github.com/verrazzano/verrazzano@v1.7.1/platform-operator/helm_config/overrides/kube-state-metrics-values.yaml (about)

     1  # Copyright (c) 2022, 2023, Oracle and/or its affiliates.
     2  # Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl.
     3  
     4  # Enable adding a release label for kube-prometheus-stack scraping (see kube-state-metrics chart templates/_helpers.tpl)
     5  releaseLabel: true
     6  customLabels:
     7    sidecar.istio.io/inject: "false"
     8  prometheus:
     9    monitor:
    10      honorLabels: true
    11      metricRelabelings:
    12        # Add verrazzano_component label
    13        - action: replace
    14          regex: (verrazzano-monitoring);(alertManager);(alertmanager-[a-z0-9-]+)(.*)
    15          replacement: $2
    16          separator: ;alertManager;
    17          sourceLabels:
    18          - namespace
    19          - pod
    20          targetLabel: verrazzano_component
    21        - action: replace
    22          regex: (verrazzano-system);(applicationOperator);(verrazzano-application-operator-[a-z0-9-]+)(.*)
    23          replacement: $2
    24          separator: ;applicationOperator;
    25          sourceLabels:
    26          - namespace
    27          - pod
    28          targetLabel: verrazzano_component
    29        - action: replace
    30          regex: (argocd);(argoCd);(argocd-[a-z0-9-]+)(.*)
    31          replacement: $2
    32          separator: ;argoCd;
    33          sourceLabels:
    34          - namespace
    35          - pod
    36          targetLabel: verrazzano_component
    37        - action: replace
    38          regex: (verrazzano-system);(authProxy);(verrazzano-authproxy-[a-z0-9-]+)(.*)
    39          replacement: $2
    40          separator: ;authProxy;
    41          sourceLabels:
    42          - namespace
    43          - pod
    44          targetLabel: verrazzano_component
    45        - action: replace
    46          regex: (cert-manager);(certManager);(cert-manager-[a-z0-9-]+)(.*)
    47          replacement: $2
    48          separator: ;certManager;
    49          sourceLabels:
    50          - namespace
    51          - pod
    52          targetLabel: verrazzano_component
    53        - action: replace
    54          regex: (verrazzano-capi);(clusterAPI);(capi-[a-z0-9-]+)(.*)
    55          replacement: $2
    56          separator: ;clusterAPI;
    57          sourceLabels:
    58          - namespace
    59          - pod
    60          targetLabel: verrazzano_component
    61        - action: replace
    62          regex: (verrazzano-system);(clusterOperator);(verrazzano-cluster-operator-[a-z0-9-]+)(.*)
    63          replacement: $2
    64          separator: ;clusterOperator;
    65          sourceLabels:
    66          - namespace
    67          - pod
    68          targetLabel: verrazzano_component
    69        - action: replace
    70          regex: (verrazzano-system);(coherenceOperator);(coherence-operator-[a-z0-9-]+)(.*)
    71          replacement: $2
    72          separator: ;coherenceOperator;
    73          sourceLabels:
    74          - namespace
    75          - pod
    76          targetLabel: verrazzano_component
    77        - action: replace
    78          regex: (verrazzano-system);(console);(verrazzano-console-[a-z0-9-]+)(.*)
    79          replacement: $2
    80          separator: ;console;
    81          sourceLabels:
    82          - namespace
    83          - pod
    84          targetLabel: verrazzano_component
    85        - action: replace
    86          regex: (cert-manager);(dns);(external-dns-[a-z0-9-]+)(.*)
    87          replacement: $2
    88          separator: ;dns;
    89          sourceLabels:
    90          - namespace
    91          - pod
    92          targetLabel: verrazzano_component
    93        - action: replace
    94          regex: (verrazzano-system);(fluentd);(fluentd-[a-z0-9-]+)(.*)
    95          replacement: $2
    96          separator: ;fluentd;
    97          sourceLabels:
    98          - namespace
    99          - pod
   100          targetLabel: verrazzano_component
   101        - action: replace
   102          regex: (verrazzano-system);(fluentOperator);(fluent-operator-[a-z0-9-]+)(.*)
   103          replacement: $2
   104          separator: ;fluentOperator;
   105          sourceLabels:
   106          - namespace
   107          - pod
   108          targetLabel: verrazzano_component
   109        - action: replace
   110          regex: (verrazzano-system);(fluentbitOpensearchOutput);(fluent-bit-[a-z0-9-]+)(.*)
   111          replacement: $2
   112          separator: ;fluentbitOpensearchOutput;
   113          sourceLabels:
   114          - namespace
