Tweak probes, add monitoring where it's desired

redxen/anubis/deployment.yml

@@ -44,5 +44,5 @@ spec:
           ports:
             - name: http-git
               containerPort: 8923
-            - name: prometheus-anub-git
+            - name: prometheus-anug
               containerPort: 9103

redxen/anubis/service.yml

@@ -14,6 +14,6 @@ spec:
     - name: http-git
       port: 8923
       protocol: TCP
-    - name: prometheus-anub-git
+    - name: prometheus-anug
       port: 9103
       protocol: TCP

redxen/gitea/deployment.yml

@@ -73,7 +73,7 @@ spec:
             - name: prometheus-node
               containerPort: 9100
               protocol: TCP
-          livenessProbe:
+          readinessProbe:
             httpGet:
               port: 9100
               path: /metrics

redxen/grafana/deployment.yml

@@ -70,7 +70,7 @@ spec:
             - name: prometheus-node
               containerPort: 9100
               protocol: TCP
-          livenessProbe:
+          readinessProbe:
             httpGet:
               port: 9100
               path: /metrics

redxen/haproxy/deployment.yml

@@ -78,7 +78,7 @@ spec:
             - name: prometheus-node
               containerPort: 9100
               protocol: TCP
-          livenessProbe:
+          readinessProbe:
             httpGet:
               port: 9100
               path: /metrics

redxen/keycloak/deployment.yml

@@ -69,7 +69,7 @@ spec:
             - name: prometheus-node
               containerPort: 9100
               protocol: TCP
-          livenessProbe:
+          readinessProbe:
             httpGet:
               port: 9100
               path: /metrics

redxen/loki/deployment.yml

@@ -51,7 +51,8 @@ spec:
             - name: loki-storage
               mountPath: /var/lib/loki
           ports:
-            - containerPort: 3100
+            - name: http
+              containerPort: 3100
           readinessProbe:
             httpGet:
               port: 3100
@@ -60,6 +61,25 @@ spec:
             httpGet:
               port: 3100
               path: /ready
+        - name: node-exporter
+          image: redxen.eu/daemons/node_exporter:latest
+          securityContext:
+            capabilities:
+              drop: ["ALL"]
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+          ports:
+            - name: prometheus-node
+              containerPort: 9100
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              port: 9100
+              path: /metrics
+          volumeMounts:
+            - name: loki-storage
+              mountPath: /var/lib/loki
+              readOnly: true
       volumes:
         - name: loki-storage
           persistentVolumeClaim:

redxen/mail/dovecot/deployment.yml

@@ -52,6 +52,25 @@ spec:
               containerPort: 11555
             - name: auth
               containerPort: 11666
+        - name: node-exporter
+          image: redxen.eu/daemons/node_exporter:latest
+          securityContext:
+            capabilities:
+              drop: ["ALL"]
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+          ports:
+            - name: prometheus-node
+              containerPort: 9100
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              port: 9100
+              path: /metrics
+          volumeMounts:
+            - name: mail-storage
+              mountPath: /var/mail
+              readOnly: true
       volumes:
         - name: mail-storage
           persistentVolumeClaim:

redxen/mail/dovecot/service.yml

@@ -20,3 +20,6 @@ spec:
     - name: auth
       port: 11666
       protocol: TCP
+    - name: prometheus-node
+      port: 9100
+      protocol: TCP

redxen/mail/postfix/deployment.yml

@@ -93,6 +93,21 @@ spec:
           volumeMounts:
             - name: logger-exchange
               mountPath: /var/log/postfix
+        - name: node-exporter
+          image: redxen.eu/daemons/node_exporter:latest
+          securityContext:
+            capabilities:
+              drop: ["ALL"]
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+          ports:
+            - name: prometheus-node
+              containerPort: 9100
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              port: 9100
+              path: /metrics
       volumes:
         - name: postfix-storage
           emptyDir:

redxen/mail/postfix/service.yml

@@ -14,3 +14,6 @@ spec:
     - name: smtp
       port: 25
       protocol: TCP
+    - name: prometheus-node
+      port: 9100
+      protocol: TCP

redxen/mail/rspamd/deployment.yml

@@ -50,10 +50,29 @@ spec:
             - name: rspamd-data
               mountPath: /var/lib/rspamd
           ports:
-            - containerPort: 7510
+            - name: milter
-            - containerPort: 7511
+              containerPort: 7510
-            - containerPort: 7512
+            - name: prometheus-ctrl
-            - containerPort: 7513
+              containerPort: 7512
+          livenessProbe:
+            httpGet:
+              port: 7512
+              path: /ping
+        - name: node-exporter
+          image: redxen.eu/daemons/node_exporter:latest
+          securityContext:
+            capabilities:
+              drop: ["ALL"]
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+          ports:
+            - name: prometheus-node
+              containerPort: 9100
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              port: 9100
+              path: /metrics
       volumes:
         - name: rspamd-data
           emptyDir:

