Namespaces to match for ServicedMonitors discovery. An empty label selector -matches all namespaces. A null label selector matches the current +matches all namespaces. A null label selector (default value) matches the current namespace only.
Namespaces to match for PodMonitors discovery. An empty label selector -matches all namespaces. A null label selector matches the current +matches all namespaces. A null label selector (default value) matches the current namespace only.
Enable access to Prometheus feature flags. By default, no features are enabled.
Enabling features which are disabled by default is entirely outside the scope of what the maintainers will support and by doing so, you accept @@ -2018,6 +2021,21 @@ Prometheus Pods.
automountServiceAccountTokenAutomountServiceAccountToken indicates whether a service account token should be automatically mounted in the pod. +If the field isn’t set, the operator mounts the service account token by default.
+Warning: be aware that by default, Prometheus requires the service account token for Kubernetes service discovery. +It is possible to use strategic merge patch to project the service account token into the ‘prometheus’ container.
+secretsWhen true, Prometheus resolves label conflicts by renaming the labels in -the scraped data to “exported_
+When true, Prometheus resolves label conflicts by renaming the labels in the scraped data
+to “exported_” for all targets created from ServiceMonitor, PodMonitor and
+ScrapeConfig objects. Otherwise the HonorLabels field of the service or pod monitor applies.
+In practice,overrideHonorLaels:true enforces honorLabels:false
+for all ServiceMonitor, PodMonitor and ScrapeConfig objects.
When not empty, a label will be added to
+When not empty, a label will be added to:
ServiceMonitor, PodMonitor, Probe and ScrapeConfig objects.PrometheusRule objects.The label will not added for objects referenced in spec.excludedFromEnforcement.
The label’s name is this field’s value.
The label’s value is the namespace of the ServiceMonitor,
-PodMonitor, Probe or PrometheusRule object.
PodMonitor, Probe, PrometheusRule or ScrapeConfig object.
spec.sampleLimit is greater than zero and less than
spec.enforcedSampleLimit.
It is meant to be used by admins to keep the overall number of samples/series under a desired limit.
+When both enforcedSampleLimit and sampleLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined sampleLimit value will inherit the global sampleLimit value (Prometheus >= 2.45.0) or the enforcedSampleLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedSampleLimit is greater than the sampleLimit, the sampleLimit will be set to enforcedSampleLimit.
+* Scrape objects with a sampleLimit value less than or equal to enforcedSampleLimit keep their specific value.
+* Scrape objects with a sampleLimit value greater than enforcedSampleLimit are set to enforcedSampleLimit.
spec.targetLimit i
greater than zero and less than spec.enforcedTargetLimit.
It is meant to be used by admins to to keep the overall number of targets under a desired limit.
+When both enforcedTargetLimit and targetLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined targetLimit value will inherit the global targetLimit value (Prometheus >= 2.45.0) or the enforcedTargetLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedTargetLimit is greater than the targetLimit, the targetLimit will be set to enforcedTargetLimit.
+* Scrape objects with a targetLimit value less than or equal to enforcedTargetLimit keep their specific value.
+* Scrape objects with a targetLimit value greater than enforcedTargetLimit are set to enforcedTargetLimit.
spec.labelLimit set b
ServiceMonitor, PodMonitor, Probe objects unless spec.labelLimit is
greater than zero and less than spec.enforcedLabelLimit.
It requires Prometheus >= v2.27.0.
+When both enforcedLabelLimit and labelLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined labelLimit value will inherit the global labelLimit value (Prometheus >= 2.45.0) or the enforcedLabelLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedLabelLimit is greater than the labelLimit, the labelLimit will be set to enforcedLabelLimit.
+* Scrape objects with a labelLimit value less than or equal to enforcedLabelLimit keep their specific value.
+* Scrape objects with a labelLimit value greater than enforcedLabelLimit are set to enforcedLabelLimit.
spec.labelNameLengthLim
ServiceMonitor, PodMonitor, Probe objects unless spec.labelNameLengthLimit is
greater than zero and less than spec.enforcedLabelNameLengthLimit.
It requires Prometheus >= v2.27.0.
+When both enforcedLabelNameLengthLimit and labelNameLengthLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined labelNameLengthLimit value will inherit the global labelNameLengthLimit value (Prometheus >= 2.45.0) or the enforcedLabelNameLengthLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedLabelNameLengthLimit is greater than the labelNameLengthLimit, the labelNameLengthLimit will be set to enforcedLabelNameLengthLimit.
+* Scrape objects with a labelNameLengthLimit value less than or equal to enforcedLabelNameLengthLimit keep their specific value.
+* Scrape objects with a labelNameLengthLimit value greater than enforcedLabelNameLengthLimit are set to enforcedLabelNameLengthLimit.
spec.labelValueLengthL
ServiceMonitor, PodMonitor, Probe objects unless spec.labelValueLengthLimit is
greater than zero and less than spec.enforcedLabelValueLengthLimit.
It requires Prometheus >= v2.27.0.
+When both enforcedLabelValueLengthLimit and labelValueLengthLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined labelValueLengthLimit value will inherit the global labelValueLengthLimit value (Prometheus >= 2.45.0) or the enforcedLabelValueLengthLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedLabelValueLengthLimit is greater than the labelValueLengthLimit, the labelValueLengthLimit will be set to enforcedLabelValueLengthLimit.
+* Scrape objects with a labelValueLengthLimit value less than or equal to enforcedLabelValueLengthLimit keep their specific value.
+* Scrape objects with a labelValueLengthLimit value greater than enforcedLabelValueLengthLimit are set to enforcedLabelValueLengthLimit.
spec.keepDroppedTargets set by
ServiceMonitor, PodMonitor, Probe objects unless spec.keepDroppedTargets is
greater than zero and less than spec.enforcedKeepDroppedTargets.
It requires Prometheus >= v2.47.0.
+When both enforcedKeepDroppedTargets and keepDroppedTargets are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined keepDroppedTargets value will inherit the global keepDroppedTargets value (Prometheus >= 2.45.0) or the enforcedKeepDroppedTargets value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedKeepDroppedTargets is greater than the keepDroppedTargets, the keepDroppedTargets will be set to enforcedKeepDroppedTargets.
+* Scrape objects with a keepDroppedTargets value less than or equal to enforcedKeepDroppedTargets keep their specific value.
+* Scrape objects with a keepDroppedTargets value greater than enforcedKeepDroppedTargets are set to enforcedKeepDroppedTargets.
It requires Prometheus >= v2.28.0.
+When both enforcedBodySizeLimit and bodySizeLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined bodySizeLimit value will inherit the global bodySizeLimit value (Prometheus >= 2.45.0) or the enforcedBodySizeLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedBodySizeLimit is greater than the bodySizeLimit, the bodySizeLimit will be set to enforcedBodySizeLimit.
+* Scrape objects with a bodySizeLimit value less than or equal to enforcedBodySizeLimit keep their specific value.
+* Scrape objects with a bodySizeLimit value greater than enforcedBodySizeLimit are set to enforcedBodySizeLimit.
BodySizeLimit defines per-scrape on response body size. Only valid in Prometheus versions 2.45.0 and newer.
+Note that the global limit only applies to scrape objects that don’t specify an explicit limit value. +If you want to enforce a maximum limit for all scrape objects, refer to enforcedBodySizeLimit.
SampleLimit defines per-scrape limit on number of scraped samples that will be accepted. Only valid in Prometheus versions 2.45.0 and newer.
+Note that the global limit only applies to scrape objects that don’t specify an explicit limit value. +If you want to enforce a maximum limit for all scrape objects, refer to enforcedSampleLimit.
TargetLimit defines a limit on the number of scraped targets that will be accepted. Only valid in Prometheus versions 2.45.0 and newer.
+Note that the global limit only applies to scrape objects that don’t specify an explicit limit value. +If you want to enforce a maximum limit for all scrape objects, refer to enforcedTargetLimit.
Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.45.0 and newer.
+Note that the global limit only applies to scrape objects that don’t specify an explicit limit value. +If you want to enforce a maximum limit for all scrape objects, refer to enforcedLabelLimit.
Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.45.0 and newer.
+Note that the global limit only applies to scrape objects that don’t specify an explicit limit value. +If you want to enforce a maximum limit for all scrape objects, refer to enforcedLabelNameLengthLimit.
Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.45.0 and newer.
+Note that the global limit only applies to scrape objects that don’t specify an explicit limit value. +If you want to enforce a maximum limit for all scrape objects, refer to enforcedLabelValueLengthLimit.
Per-scrape limit on the number of targets dropped by relabeling that will be kept in memory. 0 means no limit.
It requires Prometheus >= v2.47.0.
+Note that the global limit only applies to scrape objects that don’t specify an explicit limit value. +If you want to enforce a maximum limit for all scrape objects, refer to enforcedKeepDroppedTargets.
Whether to enable HTTP2.
relabelingsRelabel configuration applied to the discovered Alertmanagers.
+alertRelabelingsRelabeling configs applied before sending alerts to a specific Alertmanager. +It requires Prometheus >= v2.51.0.
+ManagedIdentity defines the Azure User-assigned Managed identity.
-Cannot be set at the same time as oauth.
oauth or sdk.
OAuth defines the oauth config that is being used to authenticate.
-Cannot be set at the same time as managedIdentity.
managedIdentity or sdk.
It requires Prometheus >= v2.48.0.
sdkSDK defines the Azure SDK config that is being used to authenticate.
+See https://learn.microsoft.com/en-us/azure/developer/go/azure-sdk-authentication
+Cannot be set at the same time as oauth or managedIdentity.
It requires Prometheus >= 2.52.0.
+tenantID is the tenant ID of the Azure Active Directory application that is being used to authenticate.
tenantId is the tenant ID of the Azure Active Directory application that is being used to authenticate.
+(Appears on:AzureAD) +
+AzureSDK is used to store azure SDK config values.
+| Field | +Description | +
|---|---|
+tenantId+ +string + + |
+
+(Optional)
+
|
Namespaces to match for ServicedMonitors discovery. An empty label selector -matches all namespaces. A null label selector matches the current +matches all namespaces. A null label selector (default value) matches the current namespace only. |
@@ -6064,7 +6208,7 @@ Kubernetes meta/v1.LabelSelector
Namespaces to match for PodMonitors discovery. An empty label selector -matches all namespaces. A null label selector matches the current +matches all namespaces. A null label selector (default value) matches the current namespace only. |
@@ -6388,10 +6532,13 @@ For more information see
+[]EnableFeature
+
+(Optional)
Enable access to Prometheus feature flags. By default, no features are enabled. Enabling features which are disabled by default is entirely outside the scope of what the maintainers will support and by doing so, you accept @@ -6538,6 +6685,21 @@ Prometheus Pods. |
+automountServiceAccountToken+ +bool + + |
+
+(Optional)
+ AutomountServiceAccountToken indicates whether a service account token should be automatically mounted in the pod. +If the field isn’t set, the operator mounts the service account token by default. +Warning: be aware that by default, Prometheus requires the service account token for Kubernetes service discovery. +It is possible to use strategic merge patch to project the service account token into the ‘prometheus’ container. + |
+
secrets[]string @@ -6794,10 +6956,11 @@ bool |
- When true, Prometheus resolves label conflicts by renaming the labels in -the scraped data to “exported_ +When true, Prometheus resolves label conflicts by renaming the labels in the scraped data
+to “exported_” for all targets created from ServiceMonitor, PodMonitor and
+ScrapeConfig objects. Otherwise the HonorLabels field of the service or pod monitor applies.
+In practice, |
|
- When not empty, a label will be added to +When not empty, a label will be added to:
The label will not added for objects referenced in The label’s name is this field’s value.
The label’s value is the namespace of the PodMonitor, Probe, PrometheusRule or ScrapeConfig object.
|
|
string alias)+(Appears on:CommonPrometheusFields) +
+
@@ -8724,7 +8942,7 @@ Examples:
-(Appears on:Endpoint, HTTPConfig, PodMetricsEndpoint, ProbeSpec, RemoteReadSpec, RemoteWriteSpec, ConsulSDConfig, DigitalOceanSDConfig, DockerSDConfig, EurekaSDConfig, HTTPConfig, HetznerSDConfig, KubernetesSDConfig, KumaSDConfig, HTTPConfig)
+(Appears on:Endpoint, HTTPConfig, PodMetricsEndpoint, ProbeSpec, RemoteReadSpec, RemoteWriteSpec, ConsulSDConfig, DigitalOceanSDConfig, DockerSDConfig, DockerSwarmSDConfig, EurekaSDConfig, HTTPConfig, HetznerSDConfig, KubernetesSDConfig, KumaSDConfig, LightSailSDConfig, LinodeSDConfig, NomadSDConfig, PuppetDBSDConfig, HTTPConfig)
OAuth2 configures OAuth2 settings. Namespaces to match for ServicedMonitors discovery. An empty label selector
-matches all namespaces. A null label selector matches the current
+matches all namespaces. A null label selector (default value) matches the current
namespace only. Namespaces to match for PodMonitors discovery. An empty label selector
-matches all namespaces. A null label selector matches the current
+matches all namespaces. A null label selector (default value) matches the current
namespace only. Enable access to Prometheus feature flags. By default, no features are enabled. Enabling features which are disabled by default is entirely outside the
scope of what the maintainers will support and by doing so, you accept
@@ -10638,6 +10859,21 @@ Prometheus Pods. AutomountServiceAccountToken indicates whether a service account token should be automatically mounted in the pod.
+If the field isn’t set, the operator mounts the service account token by default. Warning: be aware that by default, Prometheus requires the service account token for Kubernetes service discovery.
+It is possible to use strategic merge patch to project the service account token into the ‘prometheus’ container. When true, Prometheus resolves label conflicts by renaming the labels in
-the scraped data to “exported_ When true, Prometheus resolves label conflicts by renaming the labels in the scraped data
+to “exported_” for all targets created from ServiceMonitor, PodMonitor and
+ScrapeConfig objects. Otherwise the HonorLabels field of the service or pod monitor applies.
+In practice, When not empty, a label will be added to When not empty, a label will be added to: The label will not added for objects referenced in The label’s name is this field’s value.
