Add recommendation for prometheus exporter (#144)
This commit is contained in:
kfox1111
@@ -162,6 +162,7 @@ Now you can interact with the Spire agent socket from your own application. The
|
|||||||
| `global.spire.recommendations.priorityClassName` | Set to true to use recommended values for Pod Priority Class Names | `true` |
|
| `global.spire.recommendations.priorityClassName` | Set to true to use recommended values for Pod Priority Class Names | `true` |
|
||||||
| `global.spire.recommendations.strictMode` | Check values, such as trustDomain, are overridden with a suitable value for production. | `true` |
|
| `global.spire.recommendations.strictMode` | Check values, such as trustDomain, are overridden with a suitable value for production. | `true` |
|
||||||
| `global.spire.recommendations.securityContexts` | Set to true to use recommended values for Pod and Container Security Contexts | `true` |
|
| `global.spire.recommendations.securityContexts` | Set to true to use recommended values for Pod and Container Security Contexts | `true` |
|
||||||
|
| `global.spire.recommendations.prometheus` | Enable prometheus exporters for monitoring | `true` |
|
||||||
| `global.spire.image.registry` | Override all Spire image registries at once | `""` |
|
| `global.spire.image.registry` | Override all Spire image registries at once | `""` |
|
||||||
| `global.spire.namespaces.system.name` | Name of the Spire system Namespace. | `spire-system` |
|
| `global.spire.namespaces.system.name` | Name of the Spire system Namespace. | `spire-system` |
|
||||||
| `global.spire.namespaces.system.create` | Create a Namespace for Spire system resources. | `false` |
|
| `global.spire.namespaces.system.create` | Create a Namespace for Spire system resources. | `false` |
|
||||||
|
|||||||
@@ -95,7 +95,7 @@ spec:
|
|||||||
readOnly: false
|
readOnly: false
|
||||||
resources:
|
resources:
|
||||||
{{- toYaml .Values.insecureScheme.nginx.resources | nindent 12 }}
|
{{- toYaml .Values.insecureScheme.nginx.resources | nindent 12 }}
|
||||||
{{- if (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) }}
|
{{- if or (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) (and (dig "spire" "recommendations" "enabled" false .Values.global) (dig "spire" "recommendations" "prometheus" true .Values.global)) }}
|
||||||
- name: nginx-exporter
|
- name: nginx-exporter
|
||||||
securityContext:
|
securityContext:
|
||||||
{{- include "spire-lib.securitycontext" . | nindent 12 }}
|
{{- include "spire-lib.securitycontext" . | nindent 12 }}
|
||||||
|
|||||||
@@ -86,7 +86,7 @@ health_checks:
|
|||||||
live_path: "/live"
|
live_path: "/live"
|
||||||
ready_path: "/ready"
|
ready_path: "/ready"
|
||||||
|
|
||||||
{{- if (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) }}
|
{{- if or (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) (and (dig "spire" "recommendations" "enabled" false .Values.global) (dig "spire" "recommendations" "prometheus" true .Values.global)) }}
|
||||||
telemetry:
|
telemetry:
|
||||||
- Prometheus:
|
- Prometheus:
|
||||||
- host: "0.0.0.0"
|
- host: "0.0.0.0"
|
||||||
|
|||||||
@@ -86,7 +86,7 @@ spec:
|
|||||||
ports:
|
ports:
|
||||||
- containerPort: {{ .Values.healthChecks.port }}
|
- containerPort: {{ .Values.healthChecks.port }}
|
||||||
name: healthz
|
name: healthz
|
||||||
{{- if (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) }}
|
{{- if or (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) (and (dig "spire" "recommendations" "enabled" false .Values.global) (dig "spire" "recommendations" "prometheus" true .Values.global)) }}
|
||||||
- containerPort: {{ .Values.telemetry.prometheus.port }}
|
- containerPort: {{ .Values.telemetry.prometheus.port }}
|
||||||
name: prom
|
name: prom
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|||||||
@@ -242,7 +242,7 @@ health_checks:
|
|||||||
live_path: "/live"
|
live_path: "/live"
|
||||||
ready_path: "/ready"
|
ready_path: "/ready"
|
||||||
|
|
||||||
{{- if (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) }}
|
{{- if or (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) (and (dig "spire" "recommendations" "enabled" false .Values.global) (dig "spire" "recommendations" "prometheus" true .Values.global)) }}
|
||||||
telemetry:
|
telemetry:
|
||||||
- Prometheus:
|
- Prometheus:
|
||||||
- host: "0.0.0.0"
|
- host: "0.0.0.0"
|
||||||
|
|||||||
@@ -125,7 +125,7 @@ spec:
|
|||||||
protocol: TCP
|
protocol: TCP
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) }}
|
{{- if or (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) (and (dig "spire" "recommendations" "enabled" false .Values.global) (dig "spire" "recommendations" "prometheus" true .Values.global)) }}
|
||||||
- containerPort: 9988
|
- containerPort: 9988
|
||||||
name: prom
|
name: prom
|
||||||
{{- end }}
|
{{- end }}
|
||||||
@@ -198,7 +198,7 @@ spec:
|
|||||||
protocol: TCP
|
protocol: TCP
|
||||||
- containerPort: 8083
|
- containerPort: 8083
|
||||||
name: healthz
|
name: healthz
|
||||||
{{- if (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) }}
|
{{- if or (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) (and (dig "spire" "recommendations" "enabled" false .Values.global) (dig "spire" "recommendations" "prometheus" true .Values.global)) }}
|
||||||
- containerPort: 8082
|
- containerPort: 8082
|
||||||
name: prom2
|
name: prom2
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|||||||
@@ -25,11 +25,13 @@ global:
|
|||||||
## @param global.spire.recommendations.priorityClassName Set to true to use recommended values for Pod Priority Class Names
|
## @param global.spire.recommendations.priorityClassName Set to true to use recommended values for Pod Priority Class Names
|
||||||
## @param global.spire.recommendations.strictMode Check values, such as trustDomain, are overridden with a suitable value for production.
|
## @param global.spire.recommendations.strictMode Check values, such as trustDomain, are overridden with a suitable value for production.
|
||||||
## @param global.spire.recommendations.securityContexts Set to true to use recommended values for Pod and Container Security Contexts
|
## @param global.spire.recommendations.securityContexts Set to true to use recommended values for Pod and Container Security Contexts
|
||||||
|
## @param global.spire.recommendations.prometheus Enable prometheus exporters for monitoring
|
||||||
recommendations:
|
recommendations:
|
||||||
enabled: false
|
enabled: false
|
||||||
priorityClassName: true
|
priorityClassName: true
|
||||||
strictMode: true
|
strictMode: true
|
||||||
securityContexts: true
|
securityContexts: true
|
||||||
|
prometheus: true
|
||||||
|
|
||||||
image:
|
image:
|
||||||
## @param global.spire.image.registry Override all Spire image registries at once
|
## @param global.spire.image.registry Override all Spire image registries at once
|
||||||
|
|||||||
@@ -1,7 +1,4 @@
|
|||||||
global:
|
global:
|
||||||
telemetry:
|
|
||||||
prometheus:
|
|
||||||
enabled: true
|
|
||||||
spire:
|
spire:
|
||||||
recommendations:
|
recommendations:
|
||||||
enabled: true
|
enabled: true
|
||||||
|
|||||||
Reference in New Issue
Block a user