "bars"
}
},
"overrides": []
}
},
{
"type": "timeseries",
"title": "p95 response time by host",
"id": 3,
"datasource": {
"type": "loki",
"uid": "loki"
},
"gridPos": {
"h": 8,
"w": 24,
"x": 0,
"y": 8
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "loki",
"uid": "loki"
},
"expr": "quantile_over_time(0.95, {namespace=\"traefik\"} | json | __error__=\"\" | RequestHost != \"\" | unwrap Duration [$__auto]) by (RequestHost)",
"legendFormat": "{{RequestHost}}",
"queryType": "range"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "ns",
"custom": {
"fillOpacity": 10,
"showPoints": "never"
}
},
"overrides": []
}
},
{
"type": "logs",
"title": "Access log",
"id": 4,
"datasource": {
"type": "loki",
"uid": "loki"
},
"gridPos": {
"h": 12,
"w": 24,
"x": 0,
"y": 16
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "loki",
"uid": "loki"
},
"queryType": "range",
"expr": "{namespace=\"traefik\"} | json | __error__=\"\" | RequestHost != \"\" | line_format \"{{.DownstreamStatus}} {{.RequestMethod}} {{.RequestHost}}{{.RequestPath}} {{div .Duration 1000000}}ms {{.ClientHost}}\""
}
],
"options": {
"showTime": true,
"wrapLogMessage": false,
"sortOrder": "Descending",
"enableLogDetails": true,
"dedupStrategy": "none",
"showLabels": false
}
}
],
"annotations": {
"list": []
}
}
@@ -0,0 +1,985 @@
apiVersion: v1
kind: ConfigMap
metadata:
labels:
grafana_dashboard: "1"
name: grafana-dashboard-raspberry-pi
namespace: monitoring
data:
raspberry-pi.json: |
{
"uid": "raspberry-pi",
"title": "Raspberry Pi",
"editable": true,
"schemaVersion": 41,
"refresh": "1m",
"time": {
"from": "now-6h",
"to": "now"
},
"timezone": "browser",
"tags": [],
"templating": {
"list": [
{
"name": "namespace",
"label": "Namespace",
"type": "query",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"query": {
"query": "label_values(container_cpu_usage_seconds_total, namespace)",
"refId": "ns"
},
"definition": "label_values(container_cpu_usage_seconds_total, namespace)",
"multi": true,
"includeAll": true,
"current": {
"text": "All",
"value": "$__all"
},
"refresh": 2,
"sort": 1
}
]
},
"panels": [
{
"type": "row",
"title": "Node",
"id": 1,
"collapsed": false,
"gridPos": {
"h": 1,
"w": 24,
"x": 0,
"y": 0
},
"panels": []
},
{
"type": "stat",
"title": "CPU",
"id": 2,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 4,
"w": 4,
"x": 0,
"y": 1
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "100 * (1 - avg(rate(node_cpu_seconds_total{mode=\"idle\"}[$__rate_interval])))",
"instant": true
}
],
"options": {
"reduceOptions": {
"calcs": [
"lastNotNull"
]
},
"colorMode": "value",
"graphMode": "none"
},
"fieldConfig": {
"defaults": {
"unit": "percent",
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green",
"value": null
},
{
"color": "orange",
"value": 70
},
{
"color": "red",
"value": 90
}
]
},
"decimals": 0
},
"overrides": []
}
},
{
"type": "stat",
"title": "Memory",
"id": 3,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 4,
"w": 4,
"x": 4,
"y": 1
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "100 * (1 - node_memory_MemAvailable_bytes / node_memory_MemTotal_bytes)",
"instant": true
}
],
"options": {
"reduceOptions": {
"calcs": [
"lastNotNull"
]
},
"colorMode": "value",
"graphMode": "none"
},
"fieldConfig": {
"defaults": {
"unit": "percent",
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green",
"value": null
},
{
"color": "orange",
"value": 75
},
{
"color": "red",
"value": 90
}
]
},
"decimals": 0
},
"overrides": []
}
},
{
"type": "stat",
"title": "Disk /",
"id": 4,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 4,
"w": 4,
"x": 8,
"y": 1
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "100 * (1 - node_filesystem_avail_bytes{mountpoint=\"/\"} / node_filesystem_size_bytes{mountpoint=\"/\"})",
"instant": true
}
],
"options": {
"reduceOptions": {
"calcs": [
"lastNotNull"
]
},
"colorMode": "value",
"graphMode": "none"
},
"fieldConfig": {
"defaults": {
"unit": "percent",
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green",
"value": null
},
{
"color": "orange",
"value": 75
},
{
"color": "red",
"value": 90
}
]
},
"decimals": 0
},
"overrides": []
}
},
{
"type": "stat",
"title": "CPU temperature",
"id": 5,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 4,
"w": 4,
"x": 12,
"y": 1
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "node_thermal_zone_temp{type=\"cpu-thermal\"}",
"instant": true
}
],
"options": {
"reduceOptions": {
"calcs": [
"lastNotNull"
]
},
"colorMode": "value",
"graphMode": "none"
},
"fieldConfig": {
"defaults": {
"unit": "celsius",
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green",
"value": null
},
{
"color": "orange",
"value": 70
},
{
"color": "red",
"value": 80
}
]
},
"decimals": 0
},
"overrides": []
}
},
{
"type": "stat",
"title": "NVMe temperature",