redxen/mail/rspamd/service.yml

@@ -11,15 +11,12 @@ spec:
     app: rspamd
   type: ClusterIP
   ports:
-    - name: normal
-      port: 7511
-      protocol: TCP
     - name: controller
       port: 7512
       protocol: TCP
     - name: proxy
       port: 7510
       protocol: TCP
-    - name: fuzzy
+    - name: prometheus-node
-      port: 7513
+      port: 9100
       protocol: TCP

redxen/murmur/deployment.yml

@@ -53,7 +53,7 @@ spec:
             - name: prometheus-node
               containerPort: 9100
               protocol: TCP
-          livenessProbe:
+          readinessProbe:
             httpGet:
               port: 9100
               path: /metrics

redxen/nsd/deployment.yml

@@ -65,6 +65,24 @@ spec:
             - name: dns-udp
               protocol: UDP
               containerPort: 53
+            - name: prometheus-nsd
+              protocol: TCP
+              containerPort: 9104
+        - name: node-exporter
+          image: redxen.eu/daemons/node_exporter:latest
+          securityContext:
+            capabilities:
+              drop: ["ALL"]
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+          ports:
+            - name: prometheus-node
+              containerPort: 9100
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              port: 9100
+              path: /metrics
       volumes:
         - name: nsd-db
           emptyDir:

redxen/postgres_exporter/deployment.yml

@@ -25,7 +25,7 @@ spec:
         runAsUser: 10000
         runAsGroup: 10000
       containers:
-        - name: node-exporter
+        - name: postgres-exporter
           image: redxen.eu/daemons/postgres_exporter:latest
           securityContext:
             capabilities:

redxen/postgresql/deployment.yml

@@ -83,7 +83,7 @@ spec:
             - name: prometheus-node
               containerPort: 9100
               protocol: TCP
-          livenessProbe:
+          readinessProbe:
             httpGet:
               port: 9100
               path: /metrics
@@ -91,14 +91,10 @@ spec:
             - name: postgresql-storage
               mountPath: /var/lib/postgresql/data
               readOnly: true
-            - name: tmpfs-run
-              mountPath: /run/postgresql
-              readOnly: true
       volumes:
         - name: postgresql-storage
           persistentVolumeClaim:
             claimName: postgresql-pvc
-            readOnly: false
         - name: tmpfs-run
           emptyDir:
             medium: Memory

redxen/prometheus/deployment.yml

@@ -57,8 +57,26 @@ spec:
             httpGet:
               port: 9090
               path: /
+        - name: node-exporter
+          image: redxen.eu/daemons/node_exporter:latest
+          securityContext:
+            capabilities:
+              drop: ["ALL"]
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+          ports:
+            - name: prometheus-node
+              containerPort: 9100
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              port: 9100
+              path: /metrics
+          volumeMounts:
+            - name: prometheus-storage
+              mountPath: /var/lib/prometheus
+              readOnly: true
       volumes:
         - name: prometheus-storage
           persistentVolumeClaim:
             claimName: prometheus-pvc
-            readOnly: false

redxen/prometheus/service.yml

@@ -14,3 +14,6 @@ spec:
     - name: http
       port: 9090
       protocol: TCP
+    - name: prometheus-node
+      port: 9100
+      protocol: TCP

redxen/redis/deployment.yml

@@ -55,6 +55,28 @@ spec:
           readinessProbe:
             exec:
               command: ["redis-cli", "ping"]
+          livenessProbe:
+            exec:
+              command: ["redis-cli", "ping"]
+        - name: node-exporter
+          image: redxen.eu/daemons/node_exporter:latest
+          securityContext:
+            capabilities:
+              drop: ["ALL"]
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+          ports:
+            - name: prometheus-node
+              containerPort: 9100
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              port: 9100
+              path: /metrics
+          volumeMounts:
+            - name: redis-storage
+              mountPath: /var/lib/redis
+              readOnly: true
       volumes:
         - name: redis-storage
           persistentVolumeClaim:

redxen/redis/service.yml

@@ -14,3 +14,6 @@ spec:
     - name: redis
       port: 6379
       protocol: TCP
+    - name: prometheus-node
+      port: 9100
+      protocol: TCP

redxen/registry/deployment.yml

@@ -64,4 +64,3 @@ spec:
         - name: registry-storage
           persistentVolumeClaim:
             claimName: registry-pvc
-            readOnly: false

redxen/seedbox/transmission/deployment.yml

@@ -76,6 +76,25 @@ spec:
             httpGet:
               port: 80
               path: /
+        - name: node-exporter
+          image: redxen.eu/daemons/node_exporter:latest
+          securityContext:
+            capabilities:
+              drop: ["ALL"]
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+          ports:
+            - name: prometheus-node
+              containerPort: 9100
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              port: 9100
+              path: /metrics
+          volumeMounts:
+            - name: seedbox-data
+              mountPath: /var/data
+              readOnly: true
       volumes:
         - name: seedbox-data
           persistentVolumeClaim:

redxen/seedbox/transmission/service.yml

@@ -14,3 +14,6 @@ spec:
     - name: http
       port: 80
       protocol: TCP
+    - name: prometheus-node
+      port: 9100
+      protocol: TCP