-
-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(container)!: Update image kube-prometheus-stack to v61.7.0 #2731
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
layla-bot
bot
added
area/kubernetes
Changes made in the kubernetes directory
cluster/storage
labels
Jul 27, 2024
--- kubernetes/storage/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack
+++ kubernetes/storage/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack
@@ -13,13 +13,13 @@
spec:
chart: kube-prometheus-stack
sourceRef:
kind: HelmRepository
name: prometheus-community
namespace: flux-system
- version: 60.1.0
+ version: 61.7.0
dependsOn:
- name: openebs
namespace: openebs-system
install:
crds: CreateReplace
remediation: |
--- HelmRelease: observability/kube-prometheus-stack ServiceAccount: observability/kube-state-metrics
+++ HelmRelease: observability/kube-prometheus-stack ServiceAccount: observability/kube-state-metrics
@@ -1,9 +1,10 @@
---
apiVersion: v1
kind: ServiceAccount
+automountServiceAccountToken: true
metadata:
labels:
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: metrics
app.kubernetes.io/part-of: kube-state-metrics
app.kubernetes.io/name: kube-state-metrics
--- HelmRelease: observability/kube-prometheus-stack ServiceAccount: observability/node-exporter
+++ HelmRelease: observability/kube-prometheus-stack ServiceAccount: observability/node-exporter
@@ -9,7 +9,8 @@
app.kubernetes.io/component: metrics
app.kubernetes.io/part-of: prometheus-node-exporter
app.kubernetes.io/name: prometheus-node-exporter
app.kubernetes.io/instance: kube-prometheus-stack
jobLabel: node-exporter
release: kube-prometheus-stack
+automountServiceAccountToken: false
--- HelmRelease: observability/kube-prometheus-stack DaemonSet: observability/node-exporter
+++ HelmRelease: observability/kube-prometheus-stack DaemonSet: observability/node-exporter
@@ -41,13 +41,13 @@
runAsGroup: 65534
runAsNonRoot: true
runAsUser: 65534
serviceAccountName: node-exporter
containers:
- name: node-exporter
- image: quay.io/prometheus/node-exporter:v1.8.1
+ image: quay.io/prometheus/node-exporter:v1.8.2
imagePullPolicy: IfNotPresent
args:
- --path.procfs=/host/proc
- --path.sysfs=/host/sys
- --path.rootfs=/host/root
- --path.udev.data=/host/root/run/udev/data
--- HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-state-metrics
+++ HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-state-metrics
@@ -27,12 +27,13 @@
app.kubernetes.io/component: metrics
app.kubernetes.io/part-of: kube-state-metrics
app.kubernetes.io/name: kube-state-metrics
app.kubernetes.io/instance: kube-prometheus-stack
release: kube-prometheus-stack
spec:
+ automountServiceAccountToken: true
hostNetwork: false
serviceAccountName: kube-state-metrics
securityContext:
fsGroup: 65534
runAsGroup: 65534
runAsNonRoot: true
@@ -43,38 +44,39 @@
- name: kube-state-metrics
args:
- --port=8080
- --resources=certificatesigningrequests,configmaps,cronjobs,daemonsets,deployments,endpoints,horizontalpodautoscalers,ingresses,jobs,leases,limitranges,mutatingwebhookconfigurations,namespaces,networkpolicies,nodes,persistentvolumeclaims,persistentvolumes,poddisruptionbudgets,pods,replicasets,replicationcontrollers,resourcequotas,secrets,services,statefulsets,storageclasses,validatingwebhookconfigurations,volumeattachments
- --metric-labels-allowlist=pods=[*],deployments=[*],persistentvolumeclaims=[*]
imagePullPolicy: IfNotPresent
- image: registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0
+ image: registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0
ports:
- containerPort: 8080
name: http
livenessProbe:
failureThreshold: 3
httpGet:
httpHeaders: null
- path: /healthz
+ path: /livez
port: 8080
scheme: HTTP
initialDelaySeconds: 5
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
readinessProbe:
failureThreshold: 3
httpGet:
httpHeaders: null
- path: /
+ path: /readyz
port: 8080
scheme: HTTP
initialDelaySeconds: 5
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
+ resources: {}
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
--- HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-prometheus-stack-operator
+++ HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-prometheus-stack-operator
@@ -31,23 +31,23 @@
app: kube-prometheus-stack-operator
app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
app.kubernetes.io/component: prometheus-operator
spec:
containers:
- name: kube-prometheus-stack
- image: quay.io/prometheus-operator/prometheus-operator:v0.74.0
+ image: quay.io/prometheus-operator/prometheus-operator:v0.75.2
imagePullPolicy: IfNotPresent
args:
- --kubelet-service=kube-system/kube-prometheus-stack-kubelet
- --localhost=127.0.0.1
- - --prometheus-config-reloader=quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0
+ - --prometheus-config-reloader=quay.io/prometheus-operator/prometheus-config-reloader:v0.75.2
- --config-reloader-cpu-request=0
- --config-reloader-cpu-limit=0
- --config-reloader-memory-request=0
- --config-reloader-memory-limit=0
- - --thanos-default-base-image=quay.io/thanos/thanos:v0.35.1
+ - --thanos-default-base-image=quay.io/thanos/thanos:v0.36.0
- --secret-field-selector=type!=kubernetes.io/dockercfg,type!=kubernetes.io/service-account-token,type!=helm.sh/release.v1
- --web.enable-tls=true
- --web.cert-file=/cert/cert
- --web.key-file=/cert/key
- --web.listen-address=:10250
- --web.tls-min-version=VersionTLS13
--- HelmRelease: observability/kube-prometheus-stack Prometheus: observability/kube-prometheus-stack
+++ HelmRelease: observability/kube-prometheus-stack Prometheus: observability/kube-prometheus-stack
@@ -9,14 +9,15 @@
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/instance: kube-prometheus-stack
app.kubernetes.io/part-of: kube-prometheus-stack
release: kube-prometheus-stack
heritage: Helm
spec:
- image: quay.io/prometheus/prometheus:v2.52.0
- version: v2.52.0
+ automountServiceAccountToken: true
+ image: quay.io/prometheus/prometheus:v2.53.1
+ version: v2.53.1
externalLabels:
cluster: storage
replicaExternalLabelName: __replica__
externalUrl: http://prometheus.outsideour.casa/
paused: false
replicas: 1
--- HelmRelease: observability/kube-prometheus-stack PrometheusRule: observability/kube-prometheus-stack-kube-prometheus-node-recording.rules
+++ HelmRelease: observability/kube-prometheus-stack PrometheusRule: observability/kube-prometheus-stack-kube-prometheus-node-recording.rules
@@ -20,13 +20,13 @@
record: instance:node_cpu:rate:sum
- expr: sum(rate(node_network_receive_bytes_total[3m])) BY (instance)
record: instance:node_network_receive_bytes:rate:sum
- expr: sum(rate(node_network_transmit_bytes_total[3m])) BY (instance)
record: instance:node_network_transmit_bytes:rate:sum
- expr: sum(rate(node_cpu_seconds_total{mode!="idle",mode!="iowait",mode!="steal"}[5m]))
- WITHOUT (cpu, mode) / ON(instance) GROUP_LEFT() count(sum(node_cpu_seconds_total)
+ WITHOUT (cpu, mode) / ON (instance) GROUP_LEFT() count(sum(node_cpu_seconds_total)
BY (instance, cpu)) BY (instance)
record: instance:node_cpu:ratio
- expr: sum(rate(node_cpu_seconds_total{mode!="idle",mode!="iowait",mode!="steal"}[5m]))
record: cluster:node_cpu:sum_rate5m
- expr: cluster:node_cpu:sum_rate5m / count(sum(node_cpu_seconds_total) BY (instance,
cpu))
--- HelmRelease: observability/kube-prometheus-stack PrometheusRule: observability/kube-prometheus-stack-prometheus
+++ HelmRelease: observability/kube-prometheus-stack PrometheusRule: observability/kube-prometheus-stack-prometheus
@@ -36,12 +36,24 @@
summary: Failed Prometheus SD refresh.
expr: increase(prometheus_sd_refresh_failures_total{job="kube-prometheus-stack-prometheus",namespace="observability"}[10m])
> 0
for: 20m
labels:
severity: warning
+ - alert: PrometheusKubernetesListWatchFailures
+ annotations:
+ description: Kubernetes service discovery of Prometheus {{$labels.namespace}}/{{$labels.pod}}
+ is experiencing {{ printf "%.0f" $value }} failures with LIST/WATCH requests
+ to the Kubernetes API in the last 5 minutes.
+ runbook_url: https://runbooks.prometheus-operator.dev/runbooks/prometheus/prometheuskuberneteslistwatchfailures
+ summary: Requests in Kubernetes SD are failing.
