Tweak probes, add monitoring where it's desired

This commit is contained in:
Alex D. 2025-04-28 19:07:28 +00:00
parent 774678b0e1
commit dcf95ae3ae
Signed by: caskd
GPG Key ID: F92BA85F61F4C173
24 changed files with 182 additions and 25 deletions

View File

@ -44,5 +44,5 @@ spec:
ports:
- name: http-git
containerPort: 8923
- name: prometheus-anub-git
- name: prometheus-anug
containerPort: 9103

View File

@ -14,6 +14,6 @@ spec:
- name: http-git
port: 8923
protocol: TCP
- name: prometheus-anub-git
- name: prometheus-anug
port: 9103
protocol: TCP

View File

@ -73,7 +73,7 @@ spec:
- name: prometheus-node
containerPort: 9100
protocol: TCP
livenessProbe:
readinessProbe:
httpGet:
port: 9100
path: /metrics

View File

@ -70,7 +70,7 @@ spec:
- name: prometheus-node
containerPort: 9100
protocol: TCP
livenessProbe:
readinessProbe:
httpGet:
port: 9100
path: /metrics

View File

@ -78,7 +78,7 @@ spec:
- name: prometheus-node
containerPort: 9100
protocol: TCP
livenessProbe:
readinessProbe:
httpGet:
port: 9100
path: /metrics

View File

@ -69,7 +69,7 @@ spec:
- name: prometheus-node
containerPort: 9100
protocol: TCP
livenessProbe:
readinessProbe:
httpGet:
port: 9100
path: /metrics

View File

@ -51,7 +51,8 @@ spec:
- name: loki-storage
mountPath: /var/lib/loki
ports:
- containerPort: 3100
- name: http
containerPort: 3100
readinessProbe:
httpGet:
port: 3100
@ -60,6 +61,25 @@ spec:
httpGet:
port: 3100
path: /ready
- name: node-exporter
image: redxen.eu/daemons/node_exporter:latest
securityContext:
capabilities:
drop: ["ALL"]
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
ports:
- name: prometheus-node
containerPort: 9100
protocol: TCP
readinessProbe:
httpGet:
port: 9100
path: /metrics
volumeMounts:
- name: loki-storage
mountPath: /var/lib/loki
readOnly: true
volumes:
- name: loki-storage
persistentVolumeClaim:

View File

@ -52,6 +52,25 @@ spec:
containerPort: 11555
- name: auth
containerPort: 11666
- name: node-exporter
image: redxen.eu/daemons/node_exporter:latest
securityContext:
capabilities:
drop: ["ALL"]
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
ports:
- name: prometheus-node
containerPort: 9100
protocol: TCP
readinessProbe:
httpGet:
port: 9100
path: /metrics
volumeMounts:
- name: mail-storage
mountPath: /var/mail
readOnly: true
volumes:
- name: mail-storage
persistentVolumeClaim:

View File

@ -20,3 +20,6 @@ spec:
- name: auth
port: 11666
protocol: TCP
- name: prometheus-node
port: 9100
protocol: TCP

View File

@ -93,6 +93,21 @@ spec:
volumeMounts:
- name: logger-exchange
mountPath: /var/log/postfix
- name: node-exporter
image: redxen.eu/daemons/node_exporter:latest
securityContext:
capabilities:
drop: ["ALL"]
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
ports:
- name: prometheus-node
containerPort: 9100
protocol: TCP
readinessProbe:
httpGet:
port: 9100
path: /metrics
volumes:
- name: postfix-storage
emptyDir:

View File

@ -14,3 +14,6 @@ spec:
- name: smtp
port: 25
protocol: TCP
- name: prometheus-node
port: 9100
protocol: TCP

View File

@ -50,10 +50,29 @@ spec:
- name: rspamd-data
mountPath: /var/lib/rspamd
ports:
- containerPort: 7510
- containerPort: 7511
- containerPort: 7512
- containerPort: 7513
- name: milter
containerPort: 7510
- name: prometheus-ctrl
containerPort: 7512
livenessProbe:
httpGet:
port: 7512
path: /ping
- name: node-exporter
image: redxen.eu/daemons/node_exporter:latest
securityContext:
capabilities:
drop: ["ALL"]
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
ports:
- name: prometheus-node
containerPort: 9100
protocol: TCP
readinessProbe:
httpGet:
port: 9100
path: /metrics
volumes:
- name: rspamd-data
emptyDir:

