feat(kube_state_metrics): don't deploy if not enabled

!8
This commit is contained in:
2024-02-04 15:38:19 +09:30
parent bc4d72ff8e
commit 9c35a4d140
7 changed files with 52 additions and 31 deletions

View File

@ -1,3 +1,4 @@
{{ if .Values.nfc_monitoring.kube_state_metrics.enabled }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
@ -18,3 +19,5 @@ subjects:
- kind: ServiceAccount
name: kube-state-metrics
namespace: monitoring
{{ end }}

View File

@ -1,3 +1,4 @@
{{ if .Values.nfc_monitoring.kube_state_metrics.enabled }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
@ -130,3 +131,5 @@ rules:
verbs:
- list
- watch
{{ end }}

View File

@ -1,3 +1,4 @@
{{ if .Values.nfc_monitoring.kube_state_metrics.enabled }}
---
apiVersion: apps/v1
kind: Deployment
@ -110,3 +111,5 @@ spec:
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: kube-state-metrics
{{ end }}

View File

@ -1,31 +1,35 @@
# apiVersion: networking.k8s.io/v1
# kind: NetworkPolicy
# metadata:
# labels:
# app.kubernetes.io/component: exporter
# app.kubernetes.io/name: kube-state-metrics
# app.kubernetes.io/part-of: kube-prometheus
# app.kubernetes.io/version: 2.8.1
# name: kube-state-metrics
# namespace: monitoring
# spec:
# egress:
# - {}
# ingress:
# - from:
# - podSelector:
# matchLabels:
# app.kubernetes.io/name: prometheus
# ports:
# - port: 8443
# protocol: TCP
# - port: 9443
# protocol: TCP
# podSelector:
# matchLabels:
# app.kubernetes.io/component: exporter
# app.kubernetes.io/name: kube-state-metrics
# app.kubernetes.io/part-of: kube-prometheus
# policyTypes:
# - Egress
# - Ingress
{{ if .Values.nfc_monitoring.kube_state_metrics.enabled }}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
labels:
app.kubernetes.io/component: exporter
app.kubernetes.io/name: kube-state-metrics
app.kubernetes.io/part-of: kube-prometheus
app.kubernetes.io/version: 2.8.1
name: kube-state-metrics
namespace: monitoring
spec:
egress:
- {}
ingress:
- from:
- podSelector:
matchLabels:
app.kubernetes.io/name: prometheus
ports:
- port: 8443
protocol: TCP
- port: 9443
protocol: TCP
podSelector:
matchLabels:
app.kubernetes.io/component: exporter
app.kubernetes.io/name: kube-state-metrics
app.kubernetes.io/part-of: kube-prometheus
policyTypes:
- Egress
- Ingress
{{ end }}

View File

@ -1,3 +1,4 @@
{{ if .Values.nfc_monitoring.kube_state_metrics.enabled }}
---
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
@ -65,3 +66,5 @@ spec:
for: 15m
labels:
severity: critical
{{ end }}

View File

@ -1,3 +1,4 @@
{{ if .Values.nfc_monitoring.kube_state_metrics.enabled }}
---
apiVersion: v1
kind: Service
@ -26,3 +27,4 @@ spec:
app.kubernetes.io/name: kube-state-metrics
app.kubernetes.io/part-of: {{ $.Chart.Name }}
{{ end }}

View File

@ -1,3 +1,4 @@
{{ if .Values.nfc_monitoring.kube_state_metrics.enabled }}
---
apiVersion: v1
automountServiceAccountToken: false
@ -12,3 +13,5 @@ metadata:
app.kubernetes.io/version: {{ $.Chart.Version }}
name: kube-state-metrics
namespace: monitoring
{{ end }}