Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
89 changes: 67 additions & 22 deletions assets/parca-agent.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ metadata:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca-agent
app.kubernetes.io/name: parca-agent
app.kubernetes.io/version: v0.19.0
app.kubernetes.io/version: v0.45.0
name: parca-agent
namespace: parca
rules:
Expand All @@ -40,7 +40,7 @@ metadata:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca-agent
app.kubernetes.io/name: parca-agent
app.kubernetes.io/version: v0.19.0
app.kubernetes.io/version: v0.45.0
name: parca-agent
namespace: parca
roleRef:
Expand All @@ -52,14 +52,60 @@ subjects:
name: parca-agent
namespace: parca
---
apiVersion: v1
data:
parca-agent.yaml: |-
"relabel_configs":
- "source_labels":
- "__meta_process_executable_compiler"
"target_label": "compiler"
- "source_labels":
- "__meta_system_kernel_machine"
"target_label": "arch"
- "source_labels":
- "__meta_system_kernel_release"
"target_label": "kernel_version"
- "source_labels":
- "__meta_kubernetes_namespace"
"target_label": "namespace"
- "source_labels":
- "__meta_kubernetes_pod_name"
"target_label": "pod"
- "source_labels":
- "__meta_kubernetes_pod_container_name"
"target_label": "container"
- "source_labels":
- "__meta_kubernetes_pod_container_image"
"target_label": "container_image"
- "source_labels":
- "__meta_kubernetes_node_label_topology_kubernetes_io_region"
"target_label": "region"
- "source_labels":
- "__meta_kubernetes_node_label_topology_kubernetes_io_zone"
"target_label": "zone"
- "action": "labelmap"
"regex": "__meta_kubernetes_pod_label_(.+)"
"replacement": "${1}"
- "action": "labeldrop"
"regex": "apps_kubernetes_io_pod_index|controller_revision_hash|statefulset_kubernetes_io_pod_name|pod_template_hash"
kind: ConfigMap
metadata:
labels:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca-agent
app.kubernetes.io/name: parca-agent
app.kubernetes.io/version: v0.45.0
name: parca-agent
namespace: parca
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
labels:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca-agent
app.kubernetes.io/name: parca-agent
app.kubernetes.io/version: v0.19.0
app.kubernetes.io/version: v0.45.0
name: parca-agent
namespace: parca
spec:
Expand All @@ -74,43 +120,33 @@ spec:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca-agent
app.kubernetes.io/name: parca-agent
app.kubernetes.io/version: v0.19.0
app.kubernetes.io/version: v0.45.0
spec:
containers:
- args:
- /bin/parca-agent
- --http-address=:7071
- --log-level=info
- --node=$(NODE_NAME)
- --remote-store-address=parca.parca.svc.cluster.local:7070
- --remote-store-insecure
- --remote-store-insecure-skip-verify
- --debuginfo-strip
- --debuginfo-temp-dir=/tmp
- --debuginfo-upload-cache-duration=5m
- --config-path=/etc/parca-agent/parca-agent.yaml
env:
- name: NODE_NAME
valueFrom:
fieldRef:
fieldPath: spec.nodeName
image: ghcr.io/parca-dev/parca-agent:v0.19.0
livenessProbe:
httpGet:
path: /healthy
port: http
image: ghcr.io/parca-dev/parca-agent:v0.45.0
name: parca-agent
ports:
- containerPort: 7071
name: http
readinessProbe:
httpGet:
path: /ready
port: http
resources: {}
securityContext:
allowPrivilegeEscalation: true
capabilities:
add:
- SYS_ADMIN
- SYS_ADMIN
privileged: true
runAsUser: 0
volumeMounts:
Expand All @@ -122,18 +158,23 @@ spec:
name: boot
readOnly: true
- mountPath: /lib/modules
name: modules
name: modules
- mountPath: /sys/kernel/debug
name: debugfs
- mountPath: /sys/fs/cgroup
name: cgroup