View File

@ -11,15 +11,12 @@ spec:
app: rspamd
type: ClusterIP
ports:
- name: normal
port: 7511
protocol: TCP
- name: controller
port: 7512
protocol: TCP
- name: proxy
port: 7510
protocol: TCP
- name: fuzzy
port: 7513
- name: prometheus-node
port: 9100
protocol: TCP

View File

@ -53,7 +53,7 @@ spec:
- name: prometheus-node
containerPort: 9100
protocol: TCP
livenessProbe:
readinessProbe:
httpGet:
port: 9100
path: /metrics

View File

@ -65,6 +65,24 @@ spec:
- name: dns-udp
protocol: UDP
containerPort: 53
- name: prometheus-nsd
protocol: TCP
containerPort: 9104
- name: node-exporter
image: redxen.eu/daemons/node_exporter:latest
securityContext:
capabilities:
drop: ["ALL"]
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
ports:
- name: prometheus-node
containerPort: 9100
protocol: TCP
readinessProbe:
httpGet:
port: 9100
path: /metrics
volumes:
- name: nsd-db
emptyDir:

View File

@ -25,7 +25,7 @@ spec:
runAsUser: 10000
runAsGroup: 10000
containers:
- name: node-exporter
- name: postgres-exporter
image: redxen.eu/daemons/postgres_exporter:latest
securityContext:
capabilities:

View File

@ -83,7 +83,7 @@ spec:
- name: prometheus-node
containerPort: 9100
protocol: TCP
livenessProbe:
readinessProbe:
httpGet:
port: 9100
path: /metrics
@ -91,14 +91,10 @@ spec:
- name: postgresql-storage
mountPath: /var/lib/postgresql/data
readOnly: true
- name: tmpfs-run
mountPath: /run/postgresql
readOnly: true
volumes:
- name: postgresql-storage
persistentVolumeClaim:
claimName: postgresql-pvc
readOnly: false
- name: tmpfs-run
emptyDir:
medium: Memory

View File

@ -57,8 +57,26 @@ spec:
httpGet:
port: 9090
path: /
- name: node-exporter
image: redxen.eu/daemons/node_exporter:latest
securityContext:
capabilities:
drop: ["ALL"]
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
ports:
- name: prometheus-node
containerPort: 9100
protocol: TCP
readinessProbe:
httpGet:
port: 9100
path: /metrics
volumeMounts:
- name: prometheus-storage
mountPath: /var/lib/prometheus
readOnly: true
volumes:
- name: prometheus-storage
persistentVolumeClaim:
claimName: prometheus-pvc
readOnly: false

View File

@ -14,3 +14,6 @@ spec:
- name: http
port: 9090
protocol: TCP
- name: prometheus-node
port: 9100
protocol: TCP

View File

@ -55,6 +55,28 @@ spec:
readinessProbe:
exec:
command: ["redis-cli", "ping"]
livenessProbe:
exec:
command: ["redis-cli", "ping"]
- name: node-exporter
image: redxen.eu/daemons/node_exporter:latest
securityContext:
capabilities:
drop: ["ALL"]
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
ports:
- name: prometheus-node
containerPort: 9100
protocol: TCP
readinessProbe:
httpGet:
port: 9100
path: /metrics
volumeMounts:
- name: redis-storage
mountPath: /var/lib/redis
readOnly: true
volumes:
- name: redis-storage
persistentVolumeClaim:

View File

@ -14,3 +14,6 @@ spec:
- name: redis
port: 6379
protocol: TCP
- name: prometheus-node
port: 9100
protocol: TCP

View File

@ -64,4 +64,3 @@ spec:
- name: registry-storage
persistentVolumeClaim:
claimName: registry-pvc
readOnly: false

View File

@ -76,6 +76,25 @@ spec:
httpGet:
port: 80
path: /
- name: node-exporter
image: redxen.eu/daemons/node_exporter:latest
securityContext:
capabilities:
drop: ["ALL"]
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
ports:
- name: prometheus-node
containerPort: 9100
protocol: TCP
readinessProbe:
httpGet:
port: 9100
path: /metrics
volumeMounts:
- name: seedbox-data
mountPath: /var/data
readOnly: true
volumes:
- name: seedbox-data
persistentVolumeClaim:

View File

@ -14,3 +14,6 @@ spec:
- name: http
port: 80
protocol: TCP
- name: prometheus-node
port: 9100
protocol: TCP