   115          - pod
   116          targetLabel: verrazzano_component
   117        - action: replace
   118          regex: (verrazzano-system);(grafana);(vmi-system-grafana-[a-z0-9-]+)(.*)
   119          replacement: $2
   120          separator: ;grafana;
   121          sourceLabels:
   122          - namespace
   123          - pod
   124          targetLabel: verrazzano_component
   125        - action: replace
   126          regex: (verrazzano-system);(grafana);(vmi-system-grafana-[a-z0-9-]+)(.*)
   127          replacement: $2
   128          separator: ;grafana;
   129          sourceLabels:
   130          - namespace
   131          - persistentvolumeclaim
   132          targetLabel: verrazzano_component
   133        - action: replace
   134          regex: (ingress-nginx);(ingressNGINX);(ingress-controller-ingress-nginx-[a-z0-9-]+)(.*)
   135          replacement: $2
   136          separator: ;ingressNGINX;
   137          sourceLabels:
   138          - namespace
   139          - pod
   140          targetLabel: verrazzano_component
   141        - action: replace
   142          regex: (istio-system);(istio);(istio[a-z0-9-]+)(.*)
   143          replacement: $2
   144          separator: ;istio;
   145          sourceLabels:
   146          - namespace
   147          - pod
   148          targetLabel: verrazzano_component
   149        - action: replace
   150          regex: (verrazzano-monitoring);(jaegerOperator);(jaeger-[a-z0-9-]+)(.*)
   151          replacement: $2
   152          separator: ;jaegerOperator;
   153          sourceLabels:
   154          - namespace
   155          - pod
   156          targetLabel: verrazzano_component
   157        - action: replace
   158          regex: (keycloak);(keycloak);(keycloak-[a-z0-9-]+|mysql-[a-z0-9-]+)(.*)
   159          replacement: $2
   160          separator: ;keycloak;
   161          sourceLabels:
   162          - namespace
   163          - pod
   164          targetLabel: verrazzano_component
   165        - action: replace
   166          regex: (keycloak);(keycloak);(datadir-[a-z0-9-]+)(.*)
   167          replacement: $2
   168          separator: ;keycloak;
   169          sourceLabels:
   170          - namespace
   171          - persistentvolumeclaim
   172          targetLabel: verrazzano_component
   173        - action: replace
   174          regex: (verrazzano-system);(kiali);(vmi-system-kiali-[a-z0-9-]+)(.*)
   175          replacement: $2
   176          separator: ;kiali;
   177          sourceLabels:
   178          - namespace
   179          - pod
   180          targetLabel: verrazzano_component
   181        - action: replace
   182          regex: (verrazzano-monitoring);(kubeStateMetrics);(kube-state-metrics-[a-z0-9-]+)(.*)
   183          replacement: $2
   184          separator: ;kubeStateMetrics;
   185          sourceLabels:
   186          - namespace
   187          - pod
   188          targetLabel: verrazzano_component
   189        - action: replace
   190          regex: (verrazzano-system);(monitoringOperator);(verrazzano-monitoring-operator-[a-z0-9-]+)(.*)
   191          replacement: $2
   192          separator: ;monitoringOperator;
   193          sourceLabels:
   194          - namespace
   195          - pod
   196          targetLabel: verrazzano_component
   197        - action: replace
   198          regex: (mysql-operator);(mySQLOperator);(mysql-operator-[a-z0-9-]+)(.*)
   199          replacement: $2
   200          separator: ;mySQLOperator;
   201          sourceLabels:
   202          - namespace
   203          - pod
   204          targetLabel: verrazzano_component
   205        - action: replace
   206          regex: (verrazzano-system);(oam);(oam-kubernetes-runtime-[a-z0-9-]+)(.*)
   207          replacement: $2
   208          separator: ;oam;
   209          sourceLabels:
   210          - namespace
   211          - pod
   212          targetLabel: verrazzano_component
   213        - action: replace
   214          regex: (verrazzano-system);(opensearch);(vmi-system-es-[a-z0-9-]+)(.*)
   215          replacement: $2
   216          separator: ;opensearch;
   217          sourceLabels:
   218          - namespace
   219          - pod
   220          targetLabel: verrazzano_component
   221        - action: replace
   222          regex: (verrazzano-system);(opensearch);(vmi-system-es-[a-z0-9-]+|elasticsearch-[a-z0-9-]+)(.*)
   223          replacement: $2
   224          separator: ;opensearch;
   225          sourceLabels:
   226          - namespace
   227          - persistentvolumeclaim
   228          targetLabel: verrazzano_component
   229        - action: replace
   230          regex: (verrazzano-system);(opensearchDashboards);(vmi-system-osd-[a-z0-9-]+)(.*)
