Movses AslanyanandClaude Opus 5.5
7719ef5fcf
k8s/ is now a faithful port of the mentor's Ansible Grafana stack (Prometheus, Alertmanager, Loki, Tempo, Alloy, Grafana, node-exporter) for the ledgerline-observability namespace on falken: same versions and configs, one *.vione.cloud ingress per tool behind Traefik basic auth, secrets generated by create-secrets.sh into gitignored files. Two fixes over the Ansible role, both verified live: Tempo's metrics-generator needs traces_storage or it runs no processors, and Prometheus needs exemplar-storage to keep exemplars. Ledgerline stays on czy; an Alloy agent in the Traefik override ships its container logs to Loki. Roadmap and CLAUDE.md now point at k8s/. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
45 lines
1.2 KiB
YAML
45 lines
1.2 KiB
YAML
# Host metrics for falken (the observability host), as in the Ansible stack's
|
|
# node-exporter (pid: host, / mounted at /host). hostNetwork so network stats
|
|
# are the host's, not the pod's. Port 9100 on the host is blocked from the
|
|
# internet by falken's ufw; Prometheus reaches it through the Service.
|
|
#
|
|
# This does NOT watch czy, where Ledgerline runs.
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: node-exporter
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: node-exporter
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: node-exporter
|
|
spec:
|
|
hostPID: true
|
|
hostNetwork: true
|
|
dnsPolicy: ClusterFirstWithHostNet
|
|
containers:
|
|
- name: node-exporter
|
|
image: prom/node-exporter:v1.9.1
|
|
args:
|
|
- --path.rootfs=/host
|
|
ports:
|
|
- containerPort: 9100
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 24Mi
|
|
limits:
|
|
memory: 96Mi
|
|
volumeMounts:
|
|
- name: host
|
|
mountPath: /host
|
|
readOnly: true
|
|
mountPropagation: HostToContainer
|
|
volumes:
|
|
- name: host
|
|
hostPath:
|
|
path: /
|