k8s-monitoring

A Helm chart for gathering, scraping, and forwarding Kubernetes telemetry data to a Grafana Stack.

Upstream References

• https://github.com/grafana/k8s-monitoring-helm/tree/main/charts/k8s-monitoring

Upstream Release Notes

• Find k8s-monitoring CHANGELOG here
• and Grafana Alloy's release notes here

Learn More

• Application Overview
• Other Documentation

Pre-Requisites

• Kubernetes Cluster deployed
• Kubernetes config installed in ~/.kube/config
• Helm installed

Install Helm

https://helm.sh/docs/intro/install/

Deployment

• Clone down the repository
• cd into directory

helm install k8s-monitoring chart/

Values

Key	Type	Default	Description
global.image.registry	string	"registry1.dso.mil"
global.image.pullSecrets[0].name	string	"private-registry"
global.imageRegistry	string	"registry1.dso.mil"	Overrides the Docker registry globally for all images
global.imagePullSecrets[0].name	string	"private-registry"
serviceMonitors	list	[]
networkPolicies.enabled	bool	false	Toggle networkPolicies
networkPolicies.controlPlaneCidr	string	"0.0.0.0/0"	Control Plane CIDR, defaults to 0.0.0.0/0, use kubectl get endpoints -n default kubernetes to get the CIDR range needed for your cluster Must be an IP CIDR range (x.x.x.x/x - ideally with /32 for the specific IP of a single endpoint, broader range for multiple masters/endpoints) Used by package NetworkPolicies to allow Kube API access
networkPolicies.vpcCidr	string	"0.0.0.0/0"
networkPolicies.additionalPolicies	list	[]
networkPolicies.defaultSelectorKey	string	"app.kubernetes.io/instance"
networkPolicies.defaultSelectorValues[0]	string	"alloy"
networkPolicies.defaultSelectorValues[1]	string	"alloy-alloy-logs"
networkPolicies.egress	object	{}	NetworkPolicy selectors and ports for egress to downstream telemetry ingestion services. These should be uncommented and overridden if any of these values deviate from the Big Bang defaults.
autoRollingUpgrade.enabled	bool	true
autoRollingUpgrade.image.repository	string	"registry1.dso.mil/ironbank/big-bang/base"
autoRollingUpgrade.image.tag	string	"2.1.0"
istio.enabled	bool	false	Toggle istio configuration
istio.hardened	object	{"customServiceEntries":[],"enabled":false,"outboundTrafficPolicyMode":"REGISTRY_ONLY"}	Default peer authentication values
istio.mtls.mode	string	"STRICT"	STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic
bbtests.enabled	bool	false
bbtests.cypress.artifacts	bool	true
bbtests.cypress.envs.cypress_prometheus_url	string	"https://prometheus.dev.bigbang.mil"
bbtests.cypress.envs.cypress_alertmanager_url	string	"https://alertmanager.dev.bigbang.mil"
upstream	object	Upstream chart values	Values to pass to the upstream k8s-monitoring chart

Contributing

Please see the contributing guide if you are interested in contributing.

---

This file is programatically generated using helm-docs and some BigBang-specific templates. The gluon repository has instructions for regenerating package READMEs.