mirror/ typhoon
1
0
Fork 0
mirror of https://github.com/poseidon/typhoon synced 2024-05-04 14:46:13 +02:00
Code Issues
1,636 Commits 7 Branches 115 Tags 18 MiB
Commit Graph

380 Commits

Author SHA1 Message Date
8ball030 af719e46f2
feat ensured that appropriate rbacs are set to allow the ingressclass on gcp (#1409) 2024-01-12 20:16:10 -08:00
Dalton Hubble ce52a2cd35 Update Nginx Ingress and monitoring addon components 
* Update ingress-nginx, Prometheus, node-exporter, and
  kube-state-metrics
 2022-12-05 09:38:38 -08:00
Dalton Hubble f597f7cda3 Update Prometheus and Grafana addons 2022-11-23 11:06:03 -08:00
Dalton Hubble 26dbc7e91d Update Kubernetes from v1.25.3 to v1.25.4 
* Update Calico from v3.24.3 to v3.24.5
* Update Prometheus and Grafana addons
 2022-11-10 09:42:21 -08:00
Dalton Hubble b4c8b1729c Switch addons images from k8s.gcr.io to registry.k8s.io 
* Switch addon manifests to use the new Kubernetes image registry

Rel:

* https://github.com/poseidon/typhoon/pull/1206
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.25.md#moved-container-registry-service-from-k8sgcrio-to-registryk8sio
 2022-10-09 16:14:28 -07:00
Dalton Hubble e82241169a Update Prometheus from v2.38.0 to v2.39.1 
* https://github.com/prometheus/prometheus/releases/tag/v2.39.1
 2022-10-09 16:12:35 -07:00
Dalton Hubble 558e293f78 Update Nginx Ingress and Grafana addons 2022-09-20 08:28:30 -07:00
Dalton Hubble 5f612c82e2 Update kube-state-metrics and Grafana addons 2022-09-01 08:58:32 -07:00
Dalton Hubble bf06412dfd Update Prometheus and Grafana addons 2022-08-21 08:56:00 -07:00
Dalton Hubble b321b90a4f Update Grafana from v9.0.6 to v9.0.7 2022-08-13 15:39:44 -07:00
Dalton Hubble 679f8b878f Update Grafana from v9.0.5 to v9.0.6 2022-08-10 08:23:04 -07:00
Dalton Hubble 6eb7861f96 Update Grafana liveness and readiness probes 
* Use the liveness and readiness probes that Grafana recommends
* Update Grafana from v9.0.3 to v9.0.5
 2022-08-08 09:22:44 -07:00
Dalton Hubble ffbacbccf7 Update node-exporter DaemonSet to fix permission denied 
* Add toleration to run node-exporter on controller nodes
* Add HostToContainer mount propagation and security context group
settings from upstream
* Fix SELinux denied accessing /host/proc/1/mounts. The mounts file
is has an SELinux type attribute init_t, but that won't allow running
the node-exporter binary so we have to use spc_t. This should be more
targeted at just the SELinux issue than making the Pod privileged
* Remove excluded mount points and filesystem types, the defaults are
https://github.com/prometheus/node_exporter/blob/v1.3.1/collector/filesystem_linux.go#L35

```
caller=collector.go:169 level=error msg="collector failed" name=filesystem duration_seconds=0.000666766 err="open /host/proc/1/mounts: permission denied"
```

```
[ 3664.880899] audit: type=1400 audit(1659639161.568:4400): avc:  denied  { search } for  pid=28325 comm="node_exporter" name="1" dev="proc" ino=22542 scontext=system_u:system_r:container_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=dir permissive=0
```
 2022-08-08 09:19:46 -07:00
Dalton Hubble 767a653baa Update Prometheus, Grafana, and ingress-nginx addons 
* Update ingress-nginx RBAC Role to include coordination.k8s.io leases
permissions that are required with ingress-nginx v1.3.0
 2022-07-15 20:19:12 -07:00
Dalton Hubble 42bf82b325 Update Prometheus and Grafana addons 
* Bump recommended Terraform provider versions
 2022-07-02 11:28:34 -07:00
Dalton Hubble 2a8915fee9 Update Prometheus, kube-state-metrics, and Grafana addons 
* Update monitoring addons
 2022-06-18 18:32:17 -07:00
Dalton Hubble 31c7f0ba0e Update nginx-ingress addon from v1.2.0 to v1.2.1 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.2.1
 2022-05-31 16:37:57 +01:00
Dalton Hubble 8e8bf305c3 Update Prometheus and Grafana addons 2022-05-31 14:29:55 +01:00
Dalton Hubble 02f78fbd1a Update Grafana from v8.4.5 to v8.5.1 2022-05-02 08:19:41 -07:00
Dalton Hubble a122867748 Update nginx-ingress, Prometheus, and Grafana addons 
* Sync addons with versions used in Poseidon
 2022-04-27 21:02:32 -07:00
Dalton Hubble d91408258b Update nginx-ingress, Prometheus, and Grafana addons 2022-04-04 08:53:29 -07:00
Dalton Hubble b47edca6be Refresh Prometheus rules and Grafana dashboards 
* Update Prometheus rules and Grafana dashboards
* Add new networking dashboards
 2022-03-19 17:08:00 -07:00
Dalton Hubble dca745fa4a Update monitoring addon components 
* Update Prometheus, kube-state-metrics, and Grafana
 2022-03-11 11:50:16 -08:00
