307 lines
11 KiB
YAML
307 lines
11 KiB
YAML
{{- if .Values.observability.enabled }}
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: {{ include "medical-chatbot.fullname" . }}-prometheus
|
|
labels:
|
|
{{- include "medical-chatbot.labels" . | nindent 4 }}
|
|
spec:
|
|
accessModes: [ReadWriteOnce]
|
|
resources:
|
|
requests: { storage: {{ .Values.observability.prometheus.storage }} }
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: {{ include "medical-chatbot.fullname" . }}-prometheus
|
|
labels:
|
|
{{- include "medical-chatbot.labels" . | nindent 4 }}
|
|
app.kubernetes.io/component: prometheus
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: prometheus
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: prometheus
|
|
spec:
|
|
securityContext: { fsGroup: 65534 }
|
|
containers:
|
|
- name: prometheus
|
|
image: {{ .Values.observability.prometheus.image }}
|
|
args:
|
|
- --config.file=/etc/prometheus/prometheus.yml
|
|
- --storage.tsdb.path=/prometheus
|
|
- --storage.tsdb.retention.time={{ .Values.observability.prometheus.retention }}
|
|
- --enable-feature=exemplar-storage
|
|
ports:
|
|
- { name: http, containerPort: 9090 }
|
|
readinessProbe:
|
|
httpGet: { path: /-/ready, port: http }
|
|
livenessProbe:
|
|
httpGet: { path: /-/healthy, port: http }
|
|
initialDelaySeconds: 15
|
|
resources:
|
|
{{- toYaml .Values.observability.prometheus.resources | nindent 12 }}
|
|
volumeMounts:
|
|
- { name: config, mountPath: /etc/prometheus }
|
|
- { name: data, mountPath: /prometheus }
|
|
volumes:
|
|
- name: config
|
|
configMap: { name: {{ include "medical-chatbot.fullname" . }}-prometheus-config }
|
|
- name: data
|
|
persistentVolumeClaim: { claimName: {{ include "medical-chatbot.fullname" . }}-prometheus }
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: {{ include "medical-chatbot.fullname" . }}-prometheus
|
|
labels:
|
|
{{- include "medical-chatbot.labels" . | nindent 4 }}
|
|
spec:
|
|
selector:
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: prometheus
|
|
ports:
|
|
- { name: http, port: 9090, targetPort: http }
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: {{ include "medical-chatbot.fullname" . }}-tempo
|
|
labels:
|
|
{{- include "medical-chatbot.labels" . | nindent 4 }}
|
|
spec:
|
|
accessModes: [ReadWriteOnce]
|
|
resources:
|
|
requests: { storage: {{ .Values.observability.tempo.storage }} }
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: {{ include "medical-chatbot.fullname" . }}-tempo
|
|
labels:
|
|
{{- include "medical-chatbot.labels" . | nindent 4 }}
|
|
app.kubernetes.io/component: tempo
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: tempo
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: tempo
|
|
spec:
|
|
securityContext: { fsGroup: 10001 }
|
|
containers:
|
|
- name: tempo
|
|
image: {{ .Values.observability.tempo.image }}
|
|
args: ["-config.file=/etc/tempo/tempo.yml"]
|
|
ports:
|
|
- { name: http, containerPort: 3200 }
|
|
- { name: otlp-grpc, containerPort: 4317 }
|
|
readinessProbe:
|
|
httpGet: { path: /ready, port: http }
|
|
initialDelaySeconds: 5
|
|
livenessProbe:
|
|
httpGet: { path: /ready, port: http }
|
|
initialDelaySeconds: 20
|
|
resources:
|
|
{{- toYaml .Values.observability.tempo.resources | nindent 12 }}
|
|
volumeMounts:
|
|
- { name: config, mountPath: /etc/tempo }
|
|
- { name: data, mountPath: /var/tempo }
|
|
volumes:
|
|
- name: config
|
|
configMap: { name: {{ include "medical-chatbot.fullname" . }}-tempo-config }
|
|
- name: data
|
|
persistentVolumeClaim: { claimName: {{ include "medical-chatbot.fullname" . }}-tempo }
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: {{ include "medical-chatbot.fullname" . }}-tempo
|
|
labels:
|
|
{{- include "medical-chatbot.labels" . | nindent 4 }}
|
|
spec:
|
|
selector:
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: tempo
|
|
ports:
|
|
- { name: http, port: 3200, targetPort: http }
|
|
- { name: otlp-grpc, port: 4317, targetPort: otlp-grpc }
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: {{ include "medical-chatbot.fullname" . }}-otel-collector
|
|
labels:
|
|
{{- include "medical-chatbot.labels" . | nindent 4 }}
|
|
app.kubernetes.io/component: otel-collector
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: otel-collector
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: otel-collector
|
|
spec:
|
|
containers:
|
|
- name: otel-collector
|
|
image: {{ .Values.observability.collector.image }}
|
|
args: ["--config=/etc/otelcol/collector.yml"]
|
|
ports:
|
|
- { name: otlp-grpc, containerPort: 4317 }
|
|
- { name: otlp-http, containerPort: 4318 }
|
|
- { name: health, containerPort: 13133 }
|
|
readinessProbe:
|
|
httpGet: { path: /, port: health }
|
|
