Skip to content
This repository was archived by the owner on Mar 1, 2023. It is now read-only.

phc-health/prometheus-stackdriver-gke

 
 

Repository files navigation

prometheus-stackdriver-gke

Follow instructions at Monitoring apps running on multiple GKE clusters using Prometheus and Cloud Monitoring.

When it comes to applying the k8s config files from this repo, use these commands instead of those in the instructions:

envsubst < prometheus-service-account.yaml | kubectl apply -f -
envsubst < prometheus-configmap.yaml | kubectl apply -f -
envsubst < gke-prometheus-deployment.yaml | kubectl apply -f -

Additional iam policy bindings may be required (from hixichen's comment on Issue 142 of the stackdriver-prometheus-sidecar repository):

export GCP_PROJECT=my-project
export GCP_SA=prometheus
export K8S_SA=prometheus
export K8S_NS=prometheus

gcloud iam service-accounts add-iam-policy-binding \
  --role roles/iam.workloadIdentityUser \
  --member "serviceAccount:${GCP_PROJECT}.svc.id.goog[${K8S_NS}/${K8S_SA}]" \
  ${GCP_SA}@${GCP_PROJECT}.iam.gserviceaccount.com

gcloud projects add-iam-policy-binding ${GCP_PROJECT} \
  --member "serviceAccount:${GCP_SA}@${GCP_PROJECT}.iam.gserviceaccount.com" \
  --role roles/monitoring.metricWriter

gcloud projects add-iam-policy-binding ${GCP_PROJECT} \
  --member "serviceAccount:${GCP_SA}@${GCP_PROJECT}.iam.gserviceaccount.com" \
  --role roles/monitoring.viewer


gcloud projects add-iam-policy-binding ${GCP_PROJECT} \
  --member "serviceAccount:${GCP_SA}@${GCP_PROJECT}.iam.gserviceaccount.com" \
  --role roles/logging.logWriter


gcloud projects add-iam-policy-binding ${GCP_PROJECT} \
  --member "serviceAccount:${GCP_SA}@${GCP_PROJECT}.iam.gserviceaccount.com" \
  --role roles/stackdriver.resourceMetadata.writer


kubectl annotate serviceaccount ${K8S_SA} \
  iam.gke.io/gcp-service-account="${GCP_SA}@${GCP_PROJECT}.iam.gserviceaccount.com" \
  -n ${K8S_NS}

About

No description, website, or topics provided.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published