mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-02-21 13:10:19 -03:30
4a03d13d08
* [cilium] fix rbac and upgrade hubble v0.11.0 (#3) * [cilium] fix rbac for LB bgp ipam * [cilium] Upgrade Hubble to v0.11.0 and add mTLS between Hubble UI and Hubble Relay * fix dns domain hubble for tls --------- Co-authored-by: Thuon Jeremy <d107869@olinfra1.infra.bdm.outscale.c1.dav.fr> * Fix blank line --------- Co-authored-by: Thuon Jeremy <d107869@olinfra1.infra.bdm.outscale.c1.dav.fr>
103 lines
1.9 KiB
Django/Jinja
103 lines
1.9 KiB
Django/Jinja
{% if cilium_enable_prometheus or cilium_enable_hubble_metrics %}
|
|
---
|
|
# Source: cilium/templates/cilium-agent-service.yaml
|
|
kind: Service
|
|
apiVersion: v1
|
|
metadata:
|
|
name: hubble-metrics
|
|
namespace: kube-system
|
|
annotations:
|
|
prometheus.io/scrape: 'true'
|
|
prometheus.io/port: "9091"
|
|
labels:
|
|
k8s-app: hubble
|
|
spec:
|
|
clusterIP: None
|
|
type: ClusterIP
|
|
ports:
|
|
- name: hubble-metrics
|
|
port: 9091
|
|
protocol: TCP
|
|
targetPort: hubble-metrics
|
|
selector:
|
|
k8s-app: cilium
|
|
---
|
|
# Source: cilium/templates/hubble-relay/metrics-service.yaml
|
|
# We use a separate service from hubble-relay which can be exposed externally
|
|
kind: Service
|
|
apiVersion: v1
|
|
metadata:
|
|
name: hubble-relay-metrics
|
|
namespace: kube-system
|
|
labels:
|
|
k8s-app: hubble-relay
|
|
spec:
|
|
clusterIP: None
|
|
type: ClusterIP
|
|
selector:
|
|
k8s-app: hubble-relay
|
|
ports:
|
|
- name: metrics
|
|
port: 9966
|
|
protocol: TCP
|
|
targetPort: prometheus
|
|
|
|
{% endif %}
|
|
---
|
|
# Source: cilium/templates/hubble-relay-service.yaml
|
|
kind: Service
|
|
apiVersion: v1
|
|
metadata:
|
|
name: hubble-relay
|
|
namespace: kube-system
|
|
labels:
|
|
k8s-app: hubble-relay
|
|
spec:
|
|
type: ClusterIP
|
|
selector:
|
|
k8s-app: hubble-relay
|
|
ports:
|
|
- protocol: TCP
|
|
{% if cilium_hubble_tls_generate -%}
|
|
port: 443
|
|
{% else -%}
|
|
port: 80
|
|
{% endif -%}
|
|
targetPort: 4245
|
|
---
|
|
# Source: cilium/templates/hubble-ui-service.yaml
|
|
kind: Service
|
|
apiVersion: v1
|
|
metadata:
|
|
name: hubble-ui
|
|
labels:
|
|
k8s-app: hubble-ui
|
|
namespace: kube-system
|
|
spec:
|
|
selector:
|
|
k8s-app: hubble-ui
|
|
ports:
|
|
- name: http
|
|
port: 80
|
|
targetPort: 8081
|
|
type: ClusterIP
|
|
---
|
|
# Source: cilium/templates/hubble/peer-service.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: hubble-peer
|
|
namespace: kube-system
|
|
labels:
|
|
k8s-app: cilium
|
|
spec:
|
|
selector:
|
|
k8s-app: cilium
|
|
ports:
|
|
- name: peer-service
|
|
port: 443
|
|
protocol: TCP
|
|
targetPort: 4244
|
|
internalTrafficPolicy: Local
|
|
|