mirror of
https://github.com/storytold/terraform-aws-observability-accelerator.git
synced 2026-10-09 00:09:43 +00:00
Jens-Uwe Walther
4d88d16cb6
* added workqueue related and apiserver_storage_db_total_size_in_bytes (available since K8s/EKS v1.26+) metrics into kube-admin scrape job * chnanged OTEL scrape config and recording rules file to make apiserver Grafana dashboards working * added APISERVER Grafana dashboards into variables, Flux kustomization * added original kube-prom-stack kube-apiserver scrape config into OTEL * Revert "added original kube-prom-stack kube-apiserver scrape config into OTEL" because this scrape config does not work :-( This reverts commit 715db895c656af09430e3d6ada2087bd1828413f. * added API server troubleshoting dashboard * removed empty line for clarity * make API serve rmonitoring default to true but can be disabled as well * Update eks-apiserver.md * updated eks-monitoring/README.md according to pre-commit --------- Co-authored-by: Jens-Uwe Walther <waltju@amazon.com>
102 lines
3.2 KiB
Terraform
102 lines
3.2 KiB
Terraform
provider "aws" {
|
|
region = local.region
|
|
}
|
|
|
|
data "aws_eks_cluster_auth" "this" {
|
|
name = var.eks_cluster_id
|
|
}
|
|
|
|
data "aws_eks_cluster" "this" {
|
|
name = var.eks_cluster_id
|
|
}
|
|
|
|
provider "kubernetes" {
|
|
host = local.eks_cluster_endpoint
|
|
cluster_ca_certificate = base64decode(data.aws_eks_cluster.this.certificate_authority[0].data)
|
|
token = data.aws_eks_cluster_auth.this.token
|
|
}
|
|
|
|
provider "helm" {
|
|
kubernetes {
|
|
host = local.eks_cluster_endpoint
|
|
cluster_ca_certificate = base64decode(data.aws_eks_cluster.this.certificate_authority[0].data)
|
|
token = data.aws_eks_cluster_auth.this.token
|
|
}
|
|
}
|
|
|
|
locals {
|
|
region = var.aws_region
|
|
eks_cluster_endpoint = data.aws_eks_cluster.this.endpoint
|
|
create_new_workspace = var.managed_prometheus_workspace_id == "" ? true : false
|
|
tags = {
|
|
Source = "github.com/aws-observability/terraform-aws-observability-accelerator"
|
|
}
|
|
}
|
|
|
|
# deploys the base module
|
|
module "aws_observability_accelerator" {
|
|
source = "../../"
|
|
# source = "github.com/aws-observability/terraform-aws-observability-accelerator?ref=v2.0.0"
|
|
|
|
aws_region = var.aws_region
|
|
|
|
# creates a new Amazon Managed Prometheus workspace, defaults to true
|
|
enable_managed_prometheus = local.create_new_workspace
|
|
|
|
# reusing existing Amazon Managed Prometheus if specified
|
|
managed_prometheus_workspace_id = var.managed_prometheus_workspace_id
|
|
|
|
# sets up the Amazon Managed Prometheus alert manager at the workspace level
|
|
enable_alertmanager = true
|
|
|
|
# reusing existing Amazon Managed Grafana workspace
|
|
managed_grafana_workspace_id = var.managed_grafana_workspace_id
|
|
|
|
tags = local.tags
|
|
}
|
|
|
|
module "eks_monitoring" {
|
|
source = "../../modules/eks-monitoring"
|
|
# source = "github.com/aws-observability/terraform-aws-observability-accelerator//modules/eks-monitoring?ref=v2.0.0"
|
|
|
|
eks_cluster_id = var.eks_cluster_id
|
|
|
|
# deploys AWS Distro for OpenTelemetry operator into the cluster
|
|
enable_amazon_eks_adot = true
|
|
|
|
# reusing existing certificate manager? defaults to true
|
|
enable_cert_manager = true
|
|
|
|
# enable EKS API server monitoring
|
|
enable_apiserver_monitoring = true
|
|
|
|
# deploys external-secrets in to the cluster
|
|
enable_external_secrets = true
|
|
grafana_api_key = var.grafana_api_key
|
|
target_secret_name = "grafana-admin-credentials"
|
|
target_secret_namespace = "grafana-operator"
|
|
grafana_url = module.aws_observability_accelerator.managed_grafana_workspace_endpoint
|
|
|
|
# control the publishing of dashboards by specifying the boolean value for the variable 'enable_dashboards', default is 'true'
|
|
enable_dashboards = var.enable_dashboards
|
|
|
|
managed_prometheus_workspace_id = module.aws_observability_accelerator.managed_prometheus_workspace_id
|
|
|
|
managed_prometheus_workspace_endpoint = module.aws_observability_accelerator.managed_prometheus_workspace_endpoint
|
|
managed_prometheus_workspace_region = module.aws_observability_accelerator.managed_prometheus_workspace_region
|
|
|
|
# optional, defaults to 60s interval and 15s timeout
|
|
prometheus_config = {
|
|
global_scrape_interval = "60s"
|
|
global_scrape_timeout = "15s"
|
|
}
|
|
|
|
enable_logs = true
|
|
|
|
tags = local.tags
|
|
|
|
depends_on = [
|
|
module.aws_observability_accelerator
|
|
]
|
|
}
|