1apiVersion: v1
2kind: Namespace
3metadata:
4 name: node-exporter
5 annotations:
6 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
7 pallet.edge.ncr.com/name: node-exporter
8 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
9 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
10 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-o11y'
11 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
12 labels: {}
13---
14apiVersion: v1
15kind: ServiceAccount
16metadata:
17 name: node-exporter
18 labels:
19 app: node-exporter
20 app.kubernetes.io/version: 1.5.0
21 namespace: node-exporter
22 annotations:
23 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
24 pallet.edge.ncr.com/name: node-exporter
25 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
26 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
27 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-o11y'
28 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
29---
30apiVersion: rbac.authorization.k8s.io/v1
31kind: ClusterRole
32metadata:
33 name: node-exporter
34 labels:
35 app: node-exporter
36 app.kubernetes.io/version: 1.5.0
37 annotations:
38 configmanagement.gke.io/cluster-selector: not-foreman
39 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
40 pallet.edge.ncr.com/name: node-exporter
41 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
42 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
43 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-o11y'
44 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
45rules:
46- resources:
47 - tokenreviews
48 apiGroups:
49 - authentication.k8s.io
50 verbs:
51 - create
52- resources:
53 - subjectaccessreviews
54 apiGroups:
55 - authorization.k8s.io
56 verbs:
57 - create
58---
59apiVersion: rbac.authorization.k8s.io/v1
60kind: ClusterRoleBinding
61metadata:
62 name: node-exporter
63 labels:
64 app: node-exporter
65 app.kubernetes.io/version: 1.5.0
66 annotations:
67 configmanagement.gke.io/cluster-selector: not-foreman
68 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
69 pallet.edge.ncr.com/name: node-exporter
70 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
71 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
72 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-o11y'
73 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
74roleRef:
75 name: node-exporter
76 kind: ClusterRole
77 apiGroup: rbac.authorization.k8s.io
78subjects:
79- name: node-exporter
80 namespace: node-exporter
81 kind: ServiceAccount
82---
83apiVersion: v1
84kind: Service
85metadata:
86 name: node-exporter
87 labels:
88 app: node-exporter
89 app.kubernetes.io/version: 1.5.0
90 namespace: node-exporter
91 annotations:
92 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
93 pallet.edge.ncr.com/name: node-exporter
94 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
95 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
96 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-o11y'
97 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
98spec:
99 selector:
100 app: node-exporter
101 app.kubernetes.io/version: 1.5.0
102 ports:
103 - name: https
104 port: 9100
105 targetPort: https
106 clusterIP: None
107---
108apiVersion: apps/v1
109kind: DaemonSet
110metadata:
111 name: node-exporter
112 labels:
113 app: node-exporter
114 app.kubernetes.io/version: 1.5.0
115 namespace: node-exporter
116 annotations:
117 linkerd.io/inject: disabled
118 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
119 pallet.edge.ncr.com/name: node-exporter
120 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
121 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
122 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-o11y'
123 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
124spec:
125 selector:
126 matchLabels:
127 app: node-exporter
128 app.kubernetes.io/version: 1.5.0
129 template:
130 metadata:
131 labels:
132 app: node-exporter
133 app.kubernetes.io/version: 1.5.0
134 annotations:
135 kubectl.kubernetes.io/default-container: node-exporter
136 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
137 pallet.edge.ncr.com/name: node-exporter
138 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
139 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
140 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-o11y'
141 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
142 spec:
143 serviceAccountName: node-exporter
144 hostNetwork: true
145 hostPID: true
146 nodeSelector:
147 kubernetes.io/os: linux
148 containers:
149 - name: kube-rbac-proxy
150 image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/thirdparty/quay.io/brancz/kube-rbac-proxy@sha256:a7f54a7419540e5d38c9e5a9e47c3fc1bd560c207eb663de95652900d6b8abb9
151 args:
152 - --logtostderr
153 - --secure-listen-address=[$(IP)]:9100
154 - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
155 - --upstream=http://127.0.0.1:9100/
156 ports:
157 - name: https
158 hostPort: 9100
159 containerPort: 9100
160 env:
161 - name: IP
162 valueFrom:
163 fieldRef:
164 fieldPath: status.podIP
165 resources:
166 limits:
167 cpu: "20m"
168 memory: 40Mi
169 requests:
170 cpu: 10m
171 memory: 20Mi
172 securityContext:
173 allowPrivilegeEscalation: false
174 runAsGroup: 65532
175 runAsNonRoot: true
176 runAsUser: 65532
177 - name: node-exporter
178 image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/thirdparty/quay.io/prometheus/node-exporter@sha256:4333a79a5979e776bd814af62e473f4e8eb204953b20234fdf011409e9c794a4
179 args:
180 - --web.listen-address=127.0.0.1:9100
181 - --path.sysfs=/host/sys
182 - --path.rootfs=/host/root
183 - --path.udev.data=/host/root/run
184 - --no-collector.wifi
185 - --no-collector.hwmon
186 - --collector.filesystem.mount-points-exclude=^/(dev|proc|sys|run/k3s/containerd/.+|var/lib/docker/.+|var/lib/kubelet/pods/.+)($|/)
187 - --collector.netclass.ignored-devices=^(veth.*|[a-f0-9]{15})$
188 - --collector.netdev.device-exclude=^(veth.*|[a-f0-9]{15})$
189 - --collector.cpu.info
190 - --collector.cpufreq
191 - --collector.netdev.address-info
192 resources:
193 limits:
194 cpu: "250m"
195 memory: 384Mi
196 requests:
197 cpu: 100m
198 memory: 192Mi
199 volumeMounts:
200 - name: sys
201 readOnly: true
202 mountPath: /host/sys
203 mountPropagation: HostToContainer
204 - name: root
205 readOnly: true
206 mountPath: /host/root
207 mountPropagation: HostToContainer
208 securityContext:
209 allowPrivilegeEscalation: false
210 volumes:
211 - name: root
212 hostPath:
213 path: /
214 - name: sys
215 hostPath:
216 path: /sys
217 tolerations:
218 - operator: Exists
219 securityContext:
220 runAsNonRoot: true
221 runAsUser: 65534
222 updateStrategy:
223 type: RollingUpdate
224 rollingUpdate:
225 maxUnavailable: 10%
View as plain text