node-exporter-daemonset.yaml 2.5 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788
  1. apiVersion: apps/v1beta2
  2. kind: DaemonSet
  3. metadata:
  4. labels:
  5. app: node-exporter
  6. name: node-exporter
  7. namespace: monitoring
  8. spec:
  9. selector:
  10. matchLabels:
  11. app: node-exporter
  12. template:
  13. metadata:
  14. labels:
  15. app: node-exporter
  16. spec:
  17. containers:
  18. - args:
  19. - --web.listen-address=127.0.0.1:9100
  20. - --path.procfs=/host/proc
  21. - --path.sysfs=/host/sys
  22. - --path.rootfs=/host/root
  23. - --collector.filesystem.ignored-mount-points=^/(dev|proc|sys|var/lib/docker/.+)($|/)
  24. - --collector.filesystem.ignored-fs-types=^(autofs|binfmt_misc|cgroup|configfs|debugfs|devpts|devtmpfs|fusectl|hugetlbfs|mqueue|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|sysfs|tracefs)$
  25. image: quay.io/prometheus/node-exporter:v0.17.0
  26. name: node-exporter
  27. resources:
  28. limits:
  29. cpu: 250m
  30. memory: 180Mi
  31. requests:
  32. cpu: 102m
  33. memory: 180Mi
  34. volumeMounts:
  35. - mountPath: /host/proc
  36. name: proc
  37. readOnly: false
  38. - mountPath: /host/sys
  39. name: sys
  40. readOnly: false
  41. - mountPath: /host/root
  42. mountPropagation: HostToContainer
  43. name: root
  44. readOnly: true
  45. - args:
  46. - --logtostderr
  47. - --secure-listen-address=$(IP):9100
  48. - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  49. - --upstream=http://127.0.0.1:9100/
  50. env:
  51. - name: IP
  52. valueFrom:
  53. fieldRef:
  54. fieldPath: status.podIP
  55. image: quay.io/coreos/kube-rbac-proxy:v0.4.1
  56. name: kube-rbac-proxy
  57. ports:
  58. - containerPort: 9100
  59. hostPort: 9100
  60. name: https
  61. resources:
  62. limits:
  63. cpu: 20m
  64. memory: 40Mi
  65. requests:
  66. cpu: 10m
  67. memory: 20Mi
  68. hostNetwork: true
  69. hostPID: true
  70. nodeSelector:
  71. beta.kubernetes.io/os: linux
  72. securityContext:
  73. runAsNonRoot: true
  74. runAsUser: 65534
  75. serviceAccountName: node-exporter
  76. tolerations:
  77. - operator: Exists
  78. volumes:
  79. - hostPath:
  80. path: /proc
  81. name: proc
  82. - hostPath:
  83. path: /sys
  84. name: sys
  85. - hostPath:
  86. path: /
  87. name: root