The label’s value is the namespace of the It is meant to be used by admins to keep the overall number of
samples/series under a desired limit. When both It is meant to be used by admins to to keep the overall number of
targets under a desired limit. When both It requires Prometheus >= v2.27.0. When both It requires Prometheus >= v2.27.0. When both It requires Prometheus >= v2.27.0. When both It requires Prometheus >= v2.47.0. When both It requires Prometheus >= v2.28.0. When both BodySizeLimit defines per-scrape on response body size.
Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedBodySizeLimit. SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedSampleLimit. TargetLimit defines a limit on the number of scraped targets that will be accepted.
Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedTargetLimit. Per-scrape limit on number of labels that will be accepted for a sample.
Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedLabelLimit. Per-scrape limit on length of labels name that will be accepted for a sample.
Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedLabelNameLengthLimit. Per-scrape limit on length of labels value that will be accepted for a sample.
Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedLabelValueLengthLimit. Per-scrape limit on the number of targets dropped by relabeling
that will be kept in memory. 0 means no limit. It requires Prometheus >= v2.47.0. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedKeepDroppedTargets.
-(Appears on:ConsulSDConfig, DigitalOceanSDConfig, DockerSDConfig, EurekaSDConfig, HTTPSDConfig, HetznerSDConfig, KubernetesSDConfig, KumaSDConfig, ScrapeConfigSpec)
+(Appears on:RemoteReadSpec, RemoteWriteSpec, ConsulSDConfig, DigitalOceanSDConfig, DockerSDConfig, DockerSwarmSDConfig, EurekaSDConfig, HTTPSDConfig, HetznerSDConfig, KubernetesSDConfig, KumaSDConfig, LightSailSDConfig, LinodeSDConfig, NomadSDConfig, PuppetDBSDConfig, ScrapeConfigSpec)
-(Appears on:Endpoint, PodMetricsEndpoint, ProbeSpec, ProbeTargetIngress, ProbeTargetStaticConfig, RemoteWriteSpec, ScrapeClass, ScrapeConfigSpec)
+(Appears on:AlertmanagerEndpoints, Endpoint, PodMetricsEndpoint, ProbeSpec, ProbeTargetIngress, ProbeTargetStaticConfig, RemoteWriteSpec, ScrapeClass, ScrapeConfigSpec)
RelabelConfig allows dynamic rewriting of the label set for targets, alerts,
@@ -12355,6 +12641,7 @@ string
Replacement value against which a Replace action is performed if the
regular expression matches. Regex capture groups are available. Optional ProxyURL. It requires Prometheus >= v2.43.0. It requires Prometheus >= v2.43.0. Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).
+If unset, Prometheus uses its default value. It requires Prometheus >= v2.43.0. ProxyConnectHeader optionally specifies headers to send to
+proxies during CONNECT requests. It requires Prometheus >= v2.43.0. Optional ProxyURL. It requires Prometheus >= v2.43.0. It requires Prometheus >= v2.43.0. Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).
+If unset, Prometheus uses its default value. It requires Prometheus >= v2.43.0. ProxyConnectHeader optionally specifies headers to send to
+proxies during CONNECT requests. It requires Prometheus >= v2.43.0. Configure whether HTTP requests follow HTTP 3xx redirects. It requires Prometheus >= v2.26.0.
-(Appears on:AlertmanagerEndpoints, Authorization, Endpoint, HTTPConfig, PodMetricsEndpoint, ProbeSpec, ConsulSDConfig, DigitalOceanSDConfig, DockerSDConfig, EurekaSDConfig, HTTPConfig, HTTPSDConfig, HetznerSDConfig, KubernetesSDConfig, KumaSDConfig, ScrapeConfigSpec, HTTPConfig)
+(Appears on:AlertmanagerEndpoints, Authorization, Endpoint, HTTPConfig, PodMetricsEndpoint, ProbeSpec, ConsulSDConfig, DigitalOceanSDConfig, DockerSDConfig, DockerSwarmSDConfig, EurekaSDConfig, HTTPConfig, HTTPSDConfig, HetznerSDConfig, KubernetesSDConfig, KumaSDConfig, LightSailSDConfig, LinodeSDConfig, NomadSDConfig, PuppetDBSDConfig, ScrapeConfigSpec, HTTPConfig)
SafeAuthorization specifies a subset of the Authorization struct, that is
@@ -13224,7 +13618,7 @@ Kubernetes core/v1.SecretKeySelector
-(Appears on:HTTPConfig, PodMetricsEndpoint, ProbeSpec, TLSConfig, ConsulSDConfig, DigitalOceanSDConfig, DockerSDConfig, EmailConfig, EurekaSDConfig, HTTPConfig, HTTPSDConfig, HetznerSDConfig, KubernetesSDConfig, KumaSDConfig, OpenStackSDConfig, ScrapeConfigSpec, EmailConfig, HTTPConfig)
+(Appears on:HTTPConfig, PodMetricsEndpoint, ProbeSpec, TLSConfig, ConsulSDConfig, DigitalOceanSDConfig, DockerSDConfig, DockerSwarmSDConfig, EmailConfig, EurekaSDConfig, HTTPConfig, HTTPSDConfig, HetznerSDConfig, KubernetesSDConfig, KumaSDConfig, LightSailSDConfig, LinodeSDConfig, NomadSDConfig, OpenStackSDConfig, PuppetDBSDConfig, ScrapeConfigSpec, EmailConfig, HTTPConfig)
SafeTLSConfig specifies safe TLS configuration parameters. Used to verify the hostname for the targets. Disable target certificate validation. Default indicates that the scrape applies to all scrape objects that don’t configure an explicit scrape class name. Only one scrape class can be set as default. Default indicates that the scrape applies to all scrape objects that
+don’t configure an explicit scrape class name. Only one scrape class can be set as the default. TLSConfig section for scrapes. TLSConfig defines the TLS settings to use for the scrape. When the
+scrape objects define their own CA, certificate and/or key, they take
+precedence over the corresponding scrape class fields. For now only the More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config MetricRelabelings configures the relabeling rules to apply to all samples before ingestion. The Operator adds the scrape class metric relabelings defined here.
+Then the Operator adds the target-specific metric relabelings defined in ServiceMonitors, PodMonitors, Probes and ScrapeConfigs.
+Then the Operator adds namespace enforcement relabeling rule, specified in ‘.spec.enforcedNamespaceLabel’. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs Used to verify the hostname for the targets. Disable target certificate validation. This is a beta field and requires the MinDomainsInPodTopologySpread feature gate to be enabled (enabled by default). WebTLSConfigError is returned by WebTLSConfig.Validate() on
-semantically invalid configurations. Mode defines how the Prometheus operator deploys the PrometheusAgent pod(s).
+For now this field has no effect. (Alpha) Using this field requires the Namespaces to match for ServicedMonitors discovery. An empty label selector
-matches all namespaces. A null label selector matches the current
+matches all namespaces. A null label selector (default value) matches the current
namespace only. Namespaces to match for PodMonitors discovery. An empty label selector
-matches all namespaces. A null label selector matches the current
+matches all namespaces. A null label selector (default value) matches the current
namespace only. Enable access to Prometheus feature flags. By default, no features are enabled. Enabling features which are disabled by default is entirely outside the
scope of what the maintainers will support and by doing so, you accept
@@ -16561,6 +16971,21 @@ Prometheus Pods. AutomountServiceAccountToken indicates whether a service account token should be automatically mounted in the pod.
+If the field isn’t set, the operator mounts the service account token by default. Warning: be aware that by default, Prometheus requires the service account token for Kubernetes service discovery.
+It is possible to use strategic merge patch to project the service account token into the ‘prometheus’ container. When true, Prometheus resolves label conflicts by renaming the labels in
-the scraped data to “exported_ When true, Prometheus resolves label conflicts by renaming the labels in the scraped data
+to “exported_” for all targets created from ServiceMonitor, PodMonitor and
+ScrapeConfig objects. Otherwise the HonorLabels field of the service or pod monitor applies.
+In practice, When not empty, a label will be added to When not empty, a label will be added to: The label will not added for objects referenced in The label’s name is this field’s value.
The label’s value is the namespace of the It is meant to be used by admins to keep the overall number of
samples/series under a desired limit. When both It is meant to be used by admins to to keep the overall number of
targets under a desired limit. When both It requires Prometheus >= v2.27.0. When both It requires Prometheus >= v2.27.0. When both It requires Prometheus >= v2.27.0. When both It requires Prometheus >= v2.47.0. When both It requires Prometheus >= v2.28.0. When both BodySizeLimit defines per-scrape on response body size.
Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedBodySizeLimit. SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedSampleLimit. TargetLimit defines a limit on the number of scraped targets that will be accepted.
Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedTargetLimit. Per-scrape limit on number of labels that will be accepted for a sample.
Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedLabelLimit. Per-scrape limit on length of labels name that will be accepted for a sample.
Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedLabelNameLengthLimit. Per-scrape limit on length of labels value that will be accepted for a sample.
Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedLabelValueLengthLimit. Per-scrape limit on the number of targets dropped by relabeling
that will be kept in memory. 0 means no limit. It requires Prometheus >= v2.47.0. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedKeepDroppedTargets. The value of the The LinodeSDConfigs defines a list of Linode service discovery configurations. NomadSDConfigs defines a list of Nomad service discovery configurations. DockerswarmSDConfigs defines a list of Dockerswarm service discovery configurations. PuppetDBSDConfigs defines a list of PuppetDB service discovery configurations. LightsailSDConfigs defines a list of Lightsail service discovery configurations. OVHCloudSDConfigs defines a list of OVHcloud service discovery configurations. See https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview See https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
+SDK authentication method uses environment variables by default.
+See https://learn.microsoft.com/en-us/azure/developer/go/azure-sdk-authentication
-(Appears on:EC2SDConfig)
+(Appears on:DockerSwarmSDConfig)
EC2Filter is the configuration for filtering EC2 instances. Filter is the configuration to limit the discovery process to a subset of available resources. Name is the key of the field to check against. Values is the value or set of values to check for a match.
(Appears on:ScrapeConfigSpec)
EC2SDConfig allow retrieving scrape targets from AWS EC2 instances.
-The private IP address is used by default, but may be changed to the public IP address with relabeling.
-The IAM credentials used must have the ec2:DescribeInstances permission to discover scrape targets
-See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#ec2_sd_config DockerSwarmSDConfig configurations allow retrieving scrape targets from Docker Swarm engine.
+See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#dockerswarm_sd_config AccessKey is the AWS API key. Role of the targets to retrieve. Must be SecretKey is the AWS API secret. The port to scrape metrics from, when AWS Role ARN, an alternative to using AWS API keys. Optional filters to limit the discovery process to a subset of available
+resources.
+The available filters are listed in the upstream documentation:
+Services: https://docs.docker.com/engine/api/v1.40/#operation/ServiceList
+Tasks: https://docs.docker.com/engine/api/v1.40/#operation/TaskList
+Nodes: https://docs.docker.com/engine/api/v1.40/#operation/NodeList RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list. The time after which the service discovery data is refreshed. The port to scrape metrics from. If using the public IP address, this must
-instead be specified in the relabeling rule. Optional HTTP basic authentication information. Filters can be used optionally to filter the instance list by other criteria.
-Available filter criteria can be found here:
-https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeInstances.html
-Filter API documentation: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Filter.html Authorization header configuration to authenticate against the target HTTP endpoint.
-(Appears on:Receiver)
- EmailConfig configures notifications via Email. Whether or not to notify about resolved alerts. Optional OAuth 2.0 configuration.
+Cannot be set at the same time as The email address to send notifications to. It requires Prometheus >= v2.43.0. The sender address. It requires Prometheus >= v2.43.0. The hostname to identify to the SMTP server. Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).
+If unset, Prometheus uses its default value. It requires Prometheus >= v2.43.0. The SMTP host and port through which emails are sent. E.g. example.com:25 ProxyConnectHeader optionally specifies headers to send to
+proxies during CONNECT requests. It requires Prometheus >= v2.43.0. The username to use for authentication. TLS configuration to use on every scrape request The secret’s key that contains the password to use for authentication.
-The secret needs to be in the same namespace as the AlertmanagerConfig
-object and accessible by the Prometheus Operator. Configure whether HTTP requests follow HTTP 3xx redirects. The secret’s key that contains the CRAM-MD5 secret.
-The secret needs to be in the same namespace as the AlertmanagerConfig
-object and accessible by the Prometheus Operator. Whether to enable HTTP2.
+(Appears on:EC2SDConfig)
+ EC2Filter is the configuration for filtering EC2 instances.
+(Appears on:ScrapeConfigSpec)
+ EC2SDConfig allow retrieving scrape targets from AWS EC2 instances.
+The private IP address is used by default, but may be changed to the public IP address with relabeling.
+The IAM credentials used must have the ec2:DescribeInstances permission to discover scrape targets
+See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#ec2_sd_config The identity to use for authentication. The AWS region Further headers email header key/value pairs. Overrides any headers
-previously set by the notification implementation. AccessKey is the AWS API key. The HTML body of the email notification. SecretKey is the AWS API secret. The text body of the email notification. AWS Role ARN, an alternative to using AWS API keys. The SMTP TLS requirement.
-Note that Go does not support unencrypted connections to remote SMTP endpoints. RefreshInterval configures the refresh interval at which Prometheus will re-read the instance list. The port to scrape metrics from. If using the public IP address, this must
+instead be specified in the relabeling rule. TLS configuration Filters can be used optionally to filter the instance list by other criteria.
+Available filter criteria can be found here:
+https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeInstances.html
+Filter API documentation: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Filter.html
-(Appears on:ScrapeConfigSpec)
+(Appears on:Receiver)
Eureka SD configurations allow retrieving scrape targets using the Eureka REST API.
-Prometheus will periodically check the REST endpoint and create a target for every app instance.
-See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#eureka_sd_config EmailConfig configures notifications via Email. BasicAuth information to use on every scrape request. The email address to send notifications to. Authorization header to use on every scrape request. The sender address. Optional OAuth 2.0 configuration.
-Cannot be set at the same time as The hostname to identify to the SMTP server. TLS configuration applying to the target HTTP endpoint. The SMTP host and port through which emails are sent. E.g. example.com:25 It requires Prometheus >= v2.43.0. The username to use for authentication. It requires Prometheus >= v2.43.0. The secret’s key that contains the password to use for authentication.
