roles/openshift_metrics/templates/heapster.j2


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66

apiVersion: "v1"
kind: "ReplicationController"
metadata:
  name: heapster
  labels:
    metrics-infra: heapster
    name: heapster
spec:
  selector:
    name: heapster
  replicas: 1
  template:
    version: v1
    metadata:
      name: heapster
      labels:
        metrics-infra: heapster
        name: heapster
    spec:
      serviceAccountName: heapster
      containers:
      - name: heapster
        image: {{image_prefix}}metrics-heapster:{{image_version}}
        ports:
        - containerPort: 8082
          name: "http-endpoint"
        command:
        - "heapster-wrapper.sh"
        - "--wrapper.allowed_users_file=/secrets/heapster.allowed-users"
        - "--source=kubernetes:{{master_url}}?useServiceAccount=true&kubeletHttps=true&kubeletPort=10250"
        - "--tls_cert=/secrets/heapster.cert"
        - "--tls_key=/secrets/heapster.key"
        - "--tls_client_ca=/secrets/heapster.client-ca"
        - "--allowed_users=%allowed_users%"
        - "--metric_resolution={{metrics_resolution}}"
{% if not heapster_standalone %}
        - "--wrapper.username_file=/hawkular-account/hawkular-metrics.username"
        - "--wrapper.password_file=/hawkular-account/hawkular-metrics.password"
        - "--wrapper.endpoint_check=https://hawkular-metrics:443/hawkular/metrics/status"
        - "--sink=hawkular:https://hawkular-metrics:443?tenant=_system&labelToTenant=pod_namespace&labelNodeId={{metrics_node_id}}&caCert=/hawkular-cert/hawkular-metrics-ca.certificate&user=%username%&pass=%password%&filter=label(container_name:^system.slice.*|^user.slice)"
{% endif %}
        volumeMounts:
        - name: heapster-secrets
          mountPath: "/secrets"
{% if not heapster_standalone %}
        - name: hawkular-metrics-certificate
          mountPath: "/hawkular-cert"
        - name: hawkular-metrics-account
          mountPath: "/hawkular-account"
        readinessProbe:
          exec:
            command:
            - "/opt/heapster-readiness.sh"
{% endif %}
      volumes:
        - name: heapster-secrets
          secret:
            secretName: heapster-secrets
{% if not heapster_standalone %}
        - name: hawkular-metrics-certificate
          secret:
            secretName: hawkular-metrics-certificate
        - name: hawkular-metrics-account
          secret:
            secretName: hawkular-metrics-account
{% endif %}