[root@hybxvuca01 monitoring]# cat x509-certificate-exporter.yaml
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: x509-certificate-exporter
namespace: kubesphere-monitoring-system
labels:
app: x509-certificate-exporter
spec:
selector:
matchLabels:
app: x509-certificate-exporter
template:
metadata:
labels:
app: x509-certificate-exporter
spec:
tolerations:
- key: node-role.kubernetes.io/master
operator: Exists
effect: NoSchedule
containers:
- name: x509-certificate-exporter
image: harbor.uat.crpcg.com/k8s/x509-certificate-exporter:3.6.0
imagePullPolicy: IfNotPresent
args: ["--watch-kubeconf=/etc/kubernetes/admin.conf","--watch-kubeconf=/etc/kubernetes/controller-manager.conf","--watch-kubeconf=/etc/kubernetes/scheduler.conf","--watch-dir=/etc/kubernetes/pki","--watch-file=/var/lib/kubelet/pki/kubelet-client-current.pem"]
ports:
- containerPort: 9793
name: http
volumeMounts:
- name: k8s
readOnly: true
mountPath: /etc/kubernetes
- name: kubelet
readOnly: true
mountPath: /var/lib/kubelet/pki
volumes:
- name: k8s
hostPath:
path: /etc/kubernetes
type: ''
- name: kubelet
hostPath:
path: /var/lib/kubelet/pki
type: ''
apiVersion: v1
kind: Service
metadata:
labels:
app: x509-certificate-exporter
name: x509-certificate-exporter
namespace: kubesphere-monitoring-system
spec:
type: ClusterIP
ports:
- name: http
port: 9793
protocol: TCP
targetPort: 9793
selector:
app: x509-certificate-exporter
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
labels:
app: x509-certificate-exporter
name: prometheus-x509-certificate-exporter
namespace: kubesphere-monitoring-system
spec:
endpoints:
- honorLabels: true
interval: 1m
path: /metrics
port: http
scheme: http
namespaceSelector:
matchNames:
- kubesphere-monitoring-system
selector:
matchLabels:
app: x509-certificate-exporter
直接apply