+The secret needs to be in the same namespace as the AlertmanagerConfig
+object and accessible by the Prometheus Operator. The secret’s key that contains the CRAM-MD5 secret.
+The secret needs to be in the same namespace as the AlertmanagerConfig
+object and accessible by the Prometheus Operator. Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).
-If unset, Prometheus uses its default value. It requires Prometheus >= v2.43.0. The identity to use for authentication. Further headers email header key/value pairs. Overrides any headers
+previously set by the notification implementation. ProxyConnectHeader optionally specifies headers to send to
-proxies during CONNECT requests. It requires Prometheus >= v2.43.0. The HTML body of the email notification. Configure whether HTTP requests follow HTTP 3xx redirects. The text body of the email notification. Whether to enable HTTP2. The SMTP TLS requirement.
+Note that Go does not support unencrypted connections to remote SMTP endpoints. Refresh interval to re-read the instance list. TLS configuration
(Appears on:ScrapeConfigSpec)
FileSDConfig defines a Prometheus file service discovery configuration
-See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#file_sd_config Eureka SD configurations allow retrieving scrape targets using the Eureka REST API.
+Prometheus will periodically check the REST endpoint and create a target for every app instance.
+See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#eureka_sd_config The URL to connect to the Eureka server. BasicAuth information to use on every scrape request. Authorization header to use on every scrape request. Optional OAuth 2.0 configuration.
+Cannot be set at the same time as TLS configuration applying to the target HTTP endpoint. It requires Prometheus >= v2.43.0. It requires Prometheus >= v2.43.0. Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).
+If unset, Prometheus uses its default value. It requires Prometheus >= v2.43.0. ProxyConnectHeader optionally specifies headers to send to
+proxies during CONNECT requests. It requires Prometheus >= v2.43.0. Configure whether HTTP requests follow HTTP 3xx redirects. Whether to enable HTTP2. Refresh interval to re-read the instance list.
+(Appears on:ScrapeConfigSpec)
+ FileSDConfig defines a Prometheus file service discovery configuration
+See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#file_sd_config
-(Appears on:Receiver)
+(Appears on:ScrapeConfigSpec)
MSTeamsConfig configures notifications via Microsoft Teams.
-It requires Alertmanager >= 0.26.0. LightSailSDConfig configurations allow retrieving scrape targets from AWS Lightsail instances.
+See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#lightsail_sd_config
+TODO: Need to document that we will not be supporting the Whether to notify about resolved alerts. The AWS region. MSTeams webhook URL. AccessKey is the AWS API key. Message title template. SecretKey is the AWS API secret. Message summary template.
-It requires Alertmanager >= 0.27.0. AWS Role ARN, an alternative to using AWS API keys. Message body template. Custom endpoint to be used. HTTP client configuration. Refresh interval to re-read the list of instances.
-(Appears on:Matcher)
- MatchType is a comparison operator on a Matcher Port to scrape the metrics from.
+If using the public IP address, this must instead be specified in the relabeling rule. "=" "!=" "!~" "=~"
+ Optional HTTP basic authentication information.
+Cannot be set at the same time as Optional Optional OAuth2.0 configuration.
+Cannot be set at the same time as It requires Prometheus >= v2.43.0. It requires Prometheus >= v2.43.0. Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).
+If unset, Prometheus uses its default value. It requires Prometheus >= v2.43.0. ProxyConnectHeader optionally specifies headers to send to
+proxies during CONNECT requests. It requires Prometheus >= v2.43.0. TLS configuration to connect to the Puppet DB. Configure whether the HTTP requests should follow HTTP 3xx redirects. Configure whether to enable HTTP2.
+(Appears on:ScrapeConfigSpec)
+ LinodeSDConfig configurations allow retrieving scrape targets from Linode’s Linode APIv4.
+See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#linode_sd_config Optional region to filter on. Default port to scrape metrics from. The string by which Linode Instance tags are joined into the tag label. Time after which the linode instances are refreshed. Authorization header configuration. Optional OAuth 2.0 configuration.
+Cannot be used at the same time as It requires Prometheus >= v2.43.0. It requires Prometheus >= v2.43.0. Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).
+If unset, Prometheus uses its default value. It requires Prometheus >= v2.43.0. ProxyConnectHeader optionally specifies headers to send to
+proxies during CONNECT requests. It requires Prometheus >= v2.43.0. Configure whether HTTP requests follow HTTP 3xx redirects. TLS configuration applying to the target HTTP endpoint. Whether to enable HTTP2.
+(Appears on:Receiver)
+ MSTeamsConfig configures notifications via Microsoft Teams.
+It requires Alertmanager >= 0.26.0. Whether to notify about resolved alerts. MSTeams webhook URL. Message title template. Message summary template.
+It requires Alertmanager >= 0.27.0. Message body template. HTTP client configuration.
+(Appears on:Matcher)
+ MatchType is a comparison operator on a Matcher "=" "!=" "!~" "=~"
(Appears on:InhibitRule, Route)
Label to match. Label value to match. Match operation available with AlertManager >= v0.22.0 and
+takes precedence over Regex (deprecated) if non-empty. Whether to match on equality (false) or regular-expression (true).
+Deprecated: for AlertManager >= v0.22.0, Month of the year "april" "august" "december" "february" "january" "july" "june" "march" "may" "november" "october" "september"
+(Appears on:TimeInterval)
+ MonthRange is an inclusive range of months of the year beginning in January
+Months can be specified by name (e.g ‘January’) by numerical month (e.g ‘1’) or as an inclusive range (e.g ‘January:March’, ‘1:3’, ‘1:March’)
+(Appears on:AlertmanagerConfigSpec)
+ MuteTimeInterval specifies the periods in time when notifications will be muted Name of the time interval TimeIntervals is a list of TimeInterval
+(Appears on:KubernetesSDConfig)
+ NamespaceDiscovery is the configuration for discovering
+Kubernetes namespaces. Includes the namespace in which the Prometheus pod exists to the list of watched namesapces. List of namespaces where to watch for resources.
+If empty and
+(Appears on:ScrapeConfigSpec)
+ NomadSDConfig configurations allow retrieving scrape targets from Nomad’s Service API.
+See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#nomad_sd_config The information to access the Nomad API. It is to be defined
+as the Nomad documentation requires. Label to match. BasicAuth information to use on every scrape request. Authorization header to use on every scrape request. Optional OAuth 2.0 configuration.
+Cannot be set at the same time as TLS configuration applying to the target HTTP endpoint. Label value to match. It requires Prometheus >= v2.43.0. It requires Prometheus >= v2.43.0. Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).
+If unset, Prometheus uses its default value. It requires Prometheus >= v2.43.0. Match operation available with AlertManager >= v0.22.0 and
-takes precedence over Regex (deprecated) if non-empty. ProxyConnectHeader optionally specifies headers to send to
+proxies during CONNECT requests. It requires Prometheus >= v2.43.0. Whether to match on equality (false) or regular-expression (true).
-Deprecated: for AlertManager >= v0.22.0, Configure whether HTTP requests follow HTTP 3xx redirects. Month of the year Whether to enable HTTP2. "april" "august" "december" "february" "january" "july" "june" "march" "may" "november" "october" "september"
-(Appears on:TimeInterval)
- MonthRange is an inclusive range of months of the year beginning in January
-Months can be specified by name (e.g ‘January’) by numerical month (e.g ‘1’) or as an inclusive range (e.g ‘January:March’, ‘1:3’, ‘1:March’)
-(Appears on:AlertmanagerConfigSpec)
+(Appears on:ScrapeConfigSpec)
MuteTimeInterval specifies the periods in time when notifications will be muted OVHCloudSDConfig configurations allow retrieving scrape targets from OVHcloud’s dedicated servers and VPS using their API.
+See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#ovhcloud_sd_config Name of the time interval Access key to use. https://api.ovh.com. TimeIntervals is a list of TimeInterval
-(Appears on:KubernetesSDConfig)
- NamespaceDiscovery is the configuration for discovering
-Kubernetes namespaces. Service of the targets to retrieve. Must be Includes the namespace in which the Prometheus pod exists to the list of watched namesapces. Custom endpoint to be used. List of namespaces where to watch for resources.
-If empty and Refresh interval to re-read the resources list.
+(Appears on:OVHCloudSDConfig)
+ Service of the targets to retrieve. Must be "DedicatedServer" "VPS" HTTP client configuration. Unique location of the affected system. Mode defines how the Prometheus operator deploys the PrometheusAgent pod(s).
+For now this field has no effect. (Alpha) Using this field requires the Namespaces to match for ServicedMonitors discovery. An empty label selector
-matches all namespaces. A null label selector matches the current
+matches all namespaces. A null label selector (default value) matches the current
namespace only. Namespaces to match for PodMonitors discovery. An empty label selector
-matches all namespaces. A null label selector matches the current
+matches all namespaces. A null label selector (default value) matches the current
namespace only. Enable access to Prometheus feature flags. By default, no features are enabled. Enabling features which are disabled by default is entirely outside the
scope of what the maintainers will support and by doing so, you accept
@@ -22616,6 +24273,21 @@ Prometheus Pods. AutomountServiceAccountToken indicates whether a service account token should be automatically mounted in the pod.
+If the field isn’t set, the operator mounts the service account token by default. Warning: be aware that by default, Prometheus requires the service account token for Kubernetes service discovery.
+It is possible to use strategic merge patch to project the service account token into the ‘prometheus’ container. When true, Prometheus resolves label conflicts by renaming the labels in
-the scraped data to “exported_ When true, Prometheus resolves label conflicts by renaming the labels in the scraped data
+to “exported_” for all targets created from ServiceMonitor, PodMonitor and
+ScrapeConfig objects. Otherwise the HonorLabels field of the service or pod monitor applies.
+In practice, When not empty, a label will be added to When not empty, a label will be added to: The label will not added for objects referenced in The label’s name is this field’s value.
The label’s value is the namespace of the It is meant to be used by admins to keep the overall number of
samples/series under a desired limit. When both It is meant to be used by admins to to keep the overall number of
targets under a desired limit. When both It requires Prometheus >= v2.27.0. When both It requires Prometheus >= v2.27.0. When both It requires Prometheus >= v2.27.0. When both It requires Prometheus >= v2.47.0. When both It requires Prometheus >= v2.28.0. When both Configures compression of the write-ahead log (WAL) using Snappy. WAL compression is enabled by default for Prometheus >= 2.20.0 Requires Prometheus v2.11.0 and above. List of references to PodMonitor, ServiceMonitor, Probe and PrometheusRule objects
+to be excluded from enforcing a namespace label of origin. It is only applicable if Use the host’s network namespace if true. Make sure to understand the security implications if you want to enable
+it (https://kubernetes.io/docs/concepts/configuration/overview/). When hostNetwork is enabled, this will set the DNS policy to
+ PodTargetLabels are appended to the TracingConfig configures tracing in Prometheus. This is an experimental feature, it may change in any upcoming release
+in a breaking way. BodySizeLimit defines per-scrape on response body size.
+Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedBodySizeLimit. SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
+Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedSampleLimit. TargetLimit defines a limit on the number of scraped targets that will be accepted.
+Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedTargetLimit. Per-scrape limit on number of labels that will be accepted for a sample.
+Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedLabelLimit. Per-scrape limit on length of labels name that will be accepted for a sample.
+Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedLabelNameLengthLimit. Per-scrape limit on length of labels value that will be accepted for a sample.
+Only valid in Prometheus versions 2.45.0 and newer. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedLabelValueLengthLimit. Per-scrape limit on the number of targets dropped by relabeling
+that will be kept in memory. 0 means no limit. It requires Prometheus >= v2.47.0. Note that the global limit only applies to scrape objects that don’t specify an explicit limit value.
+If you want to enforce a maximum limit for all scrape objects, refer to enforcedKeepDroppedTargets. Defines the strategy used to reload the Prometheus configuration.
+If not specified, the configuration is reloaded using the /-/reload HTTP endpoint. Defines the maximum time that the List of scrape classes to expose to scraping objects such as
+PodMonitors, ServiceMonitors, Probes and ScrapeConfigs. This is an experimental feature, it may change in any upcoming release
+in a breaking way.
+(Appears on:ScrapeConfigSpec)
+ PuppetDBSDConfig configurations allow retrieving scrape targets from PuppetDB resources.
+See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#puppetdb_sd_config Configures compression of the write-ahead log (WAL) using Snappy. WAL compression is enabled by default for Prometheus >= 2.20.0 Requires Prometheus v2.11.0 and above. The URL of the PuppetDB root query endpoint. List of references to PodMonitor, ServiceMonitor, Probe and PrometheusRule objects
-to be excluded from enforcing a namespace label of origin. It is only applicable if Puppet Query Language (PQL) query. Only resources are supported.
+https://puppet.com/docs/puppetdb/latest/api/query/v4/pql.html Use the host’s network namespace if true. Make sure to understand the security implications if you want to enable
-it (https://kubernetes.io/docs/concepts/configuration/overview/). When hostNetwork is enabled, this will set the DNS policy to
- Whether to include the parameters as meta labels.
+Note: Enabling this exposes parameters in the Prometheus UI and API. Make sure
+that you don’t have secrets exposed as parameters if you enable this. PodTargetLabels are appended to the Refresh interval to re-read the list of resources. TracingConfig configures tracing in Prometheus. This is an experimental feature, it may change in any upcoming release
-in a breaking way. Port to scrape the metrics from. BodySizeLimit defines per-scrape on response body size.
-Only valid in Prometheus versions 2.45.0 and newer. Optional HTTP basic authentication information.
+Cannot be set at the same time as SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
-Only valid in Prometheus versions 2.45.0 and newer. Optional TargetLimit defines a limit on the number of scraped targets that will be accepted.
-Only valid in Prometheus versions 2.45.0 and newer. Optional OAuth2.0 configuration.
+Cannot be set at the same time as Per-scrape limit on number of labels that will be accepted for a sample.
-Only valid in Prometheus versions 2.45.0 and newer. It requires Prometheus >= v2.43.0. Per-scrape limit on length of labels name that will be accepted for a sample.
-Only valid in Prometheus versions 2.45.0 and newer. It requires Prometheus >= v2.43.0. Per-scrape limit on length of labels value that will be accepted for a sample.
