Add platform infrastructure configuration

2026-08-28 17:35:41 +09:00
parent fa76531e5b
commit 16c337bcc9
302 changed files with 83259 additions and 1 deletions
@@ -0,0 +1,128 @@
+fullnameOverride: blackbox-exporter
+
+commonLabels:
+  observability.hyeonworks.com/instance: home
+
+kind: Deployment
+replicas: 1
+revisionHistoryLimit: 3
+
+strategy:
+  type: Recreate
+  rollingUpdate: null
+
+automountServiceAccountToken: false
+hostNetwork: false
+hostPort: 0
+
+image:
+  registry: quay.io
+  repository: prometheus/blackbox-exporter
+  tag: v0.28.0
+  digest: sha256:43027b43fb785b7c5adc53bd3b5dbc1a258270a2e8aff24f477b45c4e38dac68
+  pullPolicy: IfNotPresent
+
+podSecurityContext:
+  runAsNonRoot: true
+  runAsUser: 1000
+  runAsGroup: 1000
+  seccompProfile:
+    type: RuntimeDefault
+
+securityContext:
+  runAsNonRoot: true
+  runAsUser: 1000
+  runAsGroup: 1000
+  readOnlyRootFilesystem: true
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+      - ALL
+  seccompProfile:
+    type: RuntimeDefault
+
+resources:
+  requests:
+    cpu: 25m
+    memory: 32Mi
+  limits:
+    cpu: 200m
+    memory: 128Mi
+
+serviceAccount:
+  create: true
+  name: blackbox-exporter
+
+service:
+  type: ClusterIP
+  port: 9115
+
+ingress:
+  enabled: false
+
+route:
+  main:
+    enabled: false
+
+networkPolicy:
+  enabled: false
+
+configReloader:
+  enabled: false
+
+serviceMonitor:
+  enabled: false
+  selfMonitor:
+    enabled: true
+    port: http
+    interval: 30s
+    scrapeTimeout: 10s
+
+config:
+  modules:
+    http_2xx:
+      prober: http
+      timeout: 10s
+      http:
+        method: GET
+        valid_status_codes:
+          - 200
+        valid_http_versions:
+          - HTTP/1.1
+          - HTTP/2.0
+        follow_redirects: true
+        enable_http2: true
+        preferred_ip_protocol: ip4
+        ip_protocol_fallback: false
+        tls_config:
+          insecure_skip_verify: false
+    http_private_edge_403:
+      prober: http
+      timeout: 10s
+      http:
+        method: GET
+        valid_status_codes:
+          - 403
+        valid_http_versions:
+          - HTTP/1.1
+          - HTTP/2.0
+        follow_redirects: true
+        enable_http2: true
+        preferred_ip_protocol: ip4
+        ip_protocol_fallback: false
+        tls_config:
+          insecure_skip_verify: false
+    http_private_internal_200:
+      prober: http
+      timeout: 10s
+      http:
+        method: GET
+        valid_status_codes:
+          - 200
+        valid_http_versions:
+          - HTTP/1.1
+          - HTTP/2.0
+        follow_redirects: true
+        enable_http2: true
+        preferred_ip_protocol: ip4
+        ip_protocol_fallback: false