Add platform infrastructure configuration

2026-08-28 17:35:41 +09:00
parent fa76531e5b
commit 16c337bcc9
302 changed files with 83259 additions and 1 deletions
@@ -0,0 +1,11 @@
+# node-exporter
+
+The standalone node-exporter runs in `observability-agent` with the embedded
+kube-prometheus-stack copy and kube-rbac-proxy disabled. It mounts only
+`/proc`, `/sys`, and `/` from the node, all read-only, and exposes an internal
+ClusterIP metrics Service on port `9100`.
+
+Host network, PID, and IPC namespaces remain disabled by the platform security
+contract. Consequently, network-namespace metrics are treated as a known
+single-node visibility limitation rather than authoritative host-network data.
+