-Only valid in Prometheus versions 2.45.0 and newer. Whether to use the proxy configuration defined by environment variables (HTTP_PROXY, HTTPS_PROXY, and NO_PROXY).
+If unset, Prometheus uses its default value. It requires Prometheus >= v2.43.0. Per-scrape limit on the number of targets dropped by relabeling
-that will be kept in memory. 0 means no limit. It requires Prometheus >= v2.47.0. ProxyConnectHeader optionally specifies headers to send to
+proxies during CONNECT requests. It requires Prometheus >= v2.43.0. Defines the strategy used to reload the Prometheus configuration.
-If not specified, the configuration is reloaded using the /-/reload HTTP endpoint. TLS configuration to connect to the Puppet DB. Defines the maximum time that the Configure whether the HTTP requests should follow HTTP 3xx redirects. List of scrape classes to expose to scraping objects such as
-PodMonitors, ServiceMonitors, Probes and ScrapeConfigs. This is an experimental feature, it may change in any upcoming release
-in a breaking way. Configure whether to enable HTTP2. The time to live definition for the alert notification The value of the The LinodeSDConfigs defines a list of Linode service discovery configurations. NomadSDConfigs defines a list of Nomad service discovery configurations. DockerswarmSDConfigs defines a list of Dockerswarm service discovery configurations. PuppetDBSDConfigs defines a list of PuppetDB service discovery configurations. LightsailSDConfigs defines a list of Lightsail service discovery configurations. OVHCloudSDConfigs defines a list of OVHcloud service discovery configurations. HTTP client configuration. Unique location of the affected system. The time to live definition for the alert notification30s, 1m, 1h20m15s, 15dOAuth2
@@ -10164,7 +10382,7 @@ Kubernetes meta/v1.LabelSelector
@@ -10488,10 +10706,13 @@ For more information see
+[]EnableFeature
+
+(Optional)
+
+
+automountServiceAccountToken
+
+bool
+
+
+(Optional)
+
+
+
secrets
[]string
@@ -10894,10 +11130,11 @@ bool
-
overrideHonorLaels:true enforces honorLabels:false
+for all ServiceMonitor, PodMonitor and ScrapeConfig objects.
@@ -10935,7 +11172,7 @@ string
-
ServiceMonitor, PodMonitor, Probe and ScrapeConfig objects.PrometheusRule objects.spec.excludedFromEnforcement.ServiceMonitor,
-PodMonitor, Probe or PrometheusRule object.PodMonitor, Probe, PrometheusRule or ScrapeConfig object.
@@ -10964,6 +11201,11 @@ unless
spec.sampleLimit is greater than zero and less than
spec.enforcedSampleLimit.
enforcedSampleLimit and sampleLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined sampleLimit value will inherit the global sampleLimit value (Prometheus >= 2.45.0) or the enforcedSampleLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedSampleLimit is greater than the sampleLimit, the sampleLimit will be set to enforcedSampleLimit.
+* Scrape objects with a sampleLimit value less than or equal to enforcedSampleLimit keep their specific value.
+* Scrape objects with a sampleLimit value greater than enforcedSampleLimit are set to enforcedSampleLimit.
@@ -10981,6 +11223,11 @@ ServiceMonitor, PodMonitor, Probe objects unless
spec.targetLimit i
greater than zero and less than spec.enforcedTargetLimit.
enforcedTargetLimit and targetLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined targetLimit value will inherit the global targetLimit value (Prometheus >= 2.45.0) or the enforcedTargetLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedTargetLimit is greater than the targetLimit, the targetLimit will be set to enforcedTargetLimit.
+* Scrape objects with a targetLimit value less than or equal to enforcedTargetLimit keep their specific value.
+* Scrape objects with a targetLimit value greater than enforcedTargetLimit are set to enforcedTargetLimit.
@@ -10997,6 +11244,11 @@ of labels per sample. The value overrides any
spec.labelLimit set b
ServiceMonitor, PodMonitor, Probe objects unless spec.labelLimit is
greater than zero and less than spec.enforcedLabelLimit.
enforcedLabelLimit and labelLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined labelLimit value will inherit the global labelLimit value (Prometheus >= 2.45.0) or the enforcedLabelLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedLabelLimit is greater than the labelLimit, the labelLimit will be set to enforcedLabelLimit.
+* Scrape objects with a labelLimit value less than or equal to enforcedLabelLimit keep their specific value.
+* Scrape objects with a labelLimit value greater than enforcedLabelLimit are set to enforcedLabelLimit.
@@ -11013,6 +11265,11 @@ of labels name per sample. The value overrides any
spec.labelNameLengthLim
ServiceMonitor, PodMonitor, Probe objects unless spec.labelNameLengthLimit is
greater than zero and less than spec.enforcedLabelNameLengthLimit.
enforcedLabelNameLengthLimit and labelNameLengthLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined labelNameLengthLimit value will inherit the global labelNameLengthLimit value (Prometheus >= 2.45.0) or the enforcedLabelNameLengthLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedLabelNameLengthLimit is greater than the labelNameLengthLimit, the labelNameLengthLimit will be set to enforcedLabelNameLengthLimit.
+* Scrape objects with a labelNameLengthLimit value less than or equal to enforcedLabelNameLengthLimit keep their specific value.
+* Scrape objects with a labelNameLengthLimit value greater than enforcedLabelNameLengthLimit are set to enforcedLabelNameLengthLimit.
@@ -11029,6 +11286,11 @@ of labels value per sample. The value overrides any
spec.labelValueLengthL
ServiceMonitor, PodMonitor, Probe objects unless spec.labelValueLengthLimit is
greater than zero and less than spec.enforcedLabelValueLengthLimit.
enforcedLabelValueLengthLimit and labelValueLengthLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined labelValueLengthLimit value will inherit the global labelValueLengthLimit value (Prometheus >= 2.45.0) or the enforcedLabelValueLengthLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedLabelValueLengthLimit is greater than the labelValueLengthLimit, the labelValueLengthLimit will be set to enforcedLabelValueLengthLimit.
+* Scrape objects with a labelValueLengthLimit value less than or equal to enforcedLabelValueLengthLimit keep their specific value.
+* Scrape objects with a labelValueLengthLimit value greater than enforcedLabelValueLengthLimit are set to enforcedLabelValueLengthLimit.
@@ -11046,6 +11308,11 @@ any
spec.keepDroppedTargets set by
ServiceMonitor, PodMonitor, Probe objects unless spec.keepDroppedTargets is
greater than zero and less than spec.enforcedKeepDroppedTargets.
enforcedKeepDroppedTargets and keepDroppedTargets are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined keepDroppedTargets value will inherit the global keepDroppedTargets value (Prometheus >= 2.45.0) or the enforcedKeepDroppedTargets value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedKeepDroppedTargets is greater than the keepDroppedTargets, the keepDroppedTargets will be set to enforcedKeepDroppedTargets.
+* Scrape objects with a keepDroppedTargets value less than or equal to enforcedKeepDroppedTargets keep their specific value.
+* Scrape objects with a keepDroppedTargets value greater than enforcedKeepDroppedTargets are set to enforcedKeepDroppedTargets.
@@ -11063,6 +11330,11 @@ of uncompressed response body that will be accepted by Prometheus.
Targets responding with a body larger than this many bytes will cause
the scrape to fail.
enforcedBodySizeLimit and bodySizeLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined bodySizeLimit value will inherit the global bodySizeLimit value (Prometheus >= 2.45.0) or the enforcedBodySizeLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedBodySizeLimit is greater than the bodySizeLimit, the bodySizeLimit will be set to enforcedBodySizeLimit.
+* Scrape objects with a bodySizeLimit value less than or equal to enforcedBodySizeLimit keep their specific value.
+* Scrape objects with a bodySizeLimit value greater than enforcedBodySizeLimit are set to enforcedBodySizeLimit.
@@ -11204,6 +11476,8 @@ ByteSize
(Optional)
@@ -11217,6 +11491,8 @@ uint64
(Optional)
@@ -11230,6 +11506,8 @@ uint64
(Optional)
@@ -11243,6 +11521,8 @@ uint64
(Optional)
@@ -11256,6 +11536,8 @@ uint64
(Optional)
@@ -11269,6 +11551,8 @@ uint64
(Optional)
@@ -11283,6 +11567,8 @@ uint64
@@ -11978,7 +12264,7 @@ A zero value means that Prometheus doesn’t accept any incoming connection.
+ProxyConfig
proxyConnectHeader
-map[string]k8s.io/api/core/v1.SecretKeySelector
+map[string][]k8s.io/api/core/v1.SecretKeySelector
@@ -12268,7 +12554,7 @@ It requires Prometheus >= v2.50.0.
RelabelConfig
+(Optional)
-
+proxyURL defines the HTTP proxy server to use.
+
+
+
+noProxy
+
+string
+
+
+(Optional)
+
+noProxy is a comma-separated string that can contain IPs, CIDR notation, domain names
+that should be excluded from proxying. IP and domain names can
+contain port numbers.
+
+
+
+proxyFromEnvironment
+
+bool
+
+
+(Optional)
+
+
+
+
+proxyConnectHeader
+
+
+map[string][]k8s.io/api/core/v1.SecretKeySelector
+
+
+
+(Optional)
+
@@ -12854,7 +13188,67 @@ string
+
-
+proxyURL defines the HTTP proxy server to use.
+
+
+
+noProxy
+
+string
+
+
+(Optional)
+
+noProxy is a comma-separated string that can contain IPs, CIDR notation, domain names
+that should be excluded from proxying. IP and domain names can
+contain port numbers.
+
+
+
+proxyFromEnvironment
+
+bool
+
+
+(Optional)
+
+
+
+
+
+proxyConnectHeader
+
+
+map[string][]k8s.io/api/core/v1.SecretKeySelector
+
+
+
+(Optional)
+
+
+
+
+followRedirects
+
+bool
+
+
+(Optional)
+
@@ -13178,7 +13572,7 @@ Alertmanager.
@@ -13295,6 +13690,7 @@ bool
SafeAuthorization
SafeTLSConfig
+(Optional)
+(Optional)
@@ -13335,8 +13731,9 @@ bool
(Optional)
-
@@ -13350,7 +13747,10 @@ TLSConfig
(Optional)
-
caFile, certFile and keyFile fields are supported.
@@ -13372,6 +13772,24 @@ Then the Operator adds the target-specific relabelings defined in the scrape obj
+
+
+
+metricRelabelings
+
+
+[]RelabelConfig
+
+
+
+(Optional)
+
+ScrapeProtocol
@@ -13973,6 +14391,7 @@ string
+(Optional)
@@ -13984,6 +14403,7 @@ bool
+(Optional)
@@ -15395,7 +15815,6 @@ The number of domains is less than 5(MinDomains), so “global minimum&rdquo
In this situation, new pod with the same labelSelector cannot be scheduled,
because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,
it will violate MaxSkew.
-
@@ -15778,32 +16197,6 @@ order. Available curves are documented in the go documentation:
-WebTLSConfigError
-
-
-
-
-
-
-
-Field
-Description
-
-
-
-
-
-err
-
-string
-
-
-
-
monitoring.coreos.com/v1alpha1
Resource Types:
@@ -15997,6 +16390,20 @@ PrometheusAgentSpec
+
+
+
+mode
+
+string
+
+
+(Optional)
+
+PrometheusAgentDaemonSet feature gate to be enabled.
+
@@ -16087,7 +16494,7 @@ Kubernetes meta/v1.LabelSelector
podMetadata
@@ -16050,7 +16457,7 @@ Kubernetes meta/v1.LabelSelector
@@ -16411,10 +16818,13 @@ For more information see
+[]EnableFeature
+
+(Optional)
+
+
+automountServiceAccountToken
+
+bool
+
+
+(Optional)
+
+
+
secrets
[]string
@@ -16817,10 +17242,11 @@ bool
-
overrideHonorLaels:true enforces honorLabels:false
+for all ServiceMonitor, PodMonitor and ScrapeConfig objects.
@@ -16858,7 +17284,7 @@ string
-
ServiceMonitor, PodMonitor, Probe and ScrapeConfig objects.PrometheusRule objects.spec.excludedFromEnforcement.ServiceMonitor,
-PodMonitor, Probe or PrometheusRule object.PodMonitor, Probe, PrometheusRule or ScrapeConfig object.
@@ -16887,6 +17313,11 @@ unless
spec.sampleLimit is greater than zero and less than
spec.enforcedSampleLimit.
enforcedSampleLimit and sampleLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined sampleLimit value will inherit the global sampleLimit value (Prometheus >= 2.45.0) or the enforcedSampleLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedSampleLimit is greater than the sampleLimit, the sampleLimit will be set to enforcedSampleLimit.
+* Scrape objects with a sampleLimit value less than or equal to enforcedSampleLimit keep their specific value.
+* Scrape objects with a sampleLimit value greater than enforcedSampleLimit are set to enforcedSampleLimit.
@@ -16904,6 +17335,11 @@ ServiceMonitor, PodMonitor, Probe objects unless
spec.targetLimit i
greater than zero and less than spec.enforcedTargetLimit.
enforcedTargetLimit and targetLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined targetLimit value will inherit the global targetLimit value (Prometheus >= 2.45.0) or the enforcedTargetLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedTargetLimit is greater than the targetLimit, the targetLimit will be set to enforcedTargetLimit.
+* Scrape objects with a targetLimit value less than or equal to enforcedTargetLimit keep their specific value.
+* Scrape objects with a targetLimit value greater than enforcedTargetLimit are set to enforcedTargetLimit.
@@ -16920,6 +17356,11 @@ of labels per sample. The value overrides any
spec.labelLimit set b
ServiceMonitor, PodMonitor, Probe objects unless spec.labelLimit is
greater than zero and less than spec.enforcedLabelLimit.
enforcedLabelLimit and labelLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined labelLimit value will inherit the global labelLimit value (Prometheus >= 2.45.0) or the enforcedLabelLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedLabelLimit is greater than the labelLimit, the labelLimit will be set to enforcedLabelLimit.
+* Scrape objects with a labelLimit value less than or equal to enforcedLabelLimit keep their specific value.
+* Scrape objects with a labelLimit value greater than enforcedLabelLimit are set to enforcedLabelLimit.
