Movses AslanyanandClaude Opus 5.5
b3e7c14958
czy publishes no service ports, so Traefik exposes each service's :9464 as https://ledgerline.vione.cloud/metrics/<service> behind basic auth, and the platform's Prometheus gets a `ledgerline` job with one target per service. The targets share an address; a `service` label tells them apart, and relabels derive __metrics_path__ and instance from it. create-secrets.sh now also creates the prometheus-scrape-auth secret (mounted optional, so a missing secret fails only this job) and writes the gitignored htpasswd file Traefik reads, which is copied to czy like .env.observability. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
73 lines
2.1 KiB
YAML
73 lines
2.1 KiB
YAML
global:
|
|
scrape_interval: 15s
|
|
evaluation_interval: 15s
|
|
|
|
rule_files:
|
|
- /etc/prometheus/rules/*.yml
|
|
|
|
alerting:
|
|
alertmanagers:
|
|
- static_configs:
|
|
- targets: ["alertmanager:9093"]
|
|
|
|
scrape_configs:
|
|
- job_name: prometheus
|
|
static_configs:
|
|
- targets: ["prometheus:9090"]
|
|
|
|
- job_name: node-exporter
|
|
static_configs:
|
|
- targets: ["node-exporter:9100"]
|
|
|
|
- job_name: loki
|
|
static_configs:
|
|
- targets: ["loki:3100"]
|
|
|
|
- job_name: tempo
|
|
static_configs:
|
|
- targets: ["tempo:3200"]
|
|
|
|
- job_name: alloy
|
|
static_configs:
|
|
- targets: ["alloy:12345"]
|
|
|
|
- job_name: grafana
|
|
static_configs:
|
|
- targets: ["grafana:3000"]
|
|
|
|
# Application scrape jobs -- the equivalent of the Ansible role's
|
|
# `prometheus_extra_scrape_jobs`. Re-apply with `kubectl apply -k k8s/`.
|
|
#
|
|
# Ledgerline runs on czy with no service ports published. Each service
|
|
# serves metrics on its own :9464, which czy's Traefik exposes as
|
|
# https://ledgerline.vione.cloud/metrics/<service> behind basic auth
|
|
# (docker-compose.traefik.yml). All seven targets share one address, so the
|
|
# `service` label is what tells them apart; the relabels derive the path
|
|
# and a readable instance from it.
|
|
- job_name: ledgerline
|
|
scheme: https
|
|
basic_auth:
|
|
username_file: /etc/prometheus/secrets/username
|
|
password_file: /etc/prometheus/secrets/password
|
|
static_configs:
|
|
- targets: ["ledgerline.vione.cloud"]
|
|
labels: { service: gateway }
|
|
- targets: ["ledgerline.vione.cloud"]
|
|
labels: { service: ledger }
|
|
- targets: ["ledgerline.vione.cloud"]
|
|
labels: { service: fraud }
|
|
- targets: ["ledgerline.vione.cloud"]
|
|
labels: { service: sanctions }
|
|
- targets: ["ledgerline.vione.cloud"]
|
|
labels: { service: insights }
|
|
- targets: ["ledgerline.vione.cloud"]
|
|
labels: { service: notifier }
|
|
- targets: ["ledgerline.vione.cloud"]
|
|
labels: { service: audit }
|
|
relabel_configs:
|
|
- source_labels: [service]
|
|
target_label: __metrics_path__
|
|
replacement: /metrics/$1
|
|
- source_labels: [service]
|
|
target_label: instance
|