Skip to content

Commit b3c96e2

Browse files
smartx-jshansmartx-jshan
committed
update
1 parent da9989d commit b3c96e2

10 files changed

+715
-0
lines changed

‎workflows/fabric/ambassador-rbac.yaml

Lines changed: 95 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,95 @@
1+
---
2+
apiVersion: v1
3+
kind: Service
4+
metadata:
5+
labels:
6+
service: ambassador-admin
7+
name: ambassador-admin
8+
spec:
9+
type: NodePort
10+
ports:
11+
- name: ambassador-admin
12+
port: 8877
13+
targetPort: 8877
14+
selector:
15+
service: ambassador
16+
---
17+
apiVersion: rbac.authorization.k8s.io/v1beta1
18+
kind: ClusterRole
19+
metadata:
20+
name: ambassador
21+
rules:
22+
- apiGroups: [""]
23+
resources:
24+
- services
25+
verbs: ["get", "list", "watch"]
26+
- apiGroups: [""]
27+
resources:
28+
- configmaps
29+
verbs: ["create", "update", "patch", "get", "list", "watch"]
30+
- apiGroups: [""]
31+
resources:
32+
- secrets
33+
verbs: ["get", "list", "watch"]
34+
---
35+
apiVersion: v1
36+
kind: ServiceAccount
37+
metadata:
38+
name: ambassador
39+
---
40+
apiVersion: rbac.authorization.k8s.io/v1beta1
41+
kind: ClusterRoleBinding
42+
metadata:
43+
name: ambassador
44+
roleRef:
45+
apiGroup: rbac.authorization.k8s.io
46+
kind: ClusterRole
47+
name: ambassador
48+
subjects:
49+
- kind: ServiceAccount
50+
name: ambassador
51+
namespace: default
52+
---
53+
apiVersion: extensions/v1beta1
54+
kind: Deployment
55+
metadata:
56+
name: ambassador
57+
spec:
58+
replicas: 1
59+
template:
60+
metadata:
61+
labels:
62+
service: ambassador
63+
spec:
64+
serviceAccountName: ambassador
65+
containers:
66+
- name: ambassador
67+
image: datawire/ambassador:0.21.0
68+
imagePullPolicy: Always
69+
resources:
70+
limits:
71+
cpu: 1
72+
memory: 400Mi
73+
requests:
74+
cpu: 200m
75+
memory: 100Mi
76+
env:
77+
- name: AMBASSADOR_NAMESPACE
78+
valueFrom:
79+
fieldRef:
80+
fieldPath: metadata.namespace
81+
livenessProbe:
82+
httpGet:
83+
path: /ambassador/v0/check_alive
84+
port: 8877
85+
initialDelaySeconds: 3
86+
periodSeconds: 3
87+
readinessProbe:
88+
httpGet:
89+
path: /ambassador/v0/check_ready
90+
port: 8877
91+
initialDelaySeconds: 3
92+
periodSeconds: 3
93+
- name: statsd-sink
94+
image: datawire/prom-statsd-exporter:0.6.0
95+
restartPolicy: Always

‎workflows/fabric/ambassador.yaml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
---
2+
apiVersion: v1
3+
kind: Service
4+
metadata:
5+
labels:
6+
service: ambassador
7+
name: ambassador
8+
spec:
9+
type: LoadBalancer
10+
ports:
11+
- name: ambassador
12+
port: 80
13+
targetPort: 80
14+
selector:
15+
service: ambassador

‎workflows/fabric/httpbin.yaml

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
apiVersion: v1
2+
kind: Service
3+
metadata:
4+
name: httpbin
5+
annotations:
6+
getambassador.io/config: |
7+
---
8+
apiVersion: ambassador/v0
9+
kind: Mapping
10+
name: httpbin_mapping
11+
prefix: /httpbin/
12+
service: httpbin.org:80
13+
host_rewrite: httpbin.org
14+
spec:
15+
ports:
16+
- port: 80