@@ -16936,6 +17377,11 @@ of labels name per sample. The value overrides any
spec.labelNameLengthLim
ServiceMonitor, PodMonitor, Probe objects unless spec.labelNameLengthLimit is
greater than zero and less than spec.enforcedLabelNameLengthLimit.
enforcedLabelNameLengthLimit and labelNameLengthLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined labelNameLengthLimit value will inherit the global labelNameLengthLimit value (Prometheus >= 2.45.0) or the enforcedLabelNameLengthLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedLabelNameLengthLimit is greater than the labelNameLengthLimit, the labelNameLengthLimit will be set to enforcedLabelNameLengthLimit.
+* Scrape objects with a labelNameLengthLimit value less than or equal to enforcedLabelNameLengthLimit keep their specific value.
+* Scrape objects with a labelNameLengthLimit value greater than enforcedLabelNameLengthLimit are set to enforcedLabelNameLengthLimit.
@@ -16952,6 +17398,11 @@ of labels value per sample. The value overrides any
spec.labelValueLengthL
ServiceMonitor, PodMonitor, Probe objects unless spec.labelValueLengthLimit is
greater than zero and less than spec.enforcedLabelValueLengthLimit.
enforcedLabelValueLengthLimit and labelValueLengthLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined labelValueLengthLimit value will inherit the global labelValueLengthLimit value (Prometheus >= 2.45.0) or the enforcedLabelValueLengthLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedLabelValueLengthLimit is greater than the labelValueLengthLimit, the labelValueLengthLimit will be set to enforcedLabelValueLengthLimit.
+* Scrape objects with a labelValueLengthLimit value less than or equal to enforcedLabelValueLengthLimit keep their specific value.
+* Scrape objects with a labelValueLengthLimit value greater than enforcedLabelValueLengthLimit are set to enforcedLabelValueLengthLimit.
@@ -16969,6 +17420,11 @@ any
spec.keepDroppedTargets set by
ServiceMonitor, PodMonitor, Probe objects unless spec.keepDroppedTargets is
greater than zero and less than spec.enforcedKeepDroppedTargets.
enforcedKeepDroppedTargets and keepDroppedTargets are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined keepDroppedTargets value will inherit the global keepDroppedTargets value (Prometheus >= 2.45.0) or the enforcedKeepDroppedTargets value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedKeepDroppedTargets is greater than the keepDroppedTargets, the keepDroppedTargets will be set to enforcedKeepDroppedTargets.
+* Scrape objects with a keepDroppedTargets value less than or equal to enforcedKeepDroppedTargets keep their specific value.
+* Scrape objects with a keepDroppedTargets value greater than enforcedKeepDroppedTargets are set to enforcedKeepDroppedTargets.
@@ -16986,6 +17442,11 @@ of uncompressed response body that will be accepted by Prometheus.
Targets responding with a body larger than this many bytes will cause
the scrape to fail.
enforcedBodySizeLimit and bodySizeLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined bodySizeLimit value will inherit the global bodySizeLimit value (Prometheus >= 2.45.0) or the enforcedBodySizeLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedBodySizeLimit is greater than the bodySizeLimit, the bodySizeLimit will be set to enforcedBodySizeLimit.
+* Scrape objects with a bodySizeLimit value less than or equal to enforcedBodySizeLimit keep their specific value.
+* Scrape objects with a bodySizeLimit value greater than enforcedBodySizeLimit are set to enforcedBodySizeLimit.
@@ -17127,6 +17588,8 @@ ByteSize
(Optional)
@@ -17140,6 +17603,8 @@ uint64
(Optional)
@@ -17153,6 +17618,8 @@ uint64
(Optional)
@@ -17166,6 +17633,8 @@ uint64
(Optional)
@@ -17179,6 +17648,8 @@ uint64
(Optional)
@@ -17192,6 +17663,8 @@ uint64
(Optional)
@@ -17206,6 +17679,8 @@ uint64
@@ -17332,6 +17807,21 @@ ScrapeConfigSpec
-
+
+
+jobName
+
+string
+
+
+(Optional)
+
+job label assigned to the scraped metrics by default.job_name field in the rendered scrape configuration is always controlled by the
+operator to prevent duplicate job names, which Prometheus does not allow. Instead the
+job label is set by means of relabeling configs.
+
staticConfigs
@@ -17528,6 +18018,20 @@ ScrapeConfigSpec
+
+
+linodeSDConfigs
+
+
+[]LinodeSDConfig
+
+
+
+(Optional)
+
+
+
hetznerSDConfigs
@@ -17542,6 +18046,76 @@ ScrapeConfigSpec
+
+
+NomadSDConfigs
+
+
+[]NomadSDConfig
+
+
+
+(Optional)
+
+
+
+
+
+dockerSwarmSDConfigs
+
+
+[]DockerSwarmSDConfig
+
+
+
+(Optional)
+
+
+
+
+
+puppetDBSDConfigs
+
+
+[]PuppetDBSDConfig
+
+
+
+(Optional)
+
+
+
+
+
+lightSailSDConfigs
+
+
+[]LightSailSDConfig
+
+
+
+(Optional)
+
+
+
+
+
+ovhcloudSDConfigs
+
+
+[]OVHCloudSDConfig
+
+
+
+(Optional)
+
+
+
@@ -18049,8 +18623,10 @@ string
relabelings
@@ -17872,7 +18446,7 @@ If unset, Prometheus uses its default value.
proxyConnectHeader
-map[string]k8s.io/api/core/v1.SecretKeySelector
+map[string][]k8s.io/api/core/v1.SecretKeySelector
(Optional)
-
The authentication method, either OAuth or ManagedIdentity.
-The authentication method, either
+OAuth or ManagedIdentity or SDK.
@@ -18401,7 +18977,7 @@ If unset, Prometheus uses its default value.
proxyConnectHeader
-map[string]k8s.io/api/core/v1.SecretKeySelector
+map[string][]k8s.io/api/core/v1.SecretKeySelector
@@ -18662,7 +19238,7 @@ If unset, Prometheus uses its default value.
proxyConnectHeader
-map[string]k8s.io/api/core/v1.SecretKeySelector
+map[string][]k8s.io/api/core/v1.SecretKeySelector
@@ -18938,7 +19514,7 @@ If unset, Prometheus uses its default value.
proxyConnectHeader
-map[string]k8s.io/api/core/v1.SecretKeySelector
+map[string][]k8s.io/api/core/v1.SecretKeySelector
@@ -19085,13 +19661,13 @@ bool
EC2Filter
+
DockerSwarmFilter
@@ -19109,6 +19685,7 @@ string
-
+
@@ -19119,20 +19696,19 @@ string
+
EC2SDConfig
+
DockerSwarmSDConfig
@@ -19144,54 +19720,56 @@ See
-Kubernetes core/v1.SecretKeySelector
-
+string
-
-(Optional)
-
Services, Tasks, or Nodes.
-
secretKey
+port
-
-Kubernetes core/v1.SecretKeySelector
-
+int32
(Optional)
-
role is nodes, and for discovered
+tasks and services that don’t have published ports.
-
roleARN
+filters
-string
+
+[]DockerSwarmFilter
+
(Optional)
-
@@ -19205,247 +19783,312 @@ Duration
(Optional)
-
-
port
+basicAuth
-int
+
+BasicAuth
+
(Optional)
-
-
-
-
filters
+authorization
-
-[]EC2Filter
+
+SafeAuthorization
(Optional)
-
EmailConfig
-
-
-
-
+
-
-
-
Field
-Description
-
-
sendResolved
+oauth2
-bool
+
+OAuth2
+
(Optional)
-
authorization, or basicAuth.
-
to
+proxyUrl
string
(Optional)
-
proxyURL defines the HTTP proxy server to use.
-
from
+noProxy
string
(Optional)
-
noProxy is a comma-separated string that can contain IPs, CIDR notation, domain names
+that should be excluded from proxying. IP and domain names can
+contain port numbers.
-
hello
+proxyFromEnvironment
-string
+bool
(Optional)
-
-
smarthost
+proxyConnectHeader
-string
+
+map[string][]k8s.io/api/core/v1.SecretKeySelector
+
(Optional)
-
-
authUsername
+tlsConfig
-string
+
+SafeTLSConfig
+
(Optional)
-
-
authPassword
+followRedirects
-
-Kubernetes core/v1.SecretKeySelector
-
+bool
-
-
-
authSecret
+enableHTTP2
-
-Kubernetes core/v1.SecretKeySelector
-
+bool
-
-
+
- authIdentity
+EC2Filter
+
+
+
+
+
+
+
+
+Field
+Description
+
+
+
+
+name
+
+string
+
+
+
+
+
+
+
+
+values
+
+[]string
+
+
+
+EC2SDConfig
+
+
+
+
-
+
+
+
+Field
+Description
+
+
+
region
string
(Optional)
-
-
headers
+accessKey
-
-[]KeyValue
+
+Kubernetes core/v1.SecretKeySelector
-
-
html
+secretKey
-string
+
+Kubernetes core/v1.SecretKeySelector
+
(Optional)
-
-
text
+roleARN
string
(Optional)
-
-
requireTLS
+refreshInterval
-bool
+
+Duration
+
(Optional)
-
+
-
+tlsConfig
+port
-
-SafeTLSConfig
+int
+
+
+(Optional)
+
+
+
+
filters
+
+
+[]EC2Filter
(Optional)
-
EurekaSDConfig
+
EmailConfig
@@ -19457,178 +20100,377 @@ See
-BasicAuth
-
+string
-
(Optional)
-
-
authorization
+from
-
-SafeAuthorization
-
+string
(Optional)
-
-
oauth2
+hello
-
-OAuth2
-
+string
(Optional)
-
authorization or basic_auth.
-
tlsConfig
+smarthost
-
-SafeTLSConfig
-
+string
(Optional)
-
-
proxyUrl
+authUsername
string
(Optional)
-
proxyURL defines the HTTP proxy server to use.
-
noProxy
+authPassword
-string
+
+Kubernetes core/v1.SecretKeySelector
+
-(Optional)
-
noProxy is a comma-separated string that can contain IPs, CIDR notation, domain names
-that should be excluded from proxying. IP and domain names can
-contain port numbers.
+
-
+proxyFromEnvironment
+authSecret
-bool
+
+Kubernetes core/v1.SecretKeySelector
+
+
+
+
+
+
+
authIdentity
+
+string
(Optional)
-
+
-
proxyConnectHeader
+headers
-
-map[string]k8s.io/api/core/v1.SecretKeySelector
+
+[]KeyValue
+
+
+
+
+html
+
+string
+
+
(Optional)
-
-
followRedirects
+text
-bool
+string
(Optional)
-
-
enableHTTP2
+requireTLS
bool
(Optional)
-
-
refreshInterval
+tlsConfig
-
-Duration
+
+SafeTLSConfig
(Optional)
-
FileSDConfig
+
EurekaSDConfig
+
+
+
+
+
+
+Field
+Description
+
+
+
+
+server
+
+string
+
+
+
+
+
+
+
+basicAuth
+
+
+BasicAuth
+
+
+
+(Optional)
+
+
+
+
+
+authorization
+
+
+SafeAuthorization
+
+
+
+(Optional)
+
+
+
+
+
+oauth2
+
+
+OAuth2
+
+
+
+(Optional)
+
+authorization or basic_auth.
+
+
+
+tlsConfig
+
+
+SafeTLSConfig
+
+
+
+(Optional)
+
+
+
+
+
+proxyUrl
+
+string
+
+
+(Optional)
+
+proxyURL defines the HTTP proxy server to use.
+
+
+
+noProxy
+
+string
+
+
+(Optional)
+
+noProxy is a comma-separated string that can contain IPs, CIDR notation, domain names
+that should be excluded from proxying. IP and domain names can
+contain port numbers.
+
+
+
+proxyFromEnvironment
+
+bool
+
+
+(Optional)
+
+
+
+
+
+proxyConnectHeader
+
+
+map[string][]k8s.io/api/core/v1.SecretKeySelector
+
+
+
+(Optional)
+
+
+
+
+
+followRedirects
+
+bool
+
+
+(Optional)
+
+
+
+
+
+enableHTTP2
+
+bool
+
+
+(Optional)
+
+
+
+
+
+
+refreshInterval
+
+
+Duration
+
+
+
+(Optional)
+
+FileSDConfig
+
+
@@ -20024,7 +20866,7 @@ If unset, Prometheus uses its default value.
-proxyConnectHeader
-map[string]k8s.io/api/core/v1.SecretKeySelector
+map[string][]k8s.io/api/core/v1.SecretKeySelector
@@ -20158,7 +21000,7 @@ If unset, Prometheus uses its default value.
proxyConnectHeader
-map[string]k8s.io/api/core/v1.SecretKeySelector
+map[string][]k8s.io/api/core/v1.SecretKeySelector
@@ -20524,7 +21366,7 @@ If unset, Prometheus uses its default value.
proxyConnectHeader
-map[string]k8s.io/api/core/v1.SecretKeySelector
+map[string][]k8s.io/api/core/v1.SecretKeySelector
@@ -20734,7 +21576,7 @@ If unset, Prometheus uses its default value.
proxyConnectHeader
-map[string]k8s.io/api/core/v1.SecretKeySelector
+map[string][]k8s.io/api/core/v1.SecretKeySelector
@@ -20828,14 +21670,15 @@ bool
MSTeamsConfig
+
LightSailSDConfig
_file fields.
@@ -20847,19 +21690,19 @@ It requires Alertmanager >= 0.26.0.
-
-
sendResolved
+region
-bool
+string
(Optional)
-
-
webhookUrl
+accessKey
Kubernetes core/v1.SecretKeySelector
@@ -20867,90 +21710,534 @@ Kubernetes core/v1.SecretKeySelector
-
-
title
+secretKey
-string
+
+Kubernetes core/v1.SecretKeySelector
+
(Optional)
-
-
summary
+roleARN
string
(Optional)
-
-
text
+endpoint
string
(Optional)
-
-
-
-
httpConfig
+refreshInterval
-
-HTTPConfig
+
+Duration
(Optional)
-
MatchType
-(
-string alias)
-
-
-
-
-Value
-Description
+
+
+port
+
+int32
+
+
+
-
-
-
- Matcher
-
-
+
+
+
+basicAuth
+
+
+BasicAuth
+
+
+
+(Optional)
+
+authorization, or oauth2.
