171 lines
5.0 KiB
YAML
171 lines
5.0 KiB
YAML
# ------------------------------------------------------------------------------
|
|
# kube-prometheus-stack — Helm Values
|
|
# Chart: https://prometheus-community.github.io/helm-charts
|
|
# Version: 70.4.2
|
|
# ------------------------------------------------------------------------------
|
|
|
|
# ─── Global ───────────────────────────────────────────────────────────────────
|
|
fullnameOverride: ""
|
|
|
|
# ─── Alertmanager ─────────────────────────────────────────────────────────────
|
|
# Deployed but unconfigured — wire into n8n later
|
|
alertmanager:
|
|
enabled: true
|
|
alertmanagerSpec:
|
|
storage:
|
|
volumeClaimTemplate:
|
|
spec:
|
|
storageClassName: nfs-emporium
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: 5Gi
|
|
|
|
# ─── Prometheus ───────────────────────────────────────────────────────────────
|
|
prometheus:
|
|
prometheusSpec:
|
|
# Retention
|
|
retention: 30d
|
|
retentionSize: "45GB"
|
|
|
|
# Storage — NFS via csi-driver-nfs
|
|
storageSpec:
|
|
volumeClaimTemplate:
|
|
spec:
|
|
storageClassName: nfs-emporium
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: 50Gi
|
|
|
|
# Scrape all ServiceMonitors and PodMonitors regardless of namespace
|
|
serviceMonitorSelectorNilUsesHelmValues: false
|
|
podMonitorSelectorNilUsesHelmValues: false
|
|
ruleSelectorNilUsesHelmValues: false
|
|
|
|
# Resource limits — fastpass workers have reasonable headroom
|
|
resources:
|
|
requests:
|
|
cpu: 200m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 2Gi
|
|
|
|
# ─── Grafana ──────────────────────────────────────────────────────────────────
|
|
grafana:
|
|
enabled: true
|
|
|
|
# Stateless — dashboards managed as ConfigMaps, no PVC needed
|
|
persistence:
|
|
enabled: false
|
|
|
|
# Admin credentials via ESO from 1Password
|
|
admin:
|
|
existingSecret: grafana-admin-secret
|
|
userKey: admin-user
|
|
passwordKey: admin-password
|
|
|
|
# Grafana URL — used for redirects and OAuth callbacks
|
|
grafana.ini:
|
|
server:
|
|
root_url: https://grafana.local.mk-labs.cloud
|
|
auth:
|
|
disable_login_form: false
|
|
|
|
# Default dashboards
|
|
defaultDashboardsEnabled: true
|
|
defaultDashboardsTimezone: browser
|
|
|
|
# Node Exporter Full — dashboard 1860
|
|
dashboardProviders:
|
|
dashboardproviders.yaml:
|
|
apiVersion: 1
|
|
providers:
|
|
- name: default
|
|
orgId: 1
|
|
folder: ""
|
|
type: file
|
|
disableDeletion: false
|
|
editable: true
|
|
options:
|
|
path: /var/lib/grafana/dashboards/default
|
|
|
|
dashboards:
|
|
default:
|
|
node-exporter-full:
|
|
gnetId: 1860
|
|
revision: 37
|
|
datasource: Prometheus
|
|
kubernetes-cluster:
|
|
gnetId: 7249
|
|
revision: 1
|
|
datasource: Prometheus
|
|
kubernetes-pods:
|
|
gnetId: 6336
|
|
revision: 1
|
|
datasource: Prometheus
|
|
|
|
# Sidecar for ConfigMap-based dashboards
|
|
sidecar:
|
|
dashboards:
|
|
enabled: true
|
|
searchNamespace: ALL
|
|
label: grafana_dashboard
|
|
labelValue: "1"
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
|
|
# ─── Node Exporter ────────────────────────────────────────────────────────────
|
|
nodeExporter:
|
|
enabled: true
|
|
|
|
prometheus-node-exporter:
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
|
|
# ─── kube-state-metrics ───────────────────────────────────────────────────────
|
|
kubeStateMetrics:
|
|
enabled: true
|
|
|
|
# ─── Prometheus Operator ──────────────────────────────────────────────────────
|
|
prometheusOperator:
|
|
enabled: true
|
|
|
|
# ─── Component scraping ───────────────────────────────────────────────────────
|
|
kubeApiServer:
|
|
enabled: true
|
|
|
|
kubelet:
|
|
enabled: true
|
|
|
|
kubeControllerManager:
|
|
enabled: true
|
|
|
|
kubeScheduler:
|
|
enabled: true
|
|
|
|
kubeProxy:
|
|
enabled: false # Cilium replaces kube-proxy
|
|
|
|
kubeEtcd:
|
|
enabled: true
|
|
endpoints:
|
|
- 10.1.71.66
|
|
- 10.1.71.67
|
|
- 10.1.71.68
|
|
service:
|
|
enabled: true
|
|
port: 2381
|
|
targetPort: 2381
|