aff0b38c0b
* fix: set priority for ks,node-exporter,prometheus * fix: add priority class for download
110 lines
4.1 KiB
YAML
110 lines
4.1 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: exporter
|
|
app.kubernetes.io/name: kube-state-metrics
|
|
app.kubernetes.io/part-of: kube-prometheus
|
|
app.kubernetes.io/version: 2.3.0-ext.1 # todo
|
|
name: kube-state-metrics
|
|
namespace: kubesphere-monitoring-system
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: exporter
|
|
app.kubernetes.io/name: kube-state-metrics
|
|
app.kubernetes.io/part-of: kube-prometheus
|
|
strategy: # todo ?
|
|
rollingUpdate:
|
|
maxSurge: 25%
|
|
maxUnavailable: 25%
|
|
type: RollingUpdate
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
kubectl.kubernetes.io/default-container: kube-state-metrics
|
|
labels:
|
|
app.kubernetes.io/component: exporter
|
|
app.kubernetes.io/name: kube-state-metrics
|
|
app.kubernetes.io/part-of: kube-prometheus
|
|
app.kubernetes.io/version: 2.3.0-ext.1 # todo
|
|
spec:
|
|
volumes:
|
|
- name: host-time
|
|
hostPath:
|
|
path: /etc/localtime
|
|
type: ""
|
|
priorityClassName: "system-cluster-critical"
|
|
containers:
|
|
- args:
|
|
- --host=127.0.0.1
|
|
- --port=8081
|
|
- --telemetry-host=127.0.0.1
|
|
- --telemetry-port=8082
|
|
- --metric-denylist=kube_pod_container_status_.*terminated_reason,kube_.+_version,kube_.+_created,kube_deployment_(spec_paused|spec_strategy_rollingupdate_.+),kube_endpoint_(info|address_.+),kube_job_(info|owner|spec_(parallelism|active_deadline_seconds)|status_(active|.+_time)),kube_cronjob_(info|status_.+|spec_.+),kube_namespace_(status_phase),kube_persistentvolume_(info|capacity_.+),kube_persistentvolumeclaim_(resource_.+|access_.+),kube_secret_(type),kube_service_(spec_.+|status_.+),kube_ingress_(info|path|tls),kube_replicaset_(status_.+|spec_.+|owner),kube_poddisruptionbudget_status_.+,kube_replicationcontroller_.+,kube_node_info,kube_(hpa|replicaset|replicationcontroller)_.+_generation
|
|
- --metric-labels-allowlist=namespaces=[kubesphere.io/workspace,bytetrade.io/ns-owner]
|
|
image: beclab/kube-state-metrics:v2.3.0-ext.1
|
|
imagePullPolicy: IfNotPresent
|
|
name: kube-state-metrics
|
|
resources:
|
|
limits:
|
|
cpu: "1"
|
|
memory: 8Gi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 150Mi
|
|
securityContext:
|
|
runAsUser: 65534
|
|
volumeMounts:
|
|
- mountPath: /etc/localtime
|
|
name: host-time
|
|
readOnly: true
|
|
- args:
|
|
- --logtostderr
|
|
- --secure-listen-address=:8443
|
|
- --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
|
|
- --upstream=http://127.0.0.1:8081/
|
|
image: beclab/kube-rbac-proxy:0.19.0
|
|
imagePullPolicy: IfNotPresent
|
|
name: kube-rbac-proxy-main
|
|
ports:
|
|
- containerPort: 8443
|
|
name: https-main
|
|
resources:
|
|
limits:
|
|
cpu: "1"
|
|
memory: 100Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 20Mi
|
|
securityContext:
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
- args:
|
|
- --logtostderr
|
|
- --secure-listen-address=:9443
|
|
- --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
|
|
- --upstream=http://127.0.0.1:8082/
|
|
image: beclab/kube-rbac-proxy:0.19.0
|
|
imagePullPolicy: IfNotPresent
|
|
name: kube-rbac-proxy-self
|
|
ports:
|
|
- containerPort: 9443
|
|
name: https-self
|
|
resources:
|
|
limits:
|
|
cpu: "1"
|
|
memory: 100Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 20Mi
|
|
securityContext:
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
nodeSelector:
|
|
kubernetes.io/os: linux
|
|
serviceAccountName: kube-state-metrics
|