+
+
+
+authorization
+
+
+SafeAuthorization
+
+
+
+(Optional)
+
+authorization HTTP header configuration.
+Cannot be set at the same time as basicAuth, or oauth2.
+
+
+
+oauth2
+
+
+OAuth2
+
+
+
+(Optional)
+
+basicAuth, or authorization.
+
+
+
+proxyUrl
+
+string
+
+
+(Optional)
+
+proxyURL defines the HTTP proxy server to use.
+
+
+
+noProxy
+
+string
+
+
+(Optional)
+
+noProxy is a comma-separated string that can contain IPs, CIDR notation, domain names
+that should be excluded from proxying. IP and domain names can
+contain port numbers.
+
+
+
+proxyFromEnvironment
+
+bool
+
+
+(Optional)
+
+
+
+
+
+proxyConnectHeader
+
+
+map[string][]k8s.io/api/core/v1.SecretKeySelector
+
+
+
+(Optional)
+
+
+
+
+
+tlsConfig
+
+
+SafeTLSConfig
+
+
+
+(Optional)
+
+
+
+
+
+followRedirects
+
+bool
+
+
+(Optional)
+
+
+
+
+
+
+enableHTTP2
+
+bool
+
+
+(Optional)
+
+LinodeSDConfig
+
+
+
+
+
+
+
+
+Field
+Description
+
+
+
+
+region
+
+string
+
+
+(Optional)
+
+
+
+
+
+port
+
+int32
+
+
+(Optional)
+
+
+
+
+
+tagSeparator
+
+string
+
+
+(Optional)
+
+
+
+
+
+refreshInterval
+
+
+Duration
+
+
+
+(Optional)
+
+
+
+
+
+authorization
+
+
+SafeAuthorization
+
+
+
+(Optional)
+
+
+
+
+
+oauth2
+
+
+OAuth2
+
+
+
+(Optional)
+
+authorization.
+
+
+
+proxyUrl
+
+string
+
+
+(Optional)
+
+proxyURL defines the HTTP proxy server to use.
+
+
+
+noProxy
+
+string
+
+
+(Optional)
+
+noProxy is a comma-separated string that can contain IPs, CIDR notation, domain names
+that should be excluded from proxying. IP and domain names can
+contain port numbers.
+
+
+
+proxyFromEnvironment
+
+bool
+
+
+(Optional)
+
+
+
+
+
+proxyConnectHeader
+
+
+map[string][]k8s.io/api/core/v1.SecretKeySelector
+
+
+
+(Optional)
+
+
+
+
+
+followRedirects
+
+bool
+
+
+(Optional)
+
+
+
+
+
+tlsConfig
+
+
+SafeTLSConfig
+
+
+
+(Optional)
+
+
+
+
+
+
+enableHTTP2
+
+bool
+
+
+(Optional)
+
+MSTeamsConfig
+
+
+
+
+
+
+
+
+Field
+Description
+
+
+
+
+sendResolved
+
+bool
+
+
+(Optional)
+
+
+
+
+
+webhookUrl
+
+
+Kubernetes core/v1.SecretKeySelector
+
+
+
+
+
+
+
+
+title
+
+string
+
+
+(Optional)
+
+
+
+
+
+summary
+
+string
+
+
+(Optional)
+
+
+
+
+
+text
+
+string
+
+
+(Optional)
+
+
+
+
+
+
+httpConfig
+
+
+HTTPConfig
+
+
+
+(Optional)
+
+MatchType
+(
+string alias)
+
+
+
+
+
+Value
+Description
+
+
+
+
+ Matcher
+
+
+
-
+
+
+Field
-Description
+Field
+Description
+
+
+
+
+name
+
+string
+
+
+
+
+
+
+
+value
+
+string
+
+
+(Optional)
+
+
+
+
+
+matchType
+
+
+MatchType
+
+
+
+(Optional)
+
+
+
+
+
+
+regex
+
+bool
+
+
+(Optional)
+
+matchType should be used instead.Month
+(
+string alias)
+
+
+
+
+
+Value
+Description
+
+
+
+
+
+
+
+
+
+
+
+
+ MonthRange
+(
+string alias)MuteTimeInterval
+
+
+
+
+
+
+
+
+Field
+Description
+
+
+
+
+name
+
+string
+
+
+
+
+
+
+
+
+timeIntervals
+
+
+[]TimeInterval
+
+
+
+
+NamespaceDiscovery
+
+
+
+
+
+
+
+
+Field
+Description
+
+
+
+
+ownNamespace
+
+bool
+
+
+(Optional)
+
+
+
+
+
+
+names
+
+[]string
+
+
+(Optional)
+
+ownNamespace isn’t true, Prometheus watches for resources in all namespaces.NomadSDConfig
+
+
+
+
-
+
+
+
+Field
+Description
+
+
+
+
+allowStale
+
+bool
+
+
+(Optional)
+
+
+
+
+
+namespace
+
+string
+
+
+(Optional)
+
+
+
+
+
+refreshInterval
+
+
+Duration
+
+
+
+(Optional)
+
+
+
+
+
+region
+
+string
+
+
+(Optional)
+
+
+
-
-
+
+server
+
+string
+
+
+
-
name
+tagSeparator
string
-
+
-
+value
+basicAuth
+
+
+BasicAuth
+
+
+
+(Optional)
+
+
+
+
+
+authorization
+
+
+SafeAuthorization
+
+
+
+(Optional)
+
+
+
+
+
+oauth2
+
+
+OAuth2
+
+
+
+(Optional)
+
+authorization or basic_auth.
+
+
+
+tlsConfig
+
+
+SafeTLSConfig
+
+
+
+(Optional)
+
+
+
+
proxyUrl
string
(Optional)
-
proxyURL defines the HTTP proxy server to use.
+
-
+matchType
+noProxy
-
-MatchType
+string
+
+
+(Optional)
+
+noProxy is a comma-separated string that can contain IPs, CIDR notation, domain names
+that should be excluded from proxying. IP and domain names can
+contain port numbers.
+
+
+
+proxyFromEnvironment
+
+bool
+
+
+(Optional)
+
+
+
+
proxyConnectHeader
+
+
+map[string][]k8s.io/api/core/v1.SecretKeySelector
(Optional)
-
-
-
-
regex
+followRedirects
bool
(Optional)
-
matchType should be used instead.Month
-(
-string alias)
-
-
-
-
-Value
-Description
+
+
+enableHTTP2
+
+bool
+
+
+(Optional)
+
-
-
-
-
-
-
-
-
-
-
-
- MonthRange
-(
-string alias)MuteTimeInterval
+
OVHCloudSDConfig
@@ -21082,73 +22683,100 @@ Months can be specified by name (e.g ‘January’) by numerical month (
-
-
name
+applicationKey
string
-
-
-
-
timeIntervals
+applicationSecret
-
-[]TimeInterval
+
+Kubernetes core/v1.SecretKeySelector
-
NamespaceDiscovery
-
-
-
+
-
-
-
Field
-Description
+
+
+consumerKey
+
+
+Kubernetes core/v1.SecretKeySelector
+
+
+
+
+
-
+ownNamespace
+service
-bool
+
+OVHService
+
+
+
+
+VPS or DedicatedServer.
+
+
endpoint
+
+string
(Optional)
-
-
+
+
-
names
+refreshInterval
-[]string
+
+Duration
+
(Optional)
-
ownNamespace isn’t true, Prometheus watches for resources in all namespaces.OVHService
+(
+string alias)VPS or DedicatedServer.
+
+
+
+
+Value
+Description
+
+
+ OpenStackSDConfig
@@ -21898,6 +23526,18 @@ HTTPConfig
+
+
+source
+
+string
+
+
+(Optional)
+
+PagerDutyImageConfig
@@ -22052,6 +23692,20 @@ int
+
+
+mode
+
+string
+
+
+(Optional)
+
+PrometheusAgentDaemonSet feature gate to be enabled.
+
@@ -22142,7 +23796,7 @@ Kubernetes meta/v1.LabelSelector
podMetadata
@@ -22105,7 +23759,7 @@ Kubernetes meta/v1.LabelSelector
@@ -22466,10 +24120,13 @@ For more information see
+[]EnableFeature
+
+(Optional)
+
+
+automountServiceAccountToken
+
+bool
+
+
+(Optional)
+
+
+
secrets
[]string
@@ -22872,10 +24544,11 @@ bool
-
overrideHonorLaels:true enforces honorLabels:false
+for all ServiceMonitor, PodMonitor and ScrapeConfig objects.
@@ -22913,7 +24586,7 @@ string
-
ServiceMonitor, PodMonitor, Probe and ScrapeConfig objects.PrometheusRule objects.spec.excludedFromEnforcement.ServiceMonitor,
-PodMonitor, Probe or PrometheusRule object.PodMonitor, Probe, PrometheusRule or ScrapeConfig object.
@@ -22942,6 +24615,11 @@ unless
spec.sampleLimit is greater than zero and less than
spec.enforcedSampleLimit.
enforcedSampleLimit and sampleLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined sampleLimit value will inherit the global sampleLimit value (Prometheus >= 2.45.0) or the enforcedSampleLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedSampleLimit is greater than the sampleLimit, the sampleLimit will be set to enforcedSampleLimit.
+* Scrape objects with a sampleLimit value less than or equal to enforcedSampleLimit keep their specific value.
+* Scrape objects with a sampleLimit value greater than enforcedSampleLimit are set to enforcedSampleLimit.
@@ -22959,6 +24637,11 @@ ServiceMonitor, PodMonitor, Probe objects unless
spec.targetLimit i
greater than zero and less than spec.enforcedTargetLimit.
enforcedTargetLimit and targetLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined targetLimit value will inherit the global targetLimit value (Prometheus >= 2.45.0) or the enforcedTargetLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedTargetLimit is greater than the targetLimit, the targetLimit will be set to enforcedTargetLimit.
+* Scrape objects with a targetLimit value less than or equal to enforcedTargetLimit keep their specific value.
+* Scrape objects with a targetLimit value greater than enforcedTargetLimit are set to enforcedTargetLimit.
@@ -22975,6 +24658,11 @@ of labels per sample. The value overrides any
spec.labelLimit set b
ServiceMonitor, PodMonitor, Probe objects unless spec.labelLimit is
greater than zero and less than spec.enforcedLabelLimit.
enforcedLabelLimit and labelLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined labelLimit value will inherit the global labelLimit value (Prometheus >= 2.45.0) or the enforcedLabelLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedLabelLimit is greater than the labelLimit, the labelLimit will be set to enforcedLabelLimit.
+* Scrape objects with a labelLimit value less than or equal to enforcedLabelLimit keep their specific value.
+* Scrape objects with a labelLimit value greater than enforcedLabelLimit are set to enforcedLabelLimit.
@@ -22991,6 +24679,11 @@ of labels name per sample. The value overrides any
spec.labelNameLengthLim
ServiceMonitor, PodMonitor, Probe objects unless spec.labelNameLengthLimit is
greater than zero and less than spec.enforcedLabelNameLengthLimit.
enforcedLabelNameLengthLimit and labelNameLengthLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined labelNameLengthLimit value will inherit the global labelNameLengthLimit value (Prometheus >= 2.45.0) or the enforcedLabelNameLengthLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedLabelNameLengthLimit is greater than the labelNameLengthLimit, the labelNameLengthLimit will be set to enforcedLabelNameLengthLimit.
+* Scrape objects with a labelNameLengthLimit value less than or equal to enforcedLabelNameLengthLimit keep their specific value.
+* Scrape objects with a labelNameLengthLimit value greater than enforcedLabelNameLengthLimit are set to enforcedLabelNameLengthLimit.
@@ -23007,6 +24700,11 @@ of labels value per sample. The value overrides any
spec.labelValueLengthL
ServiceMonitor, PodMonitor, Probe objects unless spec.labelValueLengthLimit is
greater than zero and less than spec.enforcedLabelValueLengthLimit.
enforcedLabelValueLengthLimit and labelValueLengthLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined labelValueLengthLimit value will inherit the global labelValueLengthLimit value (Prometheus >= 2.45.0) or the enforcedLabelValueLengthLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedLabelValueLengthLimit is greater than the labelValueLengthLimit, the labelValueLengthLimit will be set to enforcedLabelValueLengthLimit.
+* Scrape objects with a labelValueLengthLimit value less than or equal to enforcedLabelValueLengthLimit keep their specific value.
+* Scrape objects with a labelValueLengthLimit value greater than enforcedLabelValueLengthLimit are set to enforcedLabelValueLengthLimit.
@@ -23024,6 +24722,11 @@ any
spec.keepDroppedTargets set by
ServiceMonitor, PodMonitor, Probe objects unless spec.keepDroppedTargets is
greater than zero and less than spec.enforcedKeepDroppedTargets.
enforcedKeepDroppedTargets and keepDroppedTargets are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined keepDroppedTargets value will inherit the global keepDroppedTargets value (Prometheus >= 2.45.0) or the enforcedKeepDroppedTargets value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedKeepDroppedTargets is greater than the keepDroppedTargets, the keepDroppedTargets will be set to enforcedKeepDroppedTargets.
+* Scrape objects with a keepDroppedTargets value less than or equal to enforcedKeepDroppedTargets keep their specific value.
+* Scrape objects with a keepDroppedTargets value greater than enforcedKeepDroppedTargets are set to enforcedKeepDroppedTargets.
@@ -23041,6 +24744,11 @@ of uncompressed response body that will be accepted by Prometheus.
Targets responding with a body larger than this many bytes will cause
the scrape to fail.
enforcedBodySizeLimit and bodySizeLimit are defined and greater than zero, the following rules apply:
+* Scrape objects without a defined bodySizeLimit value will inherit the global bodySizeLimit value (Prometheus >= 2.45.0) or the enforcedBodySizeLimit value (Prometheus < v2.45.0).
+If Prometheus version is >= 2.45.0 and the enforcedBodySizeLimit is greater than the bodySizeLimit, the bodySizeLimit will be set to enforcedBodySizeLimit.
+* Scrape objects with a bodySizeLimit value less than or equal to enforcedBodySizeLimit keep their specific value.
