Jeffrey
a57860a576
Bumps every outdated image and chart except databases, which are deliberately left on their current versions. Applications: authentik 2026.5.2 -> 2026.8.0 (server and worker) immich v2.7.5 -> v3.1.0 gitea 1.25 -> 1.27.2 gotify 2.9.1 -> 3.0.0 uptime-kuma 2.2.1 -> 2.5.3 zipline 4.5.3 -> 4.7.0 outline 1.8.1 -> 1.9.2 reactive-resume v5.0 -> v5.2.8 netbootxyz nbxyz18 -> nbxyz24 bentopdf v2.8.2 -> v2.8.7 jellyfin 10.11.9 -> 10.11.11 gitea runner init busybox 1.37.0 -> 1.38.0 Infra: kube-vip v0.9.1 -> v1.2.3 victoria-metrics-k8s-stack 0.77.0 -> 0.91.2 intel-device-plugins v0.35.0 -> v0.36.0 crowdsec-envoy-bouncer 0.6.3 -> 0.8.0 Immich v3 drops pgvecto.rs support. Verified the live database already runs vchord 0.4.3 and pgvector 0.8.1 with no pgvecto.rs extension, both inside the ranges v3 accepts, so no database change is required. The victoria-metrics chart renamed defaultRules.create to defaultRules.enabled at both the top level and per group. Migrated those keys so the etcd, kubeScheduler, kubernetesSystemControllerManager and kubernetesSystemScheduler exclusions keep applying. Without the rename those groups revert to enabled and alert on control-plane components that k3s runs embedded. That chart also moved default rules and dashboards to a runtime sync job instead of templating them, so ArgoCD will prune the VMRules and dashboard ConfigMaps it currently owns and the job will recreate them. kube-vip is not managed by ArgoCD. The manifest change is inert until applied by hand.
216 lines
4.7 KiB
YAML
216 lines
4.7 KiB
YAML
victoria-metrics-operator:
|
|
enabled: true
|
|
crds:
|
|
plain: true
|
|
cleanup:
|
|
enabled: true
|
|
image:
|
|
repository: rancher/kubectl
|
|
pullPolicy: IfNotPresent
|
|
serviceMonitor:
|
|
enabled: true
|
|
operator:
|
|
disable_prometheus_converter: true
|
|
|
|
defaultDashboards:
|
|
enabled: true
|
|
defaultTimezone: Europe/Brussels
|
|
dashboards:
|
|
victoriametrics-vmalert:
|
|
enabled: true
|
|
victoriametrics-operator:
|
|
enabled: true
|
|
node-exporter-full:
|
|
enabled: true
|
|
|
|
defaultRules:
|
|
enabled: true
|
|
groups:
|
|
etcd:
|
|
enabled: false
|
|
kubeScheduler:
|
|
enabled: false
|
|
kubernetesSystemControllerManager:
|
|
enabled: false
|
|
kubernetesSystemScheduler:
|
|
enabled: false
|
|
|
|
vmsingle:
|
|
enabled: true
|
|
spec:
|
|
retentionPeriod: "90d"
|
|
storage:
|
|
storageClassName: longhorn-static
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: 100Gi
|
|
ingress:
|
|
enabled: false
|
|
|
|
alertmanager:
|
|
enabled: true
|
|
spec:
|
|
selectAllByDefault: true
|
|
image:
|
|
tag: v0.28.1
|
|
storage:
|
|
volumeClaimTemplate:
|
|
spec:
|
|
storageClassName: longhorn-static
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: 2Gi
|
|
config:
|
|
route:
|
|
receiver: "blackhole"
|
|
receivers:
|
|
- name: blackhole
|
|
monzoTemplate:
|
|
enabled: true
|
|
|
|
vmalert:
|
|
enabled: true
|
|
spec:
|
|
selectAllByDefault: true
|
|
evaluationInterval: 20s
|
|
|
|
vmagent:
|
|
enabled: true
|
|
spec:
|
|
selectAllByDefault: true
|
|
scrapeInterval: 10s
|
|
extraArgs:
|
|