+ expr: increase(prometheus_sd_kubernetes_failures_total{job="kube-prometheus-stack-prometheus",namespace="observability"}[5m])
+ > 0
+ for: 15m
+ labels:
+ severity: warning
- alert: PrometheusNotificationQueueRunningFull
annotations:
description: Alert notification queue of Prometheus {{$labels.namespace}}/{{$labels.pod}}
is running full.
runbook_url: https://runbooks.prometheus-operator.dev/runbooks/prometheus/prometheusnotificationqueuerunningfull
summary: Prometheus alert notification queue predicted to run full in less |
layla-bot
bot
force-pushed
the
renovate/kube-prometheus-stack-61.x
branch
from
July 27, 2024 11:04
26f563a
to
d554482
Compare
layla-bot
bot
changed the title
fix(container): update image kube-prometheus-stack to v61.3.3
feat(container): update image kube-prometheus-stack to v61.4.0
Jul 27, 2024
layla-bot
bot
force-pushed
the
renovate/kube-prometheus-stack-61.x
branch
4 times, most recently
from
July 28, 2024 07:05
598d828
to
931cf76
Compare
layla-bot
bot
changed the title
feat(container): update image kube-prometheus-stack to v61.4.0
feat(container): update image kube-prometheus-stack to v61.5.0
Jul 28, 2024
layla-bot
bot
force-pushed
the
renovate/kube-prometheus-stack-61.x
branch
3 times, most recently
from
July 29, 2024 09:06
54d3ad8
to
aa31a07
Compare
layla-bot
bot
force-pushed
the
renovate/kube-prometheus-stack-61.x
branch
from
July 29, 2024 14:06
aa31a07
to
24f8aba
Compare
layla-bot
bot
changed the title
feat(container): update image kube-prometheus-stack to v61.5.0
feat(container): update image kube-prometheus-stack to v61.6.0
Jul 29, 2024
layla-bot
bot
force-pushed
the
renovate/kube-prometheus-stack-61.x
branch
4 times, most recently
from
July 29, 2024 19:54
f8cfab6
to
a02171a
Compare
--- kubernetes/main/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack
+++ kubernetes/main/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack
@@ -13,13 +13,13 @@
spec:
chart: kube-prometheus-stack
sourceRef:
kind: HelmRepository
name: prometheus-community
namespace: flux-system
- version: 61.6.1
+ version: 61.7.0
dependsOn:
- name: prometheus-operator-crds
namespace: observability
- name: openebs
namespace: openebs-system
install: |
layla-bot
bot
force-pushed
the
renovate/kube-prometheus-stack-61.x
branch
5 times, most recently
from
July 30, 2024 01:32
74838e5
to
44369a8
Compare
layla-bot
bot
force-pushed
the
renovate/kube-prometheus-stack-61.x
branch
4 times, most recently
from
July 30, 2024 23:05
2f8ab8e
to
0b44931
Compare
layla-bot
bot
changed the title
feat(container): update image kube-prometheus-stack to v61.6.0
feat(container)!: Update image kube-prometheus-stack to v61
Jul 30, 2024
layla-bot
bot
force-pushed
the
renovate/kube-prometheus-stack-61.x
branch
5 times, most recently
from
August 2, 2024 10:04
3443814
to
d3b00aa
Compare
layla-bot
bot
changed the title
feat(container)!: Update image kube-prometheus-stack to v61
feat(container)!: Update image kube-prometheus-stack to v61.7.0
Aug 2, 2024
--- HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-prometheus-stack-operator
+++ HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-prometheus-stack-operator
@@ -41,13 +41,13 @@
- --localhost=127.0.0.1
- --prometheus-config-reloader=quay.io/prometheus-operator/prometheus-config-reloader:v0.75.2
- --config-reloader-cpu-request=0
- --config-reloader-cpu-limit=0
- --config-reloader-memory-request=0
- --config-reloader-memory-limit=0
- - --thanos-default-base-image=quay.io/thanos/thanos:v0.35.1
+ - --thanos-default-base-image=quay.io/thanos/thanos:v0.36.0
- --secret-field-selector=type!=kubernetes.io/dockercfg,type!=kubernetes.io/service-account-token,type!=helm.sh/release.v1
- --web.enable-tls=true
- --web.cert-file=/cert/cert
- --web.key-file=/cert/key
- --web.listen-address=:10250
- --web.tls-min-version=VersionTLS13 |
layla-bot
bot
force-pushed
the
renovate/kube-prometheus-stack-61.x
branch
8 times, most recently
from
August 4, 2024 05:44
460c5a4
to
59706d3
Compare
layla-bot
bot
force-pushed
the
renovate/kube-prometheus-stack-61.x
branch
from
August 4, 2024 05:48
59706d3
to
690a6ee
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
area/kubernetes
Changes made in the kubernetes directory
cluster/main
cluster/storage
renovate/container
type/patch
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
60.1.0
->61.7.0
61.6.1
->61.7.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.