github.com/m3db/m3@v1.5.0/scripts/vagrant/provision/manifests/kube-prometheus/node-exporter-daemonset.yaml (about)

     1  apiVersion: apps/v1
     2  kind: DaemonSet
     3  metadata:
     4    labels:
     5      app: node-exporter
     6    name: node-exporter
     7    namespace: monitoring
     8  spec:
     9    selector:
    10      matchLabels:
    11        app: node-exporter
    12    template:
    13      metadata:
    14        labels:
    15          app: node-exporter
    16      spec:
    17        containers:
    18        - args:
    19          - --web.listen-address=127.0.0.1:9100
    20          - --path.procfs=/host/proc
    21          - --path.sysfs=/host/sys
    22          - --path.rootfs=/host/root
    23          - --collector.filesystem.ignored-mount-points=^/(dev|proc|sys|var/lib/docker/.+)($|/)
    24          - --collector.filesystem.ignored-fs-types=^(autofs|binfmt_misc|cgroup|configfs|debugfs|devpts|devtmpfs|fusectl|hugetlbfs|mqueue|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|sysfs|tracefs)$
    25          image: quay.io/prometheus/node-exporter:v0.17.0
    26          name: node-exporter
    27          resources:
    28            limits:
    29              cpu: 250m
    30              memory: 180Mi
    31            requests:
    32              cpu: 102m
    33              memory: 180Mi
    34          volumeMounts:
    35          - mountPath: /host/proc
    36            name: proc
    37            readOnly: false
    38          - mountPath: /host/sys
    39            name: sys
    40            readOnly: false
    41          - mountPath: /host/root
    42            mountPropagation: HostToContainer
    43            name: root
    44            readOnly: true
    45        - args:
    46          - --logtostderr
    47          - --secure-listen-address=$(IP):9100
    48          - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
    49          - --upstream=http://127.0.0.1:9100/
    50          env:
    51          - name: IP
    52            valueFrom:
    53              fieldRef:
    54                fieldPath: status.podIP
    55          image: quay.io/coreos/kube-rbac-proxy:v0.4.1
    56          name: kube-rbac-proxy
    57          ports:
    58          - containerPort: 9100
    59            hostPort: 9100
    60            name: https
    61          resources:
    62            limits:
    63              cpu: 20m
    64              memory: 60Mi
    65            requests:
    66              cpu: 10m
    67              memory: 20Mi
    68        hostNetwork: true
    69        hostPID: true
    70        nodeSelector:
    71          beta.kubernetes.io/os: linux
    72        securityContext:
    73          runAsNonRoot: true
    74          runAsUser: 65534
    75        serviceAccountName: node-exporter
    76        tolerations:
    77        - effect: NoExecute
    78          operator: Exists
    79        - effect: NoSchedule
    80          operator: Exists
    81        volumes:
    82        - hostPath:
    83            path: /proc
    84          name: proc
    85        - hostPath:
    86            path: /sys
    87          name: sys
    88        - hostPath:
    89            path: /
    90          name: root