promscrape.streamParse: "true"
|
|
promscrape.dropOriginalLabels: "true"
|
|
ingress:
|
|
enabled: false
|
|
|
|
grafana:
|
|
enabled: true
|
|
deploymentStrategy:
|
|
type: Recreate
|
|
admin:
|
|
existingSecret: victoria-metrics-secrets
|
|
userKey: grafana_admin_user
|
|
passwordKey: grafana_admin_password
|
|
persistence:
|
|
enabled: true
|
|
storageClassName: longhorn-static
|
|
size: 10Gi
|
|
sidecar:
|
|
datasources:
|
|
enabled: true
|
|
label: grafana_datasource
|
|
labelValue: "1"
|
|
dashboards:
|
|
provider:
|
|
name: default
|
|
orgid: 1
|
|
folder: /var/lib/grafana/dashboards
|
|
defaultFolderName: default
|
|
enabled: true
|
|
label: grafana_dashboard
|
|
labelValue: "1"
|
|
ingress:
|
|
enabled: false
|
|
vmScrape:
|
|
enabled: true
|
|
|
|
prometheus-node-exporter:
|
|
enabled: true
|
|
service:
|
|
labels:
|
|
jobLabel: node-exporter
|
|
extraArgs:
|
|
- --collector.filesystem.ignored-mount-points=^/(dev|proc|sys|var/lib/docker/.+|var/lib/kubelet/.+)($|/)
|
|
- --collector.filesystem.ignored-fs-types=^(autofs|binfmt_misc|bpf|cgroup2?|configfs|debugfs|devpts|devtmpfs|fusectl|hugetlbfs|iso9660|mqueue|nsfs|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|selinuxfs|squashfs|erofs|sysfs|tracefs)$
|
|
vmScrape:
|
|
enabled: true
|
|
spec:
|
|
jobLabel: jobLabel
|
|
endpoints:
|
|
- port: metrics
|
|
metricRelabelConfigs:
|
|
- action: drop
|
|
source_labels: [mountpoint]
|
|
regex: "/var/lib/kubelet/pods.+"
|
|
|
|
kube-state-metrics:
|
|
enabled: true
|
|
vmScrape:
|
|
enabled: true
|
|
|
|
kubelet:
|
|
enabled: true
|
|
vmScrapes:
|
|
cadvisor:
|
|
enabled: true
|
|
spec:
|
|
path: /metrics/cadvisor
|
|
probes:
|
|
enabled: true
|
|
spec:
|
|
path: /metrics/probes
|
|
resources:
|
|
enabled: true
|
|
spec:
|
|
path: /metrics/resource
|
|
kubelet:
|
|
spec: {}
|
|
vmScrape:
|
|
kind: VMNodeScrape
|
|
spec:
|
|
scheme: "https"
|
|
honorLabels: true
|
|
interval: "30s"
|
|
scrapeTimeout: "5s"
|
|
tlsConfig:
|
|
insecureSkipVerify: true
|
|
caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
|
bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
|
|
metricRelabelConfigs:
|
|
- action: labeldrop
|
|
regex: (uid)
|
|
- action: labeldrop
|
|
regex: (id|name)
|
|
- action: drop
|
|
source_labels: [__name__]
|
|
regex: (rest_client_request_duration_seconds_bucket|rest_client_request_duration_seconds_sum|rest_client_request_duration_seconds_count)
|
|
relabelConfigs:
|
|
- action: labelmap
|
|
regex: __meta_kubernetes_node_label_(.+)
|
|
- sourceLabels: [__metrics_path__]
|
|
targetLabel: metrics_path
|
|
- targetLabel: job
|
|
replacement: kubelet
|
|
honorTimestamps: false
|
|
|
|
kubeApiServer:
|
|
enabled: true
|
|
|
|
coreDns:
|
|
enabled: true
|
|
service:
|
|
enabled: true
|
|
port: 9153
|
|
targetPort: 9153
|
|
selector:
|
|
k8s-app: kube-dns
|
|
kubernetes.io/name: CoreDNS
|
|
|
|
# k3s - these components run embedded, not as separate pods
|
|
kubeControllerManager:
|
|
enabled: false
|
|
kubeScheduler:
|
|
enabled: false
|
|
kubeEtcd:
|
|
enabled: false
|
|
kubeProxy:
|
|
enabled: false
|
|
kubeDns:
|
|
enabled: false
|