"id": 6,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 4,
"w": 4,
"x": 16,
"y": 1
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "max(node_hwmon_temp_celsius{chip=\"nvme_nvme0\"})",
"instant": true
}
],
"options": {
"reduceOptions": {
"calcs": [
"lastNotNull"
]
},
"colorMode": "value",
"graphMode": "none"
},
"fieldConfig": {
"defaults": {
"unit": "celsius",
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green",
"value": null
},
{
"color": "orange",
"value": 60
},
{
"color": "red",
"value": 70
}
]
},
"decimals": 0
},
"overrides": []
}
},
{
"type": "stat",
"title": "Uptime",
"id": 7,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 4,
"w": 4,
"x": 20,
"y": 1
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "time() - node_boot_time_seconds",
"instant": true
}
],
"options": {
"reduceOptions": {
"calcs": [
"lastNotNull"
]
},
"colorMode": "value",
"graphMode": "none"
},
"fieldConfig": {
"defaults": {
"unit": "s",
"decimals": 0
},
"overrides": []
}
},
{
"type": "timeseries",
"title": "CPU",
"id": 8,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 8,
"w": 12,
"x": 0,
"y": 5
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "100 * (1 - avg(rate(node_cpu_seconds_total{mode=\"idle\"}[$__rate_interval])))",
"legendFormat": "used"
},
{
"refId": "B",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "100 * avg(rate(node_cpu_seconds_total{mode=\"iowait\"}[$__rate_interval]))",
"legendFormat": "iowait"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "percent",
"custom": {
"fillOpacity": 10,
"showPoints": "never"
}
},
"overrides": []
}
},
{
"type": "timeseries",
"title": "Memory",
"id": 9,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 8,
"w": 12,
"x": 12,
"y": 5
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes",
"legendFormat": "used"
},
{
"refId": "B",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "node_memory_MemAvailable_bytes",
"legendFormat": "available"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "bytes",
"custom": {
"fillOpacity": 10,
"showPoints": "never",
"stacking": {
"mode": "normal"
}
}
},
"overrides": []
}
},
{
"type": "timeseries",
"title": "Disk I/O",
"id": 10,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 8,
"w": 12,
"x": 0,
"y": 13
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "sum(rate(node_disk_read_bytes_total{device=~\"nvme.+n1|mmcblk0\"}[$__rate_interval]))",
"legendFormat": "read"
},
{
"refId": "B",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "sum(rate(node_disk_written_bytes_total{device=~\"nvme.+n1|mmcblk0\"}[$__rate_interval]))",
"legendFormat": "written"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "Bps",
"custom": {
"fillOpacity": 10,
"showPoints": "never"
}
},
"overrides": []
}
},
{
"type": "timeseries",
"title": "Network",
"id": 11,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 8,
"w": 12,
"x": 12,
"y": 13
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "rate(node_network_receive_bytes_total{device=~\"eth0|wlan0\"}[$__rate_interval])",
"legendFormat": "{{device}} in"
},
{
"refId": "B",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "rate(node_network_transmit_bytes_total{device=~\"eth0|wlan0\"}[$__rate_interval])",
"legendFormat": "{{device}} out"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "Bps",
"custom": {
"fillOpacity": 10,
"showPoints": "never"
}
},
"overrides": []
}
},
{
"type": "timeseries",
"title": "Temperatures",
"id": 12,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 7,
"w": 24,
"x": 0,
"y": 21
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "node_thermal_zone_temp{type=\"cpu-thermal\"}",
"legendFormat": "cpu"
},
{
"refId": "B",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "max(node_hwmon_temp_celsius{chip=\"nvme_nvme0\"})",
"legendFormat": "nvme"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "celsius",
"custom": {
"fillOpacity": 10,
"showPoints": "never"
}
},
"overrides": []
}
},
{
"type": "row",
"title": "Pods",
"id": 13,
"collapsed": false,
"gridPos": {
"h": 1,
"w": 24,
"x": 0,
"y": 28
},
"panels": []
},
{
"type": "timeseries",
"title": "CPU by namespace",
"id": 14,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 8,
"w": 12,
"x": 0,
"y": 29
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "sum by (namespace) (rate(container_cpu_usage_seconds_total{container!=\"\",namespace=~\"$namespace\"}[$__rate_interval]))",
"legendFormat": "{{namespace}}"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "cores",
"custom": {
"fillOpacity": 10,
"showPoints": "never",
"stacking": {
"mode": "normal"
}
}
},
"overrides": []
}
},
{
"type": "timeseries",
"title": "Memory by namespace",
"id": 15,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 8,
"w": 12,
"x": 12,
"y": 29