+* Scrape objects with a bodySizeLimit value greater than enforcedBodySizeLimit are set to enforcedBodySizeLimit.
@@ -23097,214 +24805,450 @@ fail and an error will be logged.
+
-
+walCompression
+walCompression
+
+bool
+
+
+(Optional)
+
+
+
+
+
+excludedFromEnforcement
+
+
+[]ObjectReference
+
+
+
+(Optional)
+
+spec.enforcedNamespaceLabel set to true.
+
+
+
+hostNetwork
+
+bool
+
+
+
+ClusterFirstWithHostNet automatically.
+
+
+
+podTargetLabels
+
+[]string
+
+
+(Optional)
+
+spec.podTargetLabels field of all
+PodMonitor and ServiceMonitor objects.
+
+
+
+tracingConfig
+
+
+PrometheusTracingConfig
+
+
+
+(Optional)
+
+
+
+
+
+bodySizeLimit
+
+
+ByteSize
+
+
+
+(Optional)
+
+
+
+
+
+sampleLimit
+
+uint64
+
+
+(Optional)
+
+
+
+
+
+targetLimit
+
+uint64
+
+
+(Optional)
+
+
+
+
+
+labelLimit
+
+uint64
+
+
+(Optional)
+
+
+
+
+
+labelNameLengthLimit
+
+uint64
+
+
+(Optional)
+
+
+
+
+
+labelValueLengthLimit
+
+uint64
+
+
+(Optional)
+
+
+
+
+
+keepDroppedTargets
+
+uint64
+
+
+(Optional)
+
+
+
+
+
+reloadStrategy
+
+
+ReloadStrategyType
+
+
+
+(Optional)
+
+
+
+
+
+maximumStartupDurationSeconds
+
+int32
+
+
+(Optional)
+
+prometheus container’s startup probe will wait before being considered failed. The startup probe will return success after the WAL replay is complete.
+If set, the value should be greater than 60 (seconds). Otherwise it will be equal to 600 seconds (15 minutes).
+
+
+
+
+
+scrapeClasses
+
+
+[]ScrapeClass
+
+
+
+
+PuppetDBSDConfig
+
+
+
+
+
+
+
+Field
+Description
+
+
+
url
-bool
+string
-(Optional)
-
-
excludedFromEnforcement
+query
-
-[]ObjectReference
-
+string
-(Optional)
-
spec.enforcedNamespaceLabel set to true.
-
hostNetwork
+includeParameters
bool
-
ClusterFirstWithHostNet automatically.
-
podTargetLabels
+refreshInterval
-[]string
+
+Duration
+
(Optional)
-
spec.podTargetLabels field of all
-PodMonitor and ServiceMonitor objects.
-
tracingConfig
+port
-
-PrometheusTracingConfig
-
+int32
-(Optional)
-
-
bodySizeLimit
+basicAuth
-
-ByteSize
+
+BasicAuth
(Optional)
-
authorization, or oauth2.
-
sampleLimit
+authorization
-uint64
+
+SafeAuthorization
+
(Optional)
-
authorization HTTP header configuration.
+Cannot be set at the same time as basicAuth, or oauth2.
-
targetLimit
+oauth2
-uint64
+
+OAuth2
+
(Optional)
-
basicAuth, or authorization.
-
labelLimit
+proxyUrl
-uint64
+string
(Optional)
-
proxyURL defines the HTTP proxy server to use.
-
labelNameLengthLimit
+noProxy
-uint64
+string
(Optional)
-
noProxy is a comma-separated string that can contain IPs, CIDR notation, domain names
+that should be excluded from proxying. IP and domain names can
+contain port numbers.
-
labelValueLengthLimit
+proxyFromEnvironment
-uint64
+bool
(Optional)
-
-
keepDroppedTargets
+proxyConnectHeader
-uint64
+
+map[string][]k8s.io/api/core/v1.SecretKeySelector
+
(Optional)
-
-
reloadStrategy
+tlsConfig
-
-ReloadStrategyType
+
+SafeTLSConfig
(Optional)
-
-
maximumStartupDurationSeconds
+followRedirects
-int32
+bool
(Optional)
-
prometheus container’s startup probe will wait before being considered failed. The startup probe will return success after the WAL replay is complete.
-If set, the value should be greater than 60 (seconds). Otherwise it will be equal to 600 seconds (15 minutes).
@@ -23450,6 +25394,20 @@ string
-
scrapeClasses
+enableHTTP2
-
-[]ScrapeClass
-
+bool
-
+
+
+ttl
+
+
+Duration
+
+
+
+(Optional)
+
+
+
device
string
@@ -24081,6 +26039,21 @@ HTTPConfig
+
+
+jobName
+
+string
+
+
+(Optional)
+
+job label assigned to the scraped metrics by default.job_name field in the rendered scrape configuration is always controlled by the
+operator to prevent duplicate job names, which Prometheus does not allow. Instead the
+job label is set by means of relabeling configs.
+
staticConfigs
@@ -24277,6 +26250,20 @@ HTTPConfig
+
+
+linodeSDConfigs
+
+
+[]LinodeSDConfig
+
+
+
+(Optional)
+
+
+
hetznerSDConfigs
@@ -24291,6 +26278,76 @@ HTTPConfig
+
+
+NomadSDConfigs
+
+
+[]NomadSDConfig
+
+
+
+(Optional)
+
+
+
+
+
+dockerSwarmSDConfigs
+
+
+[]DockerSwarmSDConfig
+
+
+
+(Optional)
+
+
+
+
+
+puppetDBSDConfigs
+
+
+[]PuppetDBSDConfig
+
+
+
+(Optional)
+
+
+
+
+
+lightSailSDConfigs
+
+
+[]LightSailSDConfig
+
+
+
+(Optional)
+
+
+
+
+
+ovhcloudSDConfigs
+
+
+[]OVHCloudSDConfig
+
+
+
+(Optional)
+
+
+
+
@@ -27439,6 +29496,18 @@ HTTPConfig
relabelings
@@ -24621,7 +26678,7 @@ If unset, Prometheus uses its default value.
proxyConnectHeader
-map[string]k8s.io/api/core/v1.SecretKeySelector
+map[string][]k8s.io/api/core/v1.SecretKeySelector
+
+
+source
+
+string
+
+
+(Optional)
+
+PagerDutyImageConfig
@@ -27715,6 +29784,20 @@ string
+
+
+ttl
+
+
+Duration
+
+
+
+(Optional)
+
+
+
device
string
diff --git a/Documentation/compatibility.md b/Documentation/compatibility.md
index 95b7675fd05..b69e8d2ff1a 100644
--- a/Documentation/compatibility.md
+++ b/Documentation/compatibility.md
@@ -22,7 +22,7 @@ The Prometheus Operator uses the official [Go client](https://github.com/kuberne
The current version of the Prometheus operator uses the following Go client version:
```$ mdox-exec="go list -m -f '{{ .Version }}' k8s.io/client-go"
-v0.29.3
+v0.30.2
```
## Prometheus
@@ -69,12 +69,15 @@ Prometheus Operator supports all Prometheus versions >= v2.0.0. The operator's e
* v2.50.1
* v2.51.0
* v2.51.1
+* v2.51.2
+* v2.52.0
+* v2.53.0
```
The end-to-end tests are mostly tested against
```$ mdox-exec="go run ./cmd/po-docgen/. compatibility defaultPrometheusVersion"
-* v2.51.1
+* v2.53.0
```
## Alertmanager
@@ -94,5 +97,5 @@ The Prometheus Operator is compatible with Thanos v0.10 and above.
The end-to-end tests are mostly tested against
```$ mdox-exec="go run ./cmd/po-docgen/. compatibility defaultThanosVersion"
-* v0.34.1
+* v0.35.1
```
diff --git a/Documentation/operator.md b/Documentation/operator.md
index 70c4d92de21..96bae3e0d0d 100644
--- a/Documentation/operator.md
+++ b/Documentation/operator.md
@@ -29,6 +29,8 @@ Usage of ./operator:
API Server addr, e.g. ' - NOT RECOMMENDED FOR PRODUCTION - http://127.0.0.1:8080'. Omit parameter to run in on-cluster mode and utilize the service account token.
-as string
Username to impersonate. User could be a regular user or a service account in a namespace.
+ -auto-gomemlimit-ratio float
+ The ratio of reserved GOMEMLIMIT memory to the detected maximum container or system memory. The value should be greater than 0.0 and less than 1.0. Default: 0.0 (disabled).
-ca-file string
- NOT RECOMMENDED FOR PRODUCTION - Path to TLS CA file.
-cert-file string
@@ -49,6 +51,10 @@ Usage of ./operator:
Namespaces not to scope the interaction of the Prometheus Operator (deny list). This is mutually exclusive with --namespaces.
-enable-config-reloader-probes
Enable liveness and readiness for the config-reloader container. Default: false
+ -feature-gates value
+ Feature gates are a set of key=value pairs that describe Prometheus-Operator features.
+ Available feature gates:
+ PrometheusAgentDaemonSet: Enables the DaemonSet mode for PrometheusAgent (enabled: false)
-key-file string
- NOT RECOMMENDED FOR PRODUCTION - Path to private TLS certificate file.
-kubelet-node-address-priority value
@@ -68,7 +74,7 @@ Usage of ./operator:
-namespaces value
Namespaces to scope the interaction of the Prometheus Operator and the apiserver (allow list). This is mutually exclusive with --deny-namespaces.
-prometheus-config-reloader string
- Prometheus config reloader image (default "quay.io/prometheus-operator/prometheus-config-reloader:v0.73.2")
+ Prometheus config reloader image (default "quay.io/prometheus-operator/prometheus-config-reloader:v0.75.2")
-prometheus-default-base-image string
Prometheus default base image (path without tag/version) (default "quay.io/prometheus/prometheus")
-prometheus-instance-namespaces value
diff --git a/Documentation/proposals/202405-agent-daemonset.md b/Documentation/proposals/202405-agent-daemonset.md
new file mode 100644
index 00000000000..08c40222831
--- /dev/null
+++ b/Documentation/proposals/202405-agent-daemonset.md
@@ -0,0 +1,123 @@
+# DaemonSet deployment for Prometheus Agent
+
+* Owners:
+ * [haanhvu](https://github.com/haanhvu)
+* Related Tickets:
+ * [#5495](https://github.com/prometheus-operator/prometheus-operator/issues/5495)
+* Other docs:
+ * n/a
+
+This proposal is about designing and implementing the deployment of Prometheus Agent as DaemonSet. Currently, Prometheus Agent can only be deployed as StatefulSet, which could be considered as “cluster-wide” strategy, meaning one or several high-availability Prometheus Agents are responsible for scraping metrics of the whole cluster. Though this works well for many use cases, some use cases may indeed prefer a “node-specific” strategy (DaemonSet), where Prometheus Agent pods scale with the nodes and only scrape the metrics from the targets located on the same node.
+
+## 1. Why
+
+When deploying Prometheus Agent in Kubernetes, two of the biggest users’ concerns are load distribution and scalability.
+
+DaemonSet deployment is a good solution for these:
+* Load distribution: Each Prometheus Agent pod will only scrape the targets located on the same node. Even though the targets on some nodes may produce more metrics than other nodes, the load distribution is reliable enough. This has been proven in [Google Cloud Managed Service for Prometheus (GMP)'s operator](https://github.com/GoogleCloudPlatform/prometheus-engine/) which follows a similar approach.
+* Automatic scalability: When new nodes are added to the cluster, new Prometheus Agent pods will be automatically deployed to those nodes. Similarly, at some durations when some nodes are not needed and removed from the cluster, Prometheus Agent pods on those nodes will also be removed. Users can also select which set of nodes they want to deploy Prometheus Agent and the priority of Prometheus Agent pods compared to other pods on the same node.
+
+DaemonSet deployment is especially more suitable for Prometheus Agent than Prometheus because the Agent mode is customized for collect-and-forward approach, so it's more lightweight. In specific, it requires (currently around 20 to 30%) less memory, does not produce TSDB blocks on disks, and naturally blocks querying APIs and rule distribution.
+
+This deployment mode has been implemented and proven in the Google Cloud Kubernetes Engine (GKE) with [Google Cloud Managed Service for Prometheus (GMP)'s operator](https://github.com/GoogleCloudPlatform/prometheus-engine/), so we can learn from their cases and collaborate for shared improvements.
+
+## 2. Pitfalls of the current solution
+
+The key pitfalls of managing load distribution and scalability with the current StatefulSet deployment are:
+* They are done on the cluster scope. In other words, since one or several high-availability Prometheus Agents are responsible for scraping metrics of the whole cluster, users need to calculate/estimate the load and scalability of the whole cluster to decide on replicas and sharding strategies. Estimating cluster-wide load and scalability is a much harder task than estimating node-wide load and scalability.
+* StatefulSet inherently doesn't scale alongside the scale of nodes. So there may be situations where more or less existing Prometheus Agent pods are needed for the scraped load. Even though users can use helping tools like Horizontal Pod Autoscaler (HPA), that's still additional complexity.
+
+This is not to say that DaemonSet is superior to StatefulSet. StatefulSet also has its own advantages, such as easier storage handling. This is to say that DaemonSet can solve some of the existing problems in StatefulSet, and vice versa. So DaemonSet is a good deployment option to implement besides StatefulSet. Users can choose to use one or both of them, depending on their cases.
+
+## 3. Audience
+
+Users with use cases where scraped load is very large or hard to estimate and/or scalability is hard to predict, so they need a simple way to manage load distribution and scalability. They may apply DaemonSet deployment on the whole cluster or only some nodes according to their needs.
+
+An example of audience is expressed [here](https://github.com/prometheus-operator/prometheus-operator/issues/5495#issuecomment-1519812510).
+
+## 4. Goals
+
+Provide an MVP version of the DaemonSet deployment of Prometheus Agent to the Audience.
+In specific, the MVP will need to:
+* Allow users to deploy one Prometheus Agent pod per node.
+* Allow users to restrict which set of nodes they want to deploy Prometheus Agent, if desired.
+* Allow users to set the priority of Prometheus Agent pod compared to other pods on the same node, if desired.
+* Allow each Prometheus Agent pod to only scrape from the pods from PodMonitor that run on the same node.
