puppet-prod/hieradata/roles/infra/metrics/vmagent.yaml
Ben Vincent 6400c89853 feat: add vmcluster static targets (#426)
- add ability to list static targets for vmagent to scrape
- add vyos router to be scraped

Reviewed-on: #426
2025-11-20 20:19:53 +11:00

68 lines
1.8 KiB
YAML

---
hiera_include:
- vmcluster::vmagent
vmcluster::vmagent::enable: true
vmcluster::vmagent::static_targets:
vyos_node:
targets:
- '198.18.21.160:9100'
scrape_interval: '15s'
metrics_path: '/metrics'
scheme: 'http'
labels:
instance: 'syrtvm0001.main.unkin.net'
job: 'vyos_node'
vmcluster::vmagent::options:
tls: 'true'
tlsCertFile: '/etc/pki/tls/vault/certificate.crt'
tlsKeyFile: '/etc/pki/tls/vault/private.key'
tlsMinVersion: 'TLS12'
remoteWrite.url:
- https://vminsert.service.consul:8480/insert/0/prometheus
remoteWrite.tlsCertFile: '/etc/pki/tls/vault/certificate.crt'
remoteWrite.tlsKeyFile: '/etc/pki/tls/vault/private.key'
remoteWrite.tlsCAFile: '/etc/pki/tls/certs/ca-bundle.crt'
promscrape.config: '/etc/vmagent/scrape.yaml'
memory.allowedBytes: '1GiB'
envflag.enable: 'true'
# additional altnames
profiles::pki::vault::alt_names:
- vmagent.main.unkin.net
- vmagent.service.consul
- vmagent.query.consul
- "vmagent.service.%{facts.country}-%{facts.region}.consul"
consul::services:
vmagent:
service_name: 'vmagent'
tags:
- 'metrics'
- 'metrics_scheme=https'
- 'metrics_job=vmagent'
address: "%{facts.networking.ip}"
port: 8429
checks:
- id: 'vmagent_http_check'
name: 'vmagent HTTP Check'
http: "https://%{facts.networking.fqdn}:8429/health"
method: 'GET'
tls_skip_verify: true
interval: '10s'
timeout: '1s'
profiles::consul::client::node_rules:
- resource: service
segment: vmagent
disposition: write
- resource: agent_prefix
segment: ''
disposition: read
- resource: node_prefix
segment: ''
disposition: read
- resource: service_prefix
segment: ''
disposition: read