‎workflows/fabric/prom-operator.yaml

Lines changed: 101 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,101 @@
1+
apiVersion: rbac.authorization.k8s.io/v1beta1
2+
kind: ClusterRoleBinding
3+
metadata:
4+
name: prometheus-operator
5+
roleRef:
6+
apiGroup: rbac.authorization.k8s.io
7+
kind: ClusterRole
8+
name: prometheus-operator
9+
subjects:
10+
- kind: ServiceAccount
11+
name: prometheus-operator
12+
namespace: default
13+
---
14+
apiVersion: rbac.authorization.k8s.io/v1beta1
15+
kind: ClusterRole
16+
metadata:
17+
name: prometheus-operator
18+
rules:
19+
- apiGroups:
20+
- extensions
21+
resources:
22+
- thirdpartyresources
23+
verbs:
24+
- "*"
25+
- apiGroups:
26+
- apiextensions.k8s.io
27+
resources:
28+
- customresourcedefinitions
29+
verbs:
30+
- "*"
31+
- apiGroups:
32+
- monitoring.coreos.com
33+
resources:
34+
- alertmanagers
35+
- prometheuses
36+
- servicemonitors
37+
verbs:
38+
- "*"
39+
- apiGroups:
40+
- apps
41+
resources:
42+
- statefulsets
43+
verbs: ["*"]
44+
- apiGroups: [""]
45+
resources:
46+
- configmaps
47+
- secrets
48+
verbs: ["*"]
49+
- apiGroups: [""]
50+
resources:
51+
- pods
52+
verbs: ["list", "delete"]
53+
- apiGroups: [""]
54+
resources:
55+
- services
56+
- endpoints
57+
verbs: ["get", "create", "update"]
58+
- apiGroups: [""]
59+
resources:
60+
- nodes
61+
verbs: ["list", "watch"]
62+
- apiGroups: [""]
63+
resources:
64+
- namespaces
65+
verbs: ["list"]
66+
---
67+
apiVersion: v1
68+
kind: ServiceAccount
69+
metadata:
70+
name: prometheus-operator
71+
---
72+
apiVersion: extensions/v1beta1
73+
kind: Deployment
74+
metadata:
75+
labels:
76+
k8s-app: prometheus-operator
77+
name: prometheus-operator
78+
spec:
79+
replicas: 1
80+
template:
81+
metadata:
82+
labels:
83+
k8s-app: prometheus-operator
84+
spec:
85+
containers:
86+
- args:
87+
- --kubelet-service=kube-system/kubelet
88+
- --config-reloader-image=quay.io/coreos/configmap-reload:v0.0.1
89+
image: quay.io/coreos/prometheus-operator:v0.15.0
90+
name: prometheus-operator
91+
ports:
92+
- containerPort: 8080
93+
name: http
94+
resources:
95+
limits:
96+
cpu: 200m
97+
memory: 100Mi
98+
requests:
99+
cpu: 100m
100+
memory: 50Mi
101+
serviceAccountName: prometheus-operator

‎workflows/fabric/prom-rbac.yaml

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
apiVersion: v1
2+
kind: ServiceAccount
3+
metadata:
4+
name: prometheus
5+
---
6+
apiVersion: rbac.authorization.k8s.io/v1beta1
7+
kind: ClusterRole
8+
metadata:
9+
name: prometheus
10+
rules:
11+
- apiGroups: [""]
12+
resources:
13+
- nodes
14+
- services
15+
- endpoints
16+
- pods
17+
verbs: ["get", "list", "watch"]
18+
- apiGroups: [""]
19+
resources:
20+
- configmaps
21+
verbs: ["get"]
22+
- nonResourceURLs: ["/metrics"]
23+
verbs: ["get"]
24+
---
25+
apiVersion: rbac.authorization.k8s.io/v1beta1
26+
kind: ClusterRoleBinding
27+
metadata:
28+
name: prometheus
29+
roleRef:
30+
apiGroup: rbac.authorization.k8s.io
31+
kind: ClusterRole
32+
name: prometheus
33+
subjects:
34+
- kind: ServiceAccount
35+
name: prometheus
36+
namespace: default

‎workflows/fabric/prom-svc.yaml

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
apiVersion: v1
2+
kind: Service
3+
metadata:
4+
name: prometheus
5+
spec:
6+
type: NodePort
7+
ports:
8+
- name: web
9+
port: 9090
10+
protocol: TCP
11+
targetPort: web
12+
selector:
13+
prometheus: prometheus

‎workflows/fabric/prometheus.yaml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
apiVersion: monitoring.coreos.com/v1
2+
kind: Prometheus
3+
metadata:
4+
name: prometheus
5+
spec:
6+
serviceAccountName: prometheus
7+
serviceMonitorSelector:
8+
matchLabels:
9+
ambassador: monitoring
10+
resources:
11+
requests:
12+
memory: 400Mi

‎workflows/fabric/statsd-sink-svc.yaml

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
---
2+
apiVersion: v1
3+
kind: Service
4+
metadata:
5+
name: ambassador-monitor
6+
labels:
7+
service: ambassador-monitor
8+
spec:
9+
selector:
10+
service: ambassador
11+
type: ClusterIP
12+
clusterIP: None
13+
ports:
14+
- name: prometheus-metrics
15+
port: 9102
16+
targetPort: 9102
17+
protocol: TCP
18+
---
19+
apiVersion: monitoring.coreos.com/v1
20+
kind: ServiceMonitor
21+
metadata:
22+
name: ambassador-monitor
23+
labels:
24+
ambassador: monitoring
25+
spec:
26+
selector:
27+
matchLabels:
28+
service: ambassador-monitor
29+
endpoints:
30+
- port: prometheus-metrics

0 commit comments

Comments
 (0)