-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: added chart hardened Kubelet #6
Conversation
Please change the version of the chart to 0.10.0-rc1 or something similar, so we can test it in staging. Then you should be able to create a chart release by tagging the main branch. |
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
helm package was creating a chart up to 6MB. This happened because the .git folder was being included in the package.
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
Signed-off-by: Bruno Bressi <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM. The kubelet serviceMonitor is getting scraped and everything works as expected. The failing prometheus scrape is because of a certificate problem on some nodes in our development environment.
Expose kubelet metrics
Added hardened kubelet to deploy hardened kubelet pushproxy on port 10250.
Motivaiton
Rancher doesn't host kubelet as a pod, so no metrics are directly parsed from it. Since the central DTIT monitoring solution (Dynatrace) needs kubelet metrics to be able to monitor PVCs, we should find a way to expose the kubelet metrics, so that:
Additionally, all prometheuses aren't currently able to parse the kubelet serviceMonitor, even though it's deployed.
Even more additionally, the dynatrace active gate cannot parse the port, as no pod is to be found behind that IP. The logs below are from s01:
TODOS
10250
of the pushproxy pod