Dalton Hubble 661347fa71 Update nginx-ingress from v1.1.1 to v1.1.2 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.1.2
 2022-03-11 11:42:33 -08:00
Dalton Hubble 6cf40722de Revert kube-state-metrics upgrade 
* kube-state-metrics:v2.4.0 isn't published, skip it
 2022-02-21 19:57:47 -08:00
Dalton Hubble c230cdec46 Update Grafana and kube-state-metrics addons 2022-02-21 19:36:16 -08:00
Dalton Hubble 28a42238c4 Update nginx-ingress, Prometheus, and Grafana addons 
* Align `nginx-ingress` `--controller-class` with `IngressClass`
to provide a better example (e.g. if extended to multiple ingress
controllers)
 2022-02-17 08:58:29 -08:00
Dalton Hubble 3da8c1575c Update nginx-ingress and Grafana addons 2022-01-19 21:09:21 -08:00
Dalton Hubble 50215e373b Add Prometheus config for monitoring Kubernetes Ingress 
* Allow Kubernetes Ingress resources to be probed via Blackbox
Exporter (if present) if annotated `prometheus.io/probe: "true"`
* Fix probes of Services via Blackbox Exporter. Require Blackbox
Exporter to be deployed in the same `monitoring` namespace, be
named `blackbox-exporter`, and use port 8080
 2021-12-29 11:57:50 -08:00
Dalton Hubble a9f9c59b91 Configure Prometheus to allow a custom scrape query param 
* Set `prometheus.io/param` on a Kubernetes Service to scrape
the service endpoints and pass a custom query parameter
* For example, scrape Consul with `?format=prometheus`

```yaml
kind: Service
metadata:
  annotations:
    prometheus.io/scrape: 'true'
    prometheus.io/port: '8500'
    prometheus.io/path: /v1/agent/metrics
    prometheus.io/param: format=prometheus
```
 2021-12-29 11:47:10 -08:00
Dalton Hubble bb5e5811ec Update Prometheus and Grafana addons 2021-12-15 08:16:46 -08:00
Dalton Hubble 43c6558aaf Update nginx-ingress and monitoring addons 2021-12-10 11:29:49 -08:00
Dalton Hubble 5d7b6f611e Update nginx-ingess and Prometheus exporter addons 2021-11-21 09:28:17 -08:00
Dalton Hubble b934a13605 Update Prometheus and Grafana addons 2021-11-07 17:00:40 -08:00
Dalton Hubble 20748536df Update nginx-ingress from v1.0.2 to v1.0.4 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.0.4
 2021-10-17 11:17:43 -07:00
Dalton Hubble f2e6256dd9 Update Prometheus, kube-state-metrics, and Grafana 
* Update monitoring addons
 2021-10-17 11:15:39 -07:00
Dalton Hubble 15117fb95b Update Prometheus and nginx-ingress 2021-10-05 19:15:58 -07:00
Dalton Hubble 209efd2f5b Update Prometheus, Grafana, and kube-state-metrics 2021-09-29 23:39:10 -07:00
Dalton Hubble 5a1e455220 Update nginx-ingress from v1.0.0 to v1.0.1 2021-09-24 09:38:18 -07:00
Dalton Hubble 69f37c8b17 Update Prometheus from v2.29.2 to v2.30.0 2021-09-24 09:34:00 -07:00
Dalton Hubble bb7f31822e Update Kubernetes from v1.22.1 to v1.22.2 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md#v1222
 2021-09-15 19:56:24 -07:00
Dalton Hubble eb29fb639b Update nginx-ingress, Prometheus, and Grafana addons 2021-08-24 22:14:57 -07:00
Dalton Hubble c5cf803634 Update Grafana and kube-state-metrics addons 2021-08-10 22:17:16 -07:00
Dalton Hubble cbef202eec Update Prometheus discovery of kube components 
* Kubernetes v1.22.0 disabled kube-controller-manager insecure
port, which was used internally for Prometheus metrics scraping
* Configure Prometheus to discover and scrape endpoints for
kube-scheduler and kube-controller-manager via the authenticated
https ports, via bearer token
* Change firewall ports to allow Prometheus (on worker nodes)
to scrape kube-scheduler and kube-controller-manager targets
that run on controller(s) with hostNetwork
* Disable the insecure port on kube-scheduler
 2021-08-10 21:25:19 -07:00
Dalton Hubble 0c99b909a9 Update nginx-ingress from v0.47.0 to v1.0.0-beta.1 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.0.0-beta.1
 2021-08-07 12:46:00 -07:00
Dalton Hubble 739db3b35f Update Grafana and node-exporter addons 
* https://github.com/grafana/grafana/releases/tag/v8.1.0
* https://github.com/prometheus/node_exporter/releases/tag/v1.2.1
 2021-08-05 23:24:57 -07:00
Dalton Hubble c734fa7b84 Update node-exporter from v1.1.2 to v1.2.0 
* https://github.com/prometheus/node_exporter/releases/tag/v1.2.0
 2021-07-18 15:26:44 -07:00
Dalton Hubble 545bd79624 Update Grafana from v8.0.4 to v8.0.6 
* https://github.com/grafana/grafana/releases/tag/v8.0.6
 2021-07-16 12:02:36 -07:00
Dalton Hubble c7e327417b Update Prometheus and Grafana addons 2021-07-04 10:02:44 -07:00
Dalton Hubble b0e9b1fa60 Update Prometheus and Grafana addons 
* https://github.com/prometheus/prometheus/releases/tag/v2.28.0
* https://github.com/grafana/grafana/releases/tag/v8.0.3
 2021-06-27 14:46:43 -07:00