Files
homelab-infra/platform/observability/metrics/scrapes/openbao.yaml
T
panxiao81 7137426e8f
yaml / yaml (push) Successful in 1m28s
ansible / collection-test (push) Successful in 2m27s
ansible / lint (push) Successful in 8m18s
补齐 OpenBao 内部健康与快照新鲜度告警
Co-authored-by: panxiao81 <[email protected]>
2026-09-25 20:59:36 +00:00

109 lines
2.2 KiB
YAML

apiVersion: v1
kind: ConfigMap
metadata:
name: bao-metrics-agent
namespace: monitoring
data:
config.hcl: "disable_mlock = true\nexit_after_auth = false\nvault {\n address =\
\ \"https://bao.ad.ddupan.top:8200\"\n}\nauto_auth {\n method \"kubernetes\"\
\ {\n mount_path = \"auth/kubernetes\"\n config = {\n role = \"metrics\"\
\n token_path = \"/var/run/bao-jwt/token\"\n }\n }\n sink \"file\" {\n\
\ config = {\n path = \"/var/run/bao-metrics/token\"\n mode = 0644\n\
\ }\n }\n}\n"
---
apiVersion: v1
kind: Service
metadata:
name: openbao-metrics
namespace: monitoring
labels:
app.kubernetes.io/name: openbao-metrics
spec:
ports:
- name: https
port: 8200
targetPort: 8200
---
apiVersion: v1
kind: Endpoints
metadata:
name: openbao-metrics
namespace: monitoring
subsets:
- addresses:
- ip: 192.168.10.8
ports:
- name: https
port: 8200
protocol: TCP
---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: openbao
namespace: monitoring
spec:
selector:
matchLabels:
app.kubernetes.io/name: openbao-metrics
endpoints:
- port: https
scheme: https
path: /v1/sys/metrics
params:
format:
- prometheus
interval: 30s
scrapeTimeout: 10s
bearerTokenFile: /var/run/bao-metrics/token
tlsConfig:
serverName: bao.ad.ddupan.top
relabelings:
- targetLabel: job
replacement: openbao
---
apiVersion: v1
kind: Service
metadata:
name: openbao-node-metrics
namespace: monitoring
labels:
app.kubernetes.io/name: openbao-node-metrics
spec:
ports:
- name: http
port: 9100
targetPort: 9100
---
apiVersion: v1
kind: Endpoints
metadata:
name: openbao-node-metrics
namespace: monitoring
subsets:
- addresses:
- ip: 192.168.10.8
ports:
- name: http
port: 9100
protocol: TCP
---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: openbao-node
namespace: monitoring
spec:
selector:
matchLabels:
app.kubernetes.io/name: openbao-node-metrics
endpoints:
- port: http
interval: 30s
scrapeTimeout: 10s
relabelings:
- targetLabel: job
replacement: node-exporter
- targetLabel: node
replacement: bao1