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "sum by (namespace) (container_memory_working_set_bytes{container!=\"\",namespace=~\"$namespace\"})",
"legendFormat": "{{namespace}}"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "bytes",
"custom": {
"fillOpacity": 10,
"showPoints": "never",
"stacking": {
"mode": "normal"
}
}
},
"overrides": []
}
},
{
"type": "timeseries",
"title": "Top pods by CPU",
"id": 16,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 8,
"w": 12,
"x": 0,
"y": 37
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "topk(10, sum by (namespace, pod) (rate(container_cpu_usage_seconds_total{container!=\"\",namespace=~\"$namespace\"}[$__rate_interval])))",
"legendFormat": "{{namespace}}/{{pod}}"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "cores",
"custom": {
"fillOpacity": 10,
"showPoints": "never"
}
},
"overrides": []
}
},
{
"type": "timeseries",
"title": "Top pods by memory",
"id": 17,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 8,
"w": 12,
"x": 12,
"y": 37
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "topk(10, sum by (namespace, pod) (container_memory_working_set_bytes{container!=\"\",namespace=~\"$namespace\"}))",
"legendFormat": "{{namespace}}/{{pod}}"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "bytes",
"custom": {
"fillOpacity": 10,
"showPoints": "never"
}
},
"overrides": []
}
},
{
"type": "timeseries",
"title": "Top pods by disk writes",
"id": 18,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 8,
"w": 12,
"x": 0,
"y": 45
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "topk(10, sum by (namespace, pod) (rate(container_fs_writes_bytes_total{container!=\"\",namespace=~\"$namespace\"}[$__rate_interval])))",
"legendFormat": "{{namespace}}/{{pod}}"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "Bps",
"custom": {
"fillOpacity": 10,
"showPoints": "never"
}
},
"overrides": []
}
},
{
"type": "timeseries",
"title": "Network by namespace",
"id": 19,
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"gridPos": {
"h": 8,
"w": 12,
"x": 12,
"y": 45
},
"targets": [
{
"refId": "A",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "sum by (namespace) (rate(container_network_receive_bytes_total{namespace=~\"$namespace\"}[$__rate_interval]))",
"legendFormat": "{{namespace}} in"
},
{
"refId": "B",
"datasource": {
"type": "prometheus",
"uid": "prometheus"
},
"expr": "-sum by (namespace) (rate(container_network_transmit_bytes_total{namespace=~\"$namespace\"}[$__rate_interval]))",
"legendFormat": "{{namespace}} out"
}
],
"options": {
"legend": {
"displayMode": "list",
"placement": "bottom"
},
"tooltip": {
"mode": "multi",
"sort": "desc"
}
},
"fieldConfig": {
"defaults": {
"unit": "Bps",
"custom": {
"fillOpacity": 10,
"showPoints": "never"
}
},
"overrides": []
}
}
],
"annotations": {
"list": []
}
}
@@ -1,8 +1,10 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- dashboard-application-logs.yaml
- dashboard-http-requests.yaml
- dashboard-raspberry-pi.yaml
- grafana-admin-sealedsecret.yaml
- grafana-db-sealedsecret.yaml
- grafana-oidc-sealedsecret.yaml
- httproute.yaml
- scrapeconfigs.yaml
@@ -1,59 +0,0 @@
# k3s control plane (bound in /etc/rancher/k3s/config.yaml); every endpoint also serves apiserver series.
apiVersion: monitoring.coreos.com/v1alpha1
kind: ScrapeConfig
metadata:
name: kube-controller-manager
namespace: monitoring
spec:
jobName: kube-controller-manager
scheme: HTTPS
tlsConfig:
insecureSkipVerify: true
authorization:
credentials:
name: kube-prometheus-stack-prometheus-token
key: token
staticConfigs:
- targets:
- 192.168.2.5:10257
metricRelabelings:
- action: drop
sourceLabels: [__name__]
regex: (apiserver|etcd|kine)_.*
---
apiVersion: monitoring.coreos.com/v1alpha1
kind: ScrapeConfig
metadata:
name: kube-scheduler
namespace: monitoring
spec:
jobName: kube-scheduler
scheme: HTTPS
tlsConfig:
insecureSkipVerify: true
authorization:
credentials:
name: kube-prometheus-stack-prometheus-token
key: token
staticConfigs:
- targets:
- 192.168.2.5:10259
metricRelabelings:
- action: drop
sourceLabels: [__name__]
regex: (apiserver|etcd|kine)_.*
---
apiVersion: monitoring.coreos.com/v1alpha1
kind: ScrapeConfig
metadata:
name: kube-proxy
namespace: monitoring
spec:
jobName: kube-proxy
staticConfigs:
- targets:
- 192.168.2.5:10249
metricRelabelings:
- action: drop
sourceLabels: [__name__]
regex: (apiserver|etcd|kine)_.*
+1 -3
View File
@@ -37,9 +37,7 @@ spec:
passwordSecret:
name: redoost-db
postgresql:
# Each app role may only connect to the database of the same name.
# pgweb is read-only and may browse every database except authentik's,
# which holds credentials and session tokens.
# Each app role may only connect to its own database; pgweb to all but authentik.
pg_hba:
- host sameuser all all scram-sha-256
- host authentik pgweb all reject