- mountPath: /sys/fs/bpf
name: bpffs
- mountPath: /etc/parca-agent
name: config
- mountPath: /var/run/dbus/system_bus_socket
name: dbus-system
hostPID: true
nodeSelector:
kubernetes.io/os: linux
securityContext:
seccompProfile:
type: RuntimeDefault
serviceAccountName: parca-agent
tolerations:
- operator: Exists
Expand All @@ -158,10 +199,14 @@ spec:
- hostPath:
path: /sys/kernel/debug
name: debugfs
- configMap:
name: parca-agent
name: config
- hostPath:
path: /var/run/dbus/system_bus_socket
name: dbus-system
---

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
Expand Down Expand Up @@ -197,7 +242,7 @@ metadata:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca-agent
app.kubernetes.io/name: parca-agent
app.kubernetes.io/version: v0.19.0
app.kubernetes.io/version: v0.45.0
name: parca-agent
namespace: parca
rules:
Expand All @@ -217,7 +262,7 @@ metadata:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca-agent
app.kubernetes.io/name: parca-agent
app.kubernetes.io/version: v0.19.0
app.kubernetes.io/version: v0.45.0
name: parca-agent
namespace: parca
roleRef:
Expand All @@ -235,6 +280,6 @@ metadata:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca-agent
app.kubernetes.io/name: parca-agent
app.kubernetes.io/version: v0.19.0
app.kubernetes.io/version: v0.45.0
name: parca-agent
namespace: parca
28 changes: 20 additions & 8 deletions assets/parca-server.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ metadata:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca
app.kubernetes.io/name: parca
app.kubernetes.io/version: v0.18.0
app.kubernetes.io/version: v0.25.0
name: parca
namespace: parca
---
Expand All @@ -24,7 +24,7 @@ metadata:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca
app.kubernetes.io/name: parca
app.kubernetes.io/version: v0.18.0
app.kubernetes.io/version: v0.25.0
name: parca
namespace: parca
spec:
Expand All @@ -40,7 +40,7 @@ spec:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca
app.kubernetes.io/name: parca
app.kubernetes.io/version: v0.18.0
app.kubernetes.io/version: v0.25.0
spec:
containers:
- args:
Expand All @@ -49,9 +49,9 @@ spec:
- --config-path=/etc/parca/parca.yaml
- --log-level=info
- --cors-allowed-origins=*
- --debuginfod-upstream-servers=https://debuginfod.systemtap.org
- --debuginfod-upstream-servers=debuginfod.systemtap.org
- --debuginfod-http-request-timeout=5m
image: ghcr.io/parca-dev/parca:v0.18.0
image: ghcr.io/parca-dev/parca:v0.25.0
livenessProbe:
exec:
command:
Expand All @@ -71,6 +71,11 @@ spec:
- -addr=:7070
initialDelaySeconds: 10
resources: {}
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
terminationMessagePolicy: FallbackToLogsOnError
volumeMounts:
- mountPath: /etc/parca
Expand All @@ -79,7 +84,14 @@ spec:
name: data
nodeSelector:
kubernetes.io/os: linux
securityContext: null
securityContext:
fsGroup: 65534
runAsNonRoot: true
runAsUser: 65534
seccompProfile:
type: RuntimeDefault
supplementalGroups:
- 65534
serviceAccountName: parca
terminationGracePeriodSeconds: 120
volumes:
Expand Down Expand Up @@ -151,7 +163,7 @@ metadata:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca
app.kubernetes.io/name: parca
app.kubernetes.io/version: v0.18.0
app.kubernetes.io/version: v0.25.0
name: parca
namespace: parca
spec:
Expand Down Expand Up @@ -184,6 +196,6 @@ metadata:
app.kubernetes.io/component: observability
app.kubernetes.io/instance: parca
app.kubernetes.io/name: parca
app.kubernetes.io/version: v0.18.0
app.kubernetes.io/version: v0.25.0
name: parca
namespace: parca