livenessProbe:
|
|
httpGet: { path: /, port: health }
|
|
initialDelaySeconds: 10
|
|
resources:
|
|
{{- toYaml .Values.observability.collector.resources | nindent 12 }}
|
|
volumeMounts:
|
|
- { name: config, mountPath: /etc/otelcol }
|
|
volumes:
|
|
- name: config
|
|
configMap: { name: {{ include "medical-chatbot.fullname" . }}-otel-config }
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: {{ include "medical-chatbot.fullname" . }}-otel-collector
|
|
labels:
|
|
{{- include "medical-chatbot.labels" . | nindent 4 }}
|
|
spec:
|
|
selector:
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: otel-collector
|
|
ports:
|
|
- { name: otlp-grpc, port: 4317, targetPort: otlp-grpc }
|
|
- { name: otlp-http, port: 4318, targetPort: otlp-http }
|
|
- { name: health, port: 13133, targetPort: health }
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: {{ include "medical-chatbot.fullname" . }}-grafana
|
|
labels:
|
|
{{- include "medical-chatbot.labels" . | nindent 4 }}
|
|
spec:
|
|
accessModes: [ReadWriteOnce]
|
|
resources:
|
|
requests: { storage: {{ .Values.observability.grafana.storage }} }
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: {{ include "medical-chatbot.fullname" . }}-grafana
|
|
labels:
|
|
{{- include "medical-chatbot.labels" . | nindent 4 }}
|
|
app.kubernetes.io/component: grafana
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: grafana
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: grafana
|
|
spec:
|
|
securityContext: { fsGroup: 472 }
|
|
containers:
|
|
- name: grafana
|
|
image: {{ .Values.observability.grafana.image }}
|
|
ports:
|
|
- { name: http, containerPort: 3000 }
|
|
env:
|
|
- { name: GF_SECURITY_ADMIN_USER, value: admin }
|
|
- name: GF_SECURITY_ADMIN_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ include "medical-chatbot.secretName" . }}
|
|
key: grafana-admin-password
|
|
# Anonymous access is a viewing convenience, never an admin
|
|
# bypass: this Grafana is reachable from the public internet
|
|
# through the same ingress as the app, so an anonymous Admin role
|
|
# hands strangers the datasource and dashboard APIs.
|
|
- name: GF_AUTH_ANONYMOUS_ENABLED
|
|
value: {{ .Values.observability.grafana.anonymous.enabled | quote }}
|
|
- name: GF_AUTH_ANONYMOUS_ORG_ROLE
|
|
value: {{ .Values.observability.grafana.anonymous.role | quote }}
|
|
# Never disabled. Hiding the login form alongside anonymous Admin
|
|
# left no way to authenticate as a real user at all.
|
|
- name: GF_AUTH_DISABLE_LOGIN_FORM
|
|
value: "false"
|
|
{{- if .Values.ingress.enabled }}
|
|
# Must be the hostname users actually arrive on, or Grafana's own
|
|
# redirects and asset links point at the wrong site.
|
|
- name: GF_SERVER_ROOT_URL
|
|
value: "https://{{ .Values.ingress.host }}/grafana/"
|
|
- name: GF_SERVER_SERVE_FROM_SUB_PATH
|
|
value: "true"
|
|
{{- end }}
|
|
readinessProbe:
|
|
httpGet: { path: /api/health, port: http }
|
|
initialDelaySeconds: 10
|
|
livenessProbe:
|
|
httpGet: { path: /api/health, port: http }
|
|
initialDelaySeconds: 30
|
|
resources:
|
|
{{- toYaml .Values.observability.grafana.resources | nindent 12 }}
|
|
volumeMounts:
|
|
- { name: datasource, mountPath: /etc/grafana/provisioning/datasources }
|
|
- { name: dashboard-provider, mountPath: /etc/grafana/provisioning/dashboards }
|
|
- { name: dashboards, mountPath: /var/lib/grafana/dashboards }
|
|
- { name: data, mountPath: /var/lib/grafana }
|
|
volumes:
|
|
- name: datasource
|
|
configMap:
|
|
name: {{ include "medical-chatbot.fullname" . }}-grafana-provisioning
|
|
items: [{ key: datasources.yml, path: datasources.yml }]
|
|
- name: dashboard-provider
|
|
configMap:
|
|
name: {{ include "medical-chatbot.fullname" . }}-grafana-provisioning
|
|
items: [{ key: dashboards.yml, path: dashboards.yml }]
|
|
- name: dashboards
|
|
configMap:
|
|
name: {{ include "medical-chatbot.fullname" . }}-grafana-provisioning
|
|
items: [{ key: dashboard.json, path: dashboard.json }]
|
|
- name: data
|
|
persistentVolumeClaim: { claimName: {{ include "medical-chatbot.fullname" . }}-grafana }
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: {{ include "medical-chatbot.fullname" . }}-grafana
|
|
labels:
|
|
{{- include "medical-chatbot.labels" . | nindent 4 }}
|
|
spec:
|
|
type: {{ .Values.observability.grafana.service.type }}
|
|
selector:
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: grafana
|
|
ports:
|
|
- name: http
|
|
port: {{ .Values.observability.grafana.service.port }}
|
|
targetPort: http
|
|
{{- if and (eq .Values.observability.grafana.service.type "NodePort") .Values.observability.grafana.service.nodePort }}
|
|
nodePort: {{ .Values.observability.grafana.service.nodePort }}
|
|
{{- end }}
|
|
{{- end }}
|