   231          replacement: $2
   232          separator: ;opensearchDashboards;
   233          sourceLabels:
   234          - namespace
   235          - pod
   236          targetLabel: verrazzano_component
   237        - action: replace
   238          regex: (verrazzano-install);(platformOperator);(verrazzano-platform-operator-[a-z0-9-]+)(.*)
   239          replacement: $2
   240          separator: ;platformOperator;
   241          sourceLabels:
   242          - namespace
   243          - pod
   244          targetLabel: verrazzano_component
   245        - action: replace
   246          regex: (verrazzano-monitoring);(prometheus);(prometheus-prometheus-operator-kube-p-prometheus-[a-z0-9-]+)(.*)
   247          replacement: $2
   248          separator: ;prometheus;
   249          sourceLabels:
   250          - namespace
   251          - pod
   252          targetLabel: verrazzano_component
   253        - action: replace
   254          regex: (verrazzano-monitoring);(prometheus);(prometheus-[a-z0-9-]+)(.*)
   255          replacement: $2
   256          separator: ;prometheus;
   257          sourceLabels:
   258          - namespace
   259          - persistentvolumeclaim
   260          targetLabel: verrazzano_component
   261        - action: replace
   262          regex: (verrazzano-monitoring);(prometheusAdapter);(prometheus-adapter-[a-z0-9-]+)(.*)
   263          replacement: $2
   264          separator: ;prometheusAdapter;
   265          sourceLabels:
   266          - namespace
   267          - pod
   268          targetLabel: verrazzano_component
   269        - action: replace
   270          regex: (verrazzano-monitoring);(prometheusNodeExporter);(prometheus-node-exporter-[a-z0-9-]+)(.*)
   271          replacement: $2
   272          separator: ;prometheusNodeExporter;
   273          sourceLabels:
   274          - namespace
   275          - pod
   276          targetLabel: verrazzano_component
   277        - action: replace
   278          regex: (verrazzano-monitoring);(prometheusOperator);(prometheus-operator-kube-p-operator-[a-z0-9-]+)(.*)
   279          replacement: $2
   280          separator: ;prometheusOperator;
   281          sourceLabels:
   282          - namespace
   283          - pod
   284          targetLabel: verrazzano_component
   285        - action: replace
   286          regex: (cattle-fleet-system|cattle-fleet-local-system|cattle-system);(rancher);(rancher-[a-z0-9-]+|fleet-[a-z0-9-]+|gitjob-[a-z0-9-]+)(.*)
   287          replacement: $2
   288          separator: ;rancher;
   289          sourceLabels:
   290          - namespace
   291          - pod
   292          targetLabel: verrazzano_component
   293        - action: replace
   294          regex: (cattle-resources-system);(rancherBackup);(rancher-backup-[a-z0-9-]+)(.*)
   295          replacement: $2
   296          separator: ;rancherBackup;
   297          sourceLabels:
   298          - namespace
   299          - pod
   300          targetLabel: verrazzano_component
   301        - action: replace
   302          regex: (verrazzano-backup);(velero);(restic-[a-z0-9-]+|velero-[a-z0-9-]+)(.*)
   303          replacement: $2
   304          separator: ;velero;
   305          sourceLabels:
   306          - namespace
   307          - pod
   308          targetLabel: verrazzano_component
   309        - action: replace
   310          regex: (verrazzano-monitoring);(thanos);(thanos-[a-z0-9-]+)(.*)
   311          replacement: $2
   312          separator: ;thanos;
   313          sourceLabels:
   314          - namespace
   315          - pod
   316          targetLabel: verrazzano_component
   317        - action: replace
   318          regex: (verrazzano-system);(weblogicOperator);(weblogic-operator-[a-z0-9-]+)(.*)
   319          replacement: $2
   320          separator: ;weblogicOperator;
   321          sourceLabels:
   322          - namespace
   323          - pod
   324          targetLabel: verrazzano_component
   325      relabelings:
   326        - action: replace
   327          replacement: local
   328          targetLabel: verrazzano_cluster
   329  metricLabelsAllowlist:
   330    - deployments=[app.oam.dev/name,app.oam.dev/component]
   331    - pods=[app.oam.dev/name,app.oam.dev/component]
   332    - services=[app.oam.dev/name,app.oam.dev/component]
   333    - statefulsets=[app.oam.dev/name,app.oam.dev/component]
   334  securityContext:
   335    seccompProfile:
   336      type: RuntimeDefault
   337  
   338  
   339  containerSecurityContext:
   340    allowPrivilegeEscalation: false
   341    capabilities:
   342      drop:
   343        - ALL
   344    privileged: false
   345    readOnlyRootFilesystem: true