scrape kubelets, cadvisor #180
Conversation
|
not sure about the |
| scheme: https | ||
| tls_config: | ||
| ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt | ||
| insecure_skip_verify: true |
There was a problem hiding this comment.
Seems like we don't have kubernetes.default.svc added to the apiservers cert's SANs. kubernetes.default should work.
| action: replace | ||
| target_label: __scheme__ | ||
| regex: https | ||
| replacement: http |
There was a problem hiding this comment.
this is still necessary to avoid Get https://198.18.0.22:10250/metrics: x509: cannot validate certificate for 198.18.0.22 because it doesn't contain any IP SANs
There was a problem hiding this comment.
Ok, we can't add the whole node subnet as IPs to the certificates. So, here we need to grab the unsecured port or skip host validation
|
It's ready for another review @databus23 |
| action: replace | ||
| target_label: __scheme__ | ||
| regex: https | ||
| replacement: http |
There was a problem hiding this comment.
Ok, we can't add the whole node subnet as IPs to the certificates. So, here we need to grab the unsecured port or skip host validation
prom scrapes kubelets, cadvisor metrics. tested in k-staging.