+
+## 5. Non-Goals
+
+This proposal only aims at Prometheus Agent, not Prometheus.
+
+Other non-goals are the features that are not easy to implement and require more investigation. We will need to investigate whether there are actual user needs for them, if yes, then how to best implement them. We can also learn from similar projects such as OpenTelemetry Operator (they have DaemonSet mode) and Grafana Agent on how they approach these problems and what we can apply for our cases. We’ll handle these after the MVP. Those (currently) non-goals features are:
+* ServiceMonitor support: There's a performance issue regarding this feature. Since each Prometheus Agent running on a node requires one watch, making all Prometheus Agent pods watch all endpoints will put a huge stress on Kubernetes API server. This is the main reason why GMP hasn’t supported this, even though there are user needs stated in some issues ([#362](https://github.com/GoogleCloudPlatform/prometheus-engine/issues/362), [#192](https://github.com/GoogleCloudPlatform/prometheus-engine/issues/192)). However, as discussed with Danny from GMP [here](https://github.com/GoogleCloudPlatform/prometheus-engine/issues/192#issuecomment-2028850846), ServiceMonitor support based on EndpointSlice seems like a viable approach. We’ll investigate this further after the MVP.
+* Storage: We will need to spend time studying more about the WAL, different storage solutions provided by Kubernetes, and how to gracefully handle storage in different cases of crashes. For example, there’s an [issue in Prometheus](https://github.com/prometheus/prometheus/issues/8809) showing that samples may be lost if remote write didn’t flush cleanly. We’ll investigate these further after the MVP.
+
+In the MVP version, we will not allow users to directly switch from a live StatefulSet to DaemonSet deployment. Reasons are explained in the CRD subsection in the How section.
+
+## 6. How
+
+The MVP version of DaemonSet deployment will be put behind a feature flag.
+
+### 6.1. CRD:
+
+Currently, we already have a PrometheusAgent CRD that supports StatefulSet deployment. We’ll add new field(s) in this CRD to enable DaemonSet deployment.
+
+The reason for enhancing existing CRD (instead of introducing a new CRD) is it would take less time to finish the MVP. We’ll let users experiment with the MVP, and in case users report a separate CRD is needed, we’ll separate the logic of DaemonSet deployment into a new CRD later.
+
+The current [PrometheusAgent CRD](https://prometheus-operator.dev/docs/operator/api/#monitoring.coreos.com/v1alpha1.PrometheusAgent) already has sufficient fields for the DaemonSet deployment. The DaemonSet deployment can use all the existing fields in the CRD except the ones related to:
+* Selectors for service, probe, ScrapeConfig
+* Replica
+* Shard
+* Storage
+
+We will add a new `mode` field that accepts either `StatefulSet` or `DaemonSet`, with `StatefulSet` being the default. If the DaemonSet mode is activated (`mode: DaemonSet`), all the unrelated fields listed above will not be accepted. In the MVP, we will simply fail the reconciliation if any of those fields are set. We will prevent users to directly switch from a live StatefulSet setup to DaemonSet, because that might break their workload if they forget to unset the unsupported fields. Following up, we will leverage validation rules with [Kubernetes' Common Expression Language (CEL)](https://kubernetes.io/docs/reference/using-api/cel/). Only then, we will allow switching from a live StatefulSet setup to DaemonSet. We already have an issue for CEL [here](https://github.com/prometheus-operator/prometheus-operator/issues/5079).
+
+### 6.2. Node detecting:
+
+As pointed out in [Danny from GMP’s talk](https://www.youtube.com/watch?v=yk2aaAyxgKw), to make Prometheus Agent DaemonSet know which node it’s on, we can use [Kubernetes’ downward API](https://kubernetes.io/docs/tasks/inject-data-application/environment-variable-expose-pod-information/). In `config-reloader` container, we can mount the node name as an environment variable like this:
+
+```
+containers:
+- name: config-reloader
+ env:
+ - name: NODE_NAME
+ valueFrom:
+ fieldRef:
+ apiVersion: v1
+ fieldPath: spec.nodeName
+```
+
+### 6.3. Targets filtering for pods (PodMonitor support):
+
+To filter pod targets, Danny’s talk has pointed out the best option is to use field selector:
+
+```
+kubernetes_sd_configs:
+- role: pod
+ selectors:
+ - role: pod
+ field: spec.nodeName=$NODE_NAME
+```
+
+We'll go with this option, because it filters targets right at discovery time, and also because Kubernetes API server watch cache indexes pods by node name (as we can see in [Kubernetes codebase](https://github.com/kubernetes/kubernetes/blob/v1.30.0-rc.0/pkg/registry/core/pod/storage/storage.go#L91)).
+
+We've also considered using relabel config that filters pods by `__meta_kubernetes_pod_node_name` label. However, we didn't choose to go with this option because it filters pods only after discovering all the pods from PodMonitor, which increases load on Kubernetes API server.
+
+## 7. Action Plan
+
+For the implementation, we’ll do what we detailed in the How section. The common logics between StatefulSet and DaemonSet modes will be extracted into one place. We will have a separate `daemonset.go` for the separate logic of the DaemonSet mode.
+
+For the test, we will have unit tests covering new logic, and integration tests covering the basic user cases, which are:
+* Users cannot switch directly from StatefulSet to DaemonSet.
+* Prometheus Agent DaemonSet is created/deleted successfully.
+* Prometheus Agent DaemonSet is installed on the right nodes.
+* Prometheus Agent DaemonSet selects correctly the pods from PodMonitor on the same node.
+ Currently we only set up a Kind cluster of one node for integration tests. Since the test cases for DaemonSet deployment requires at least two nodes, we will need to modify the Kind cluster config for that.
+
+We’ll also need a new user guide explaining how to use this new mode.
+
+## 8. Follow-ups
+
+After the Goals of this proposal have been met, we’ll reevaluate the features in the Non-goals section and see if any of them should/can be addressed.
+
+We will also work on enhancements, such as leveraging validation rules with [Kubernetes' Common Expression Language (CEL)](https://kubernetes.io/docs/reference/using-api/cel/) for the fields in Prometheus Agent CRD for DaemonSet mode.
diff --git a/Documentation/rbac.md b/Documentation/rbac.md
index 039980bba60..542ce27b11c 100644
--- a/Documentation/rbac.md
+++ b/Documentation/rbac.md
@@ -26,7 +26,7 @@ metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/name: prometheus-operator
- app.kubernetes.io/version: 0.73.2
+ app.kubernetes.io/version: 0.75.1
name: prometheus-operator
rules:
- apiGroups:
@@ -194,7 +194,7 @@ metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/name: prometheus-operator
- app.kubernetes.io/version: 0.73.2
+ app.kubernetes.io/version: 0.75.1
name: prometheus-operator
namespace: default
```
@@ -210,7 +210,7 @@ metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/name: prometheus-operator
- app.kubernetes.io/version: 0.73.2
+ app.kubernetes.io/version: 0.75.1
name: prometheus-operator
roleRef:
apiGroup: rbac.authorization.k8s.io
diff --git a/Documentation/troubleshooting.md b/Documentation/troubleshooting.md
index a146791d75f..bd8b8e77c14 100644
--- a/Documentation/troubleshooting.md
+++ b/Documentation/troubleshooting.md
@@ -141,7 +141,7 @@ spec:
port: 8080
```
-We would then define the service monitor using `metrics` as the port not `"8080"`. E.g.
+We would then define the service monitor using `web` as the port, not `"8080"`. E.g.
**CORRECT**
diff --git a/Documentation/user-guides/linting.md b/Documentation/user-guides/linting.md
deleted file mode 100644
index 9940b1215a8..00000000000
--- a/Documentation/user-guides/linting.md
+++ /dev/null
@@ -1,46 +0,0 @@
-# Linting
-
-This document describes how to use the standalone linting tool to validate your Prometheus Operator [CRD-based](../design.md) configuration files.
-
-## Getting linter
-
-To use the linter either get it with `go get -u github.com/prometheus-operator/prometheus-operator/cmd/po-lint` and executable is `$GOPATH/bin/po-lint`, or use the container image from `quay.io/coreos/po-tooling` and executable is `/go/bin/po-lint`.
-
-## Using linter
-
-The `po-lint` executable takes a list of yaml files to check as command arguments. It will output any errors to stderr and returns with exit code `1` on errors, `0` otherwise.
-
-## Example
-
-Here is an example script to lint a `src` sub-directory full of Prometheus Operator CRD files with ether local `po-lint` or Dockerized version:
-
-```sh
-#!/bin/sh
-
-LINTER="quay.io/coreos/po-tooling"
-
-lint_files() {
- if [ -x "$(command -v po-lint)" ]; then
- echo "Linting '${2}' files in directory '${1}'..."
- had_errors=0
- for file in $(find "${1}" -name "${2}"); do
- echo "${file}"
- po-lint "${file}"
- retval=$?
- if [ $retval -ne 0 ]; then
- had_errors=1
- fi
- done
- exit ${had_errors}
- elif [ -x "$(command -v docker)" ]; then
- echo "Using Dockerized linter."
- docker run --rm --volume "$PWD:/data:ro" --workdir /data ${LINTER} \
- /bin/bash -c "/go/bin/po-lint $1/$2"
- else
- echo "Linter executable not found."
- exit 1
- fi
-}
-
-lint_files "./src" "*.yaml"
-```
diff --git a/Documentation/user-guides/prometheus-agent.md b/Documentation/user-guides/prometheus-agent.md
index 72af64084c2..c5b15ab007c 100644
--- a/Documentation/user-guides/prometheus-agent.md
+++ b/Documentation/user-guides/prometheus-agent.md
@@ -26,7 +26,7 @@ metadata:
labels:
app.kubernetes.io/component: controller
app.kubernetes.io/name: prometheus-operator
- app.kubernetes.io/version: 0.73.2
+ app.kubernetes.io/version: 0.75.1
name: prometheus-operator
rules:
- apiGroups:
diff --git a/Documentation/user-guides/webhook.md b/Documentation/user-guides/webhook.md
index 81ed612db93..df9c0b4ef92 100644
--- a/Documentation/user-guides/webhook.md
+++ b/Documentation/user-guides/webhook.md
@@ -86,7 +86,7 @@ kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/name: prometheus-operator-admission-webhook
- app.kubernetes.io/version: 0.73.2
+ app.kubernetes.io/version: 0.75.1
name: prometheus-operator-admission-webhook
namespace: default
```
@@ -97,7 +97,7 @@ kind: Deployment
metadata:
labels:
app.kubernetes.io/name: prometheus-operator-admission-webhook
- app.kubernetes.io/version: 0.73.2
+ app.kubernetes.io/version: 0.75.1
name: prometheus-operator-admission-webhook
namespace: default
spec:
@@ -114,7 +114,7 @@ spec:
kubectl.kubernetes.io/default-container: prometheus-operator-admission-webhook
labels:
app.kubernetes.io/name: prometheus-operator-admission-webhook
- app.kubernetes.io/version: 0.73.2
+ app.kubernetes.io/version: 0.75.1
spec:
affinity:
podAntiAffinity:
@@ -131,7 +131,7 @@ spec:
- --web.enable-tls=true
- --web.cert-file=/etc/tls/private/tls.crt
- --web.key-file=/etc/tls/private/tls.key
- image: quay.io/prometheus-operator/admission-webhook:v0.73.2
+ image: quay.io/prometheus-operator/admission-webhook:v0.75.1
name: prometheus-operator-admission-webhook
ports:
- containerPort: 8443
@@ -179,7 +179,7 @@ kind: Service
metadata:
labels:
app.kubernetes.io/name: prometheus-operator-admission-webhook
- app.kubernetes.io/version: 0.73.2
+ app.kubernetes.io/version: 0.75.1
name: prometheus-operator-admission-webhook
namespace: default
spec:
diff --git a/Makefile b/Makefile
index 1574484d5f1..591b6bc3820 100644
--- a/Makefile
+++ b/Makefile
@@ -17,6 +17,8 @@ IMAGE_WEBHOOK?=quay.io/prometheus-operator/admission-webhook
TAG?=$(shell git rev-parse --short HEAD)
VERSION?=$(shell cat VERSION | tr -d " \t\n\r")
+KIND_CONTEXT ?= e2e
+
TYPES_V1_TARGET := pkg/apis/monitoring/v1/types.go
TYPES_V1_TARGET += pkg/apis/monitoring/v1/alertmanager_types.go
TYPES_V1_TARGET += pkg/apis/monitoring/v1/podmonitor_types.go
@@ -102,7 +104,7 @@ clean:
############
.PHONY: build
-build: operator prometheus-config-reloader admission-webhook k8s-gen po-lint
+build: operator prometheus-config-reloader admission-webhook k8s-gen
.PHONY: operator
operator:
@@ -116,9 +118,6 @@ prometheus-config-reloader:
admission-webhook:
$(GO_BUILD_RECIPE) -o $@ cmd/$@/main.go
-.PHONY: po-lint
-po-lint:
- $(GO_BUILD_RECIPE) -o po-lint cmd/po-lint/main.go
DEEPCOPY_TARGETS := pkg/apis/monitoring/v1/zz_generated.deepcopy.go pkg/apis/monitoring/v1alpha1/zz_generated.deepcopy.go pkg/apis/monitoring/v1beta1/zz_generated.deepcopy.go
$(DEEPCOPY_TARGETS): $(CONTROLLER_GEN_BINARY)
@@ -132,38 +131,41 @@ $(DEEPCOPY_TARGETS): $(CONTROLLER_GEN_BINARY)
.PHONY: k8s-client-gen
k8s-client-gen: $(K8S_GEN_DEPS)
rm -rf pkg/client/{versioned,informers,listers,applyconfiguration}
+
@echo ">> generating pkg/client/applyconfiguration..."
$(APPLYCONFIGURATION_GEN_BINARY) \
$(K8S_GEN_ARGS) \
- --input-dirs "$(GO_PKG)/pkg/apis/monitoring/v1,$(GO_PKG)/pkg/apis/monitoring/v1alpha1,$(GO_PKG)/pkg/apis/monitoring/v1beta1" \
- --output-package "$(GO_PKG)/pkg/client/applyconfiguration" \
- --output-base "."
- mv $(GO_PKG)/pkg/client/applyconfiguration pkg/client
+ --output-pkg "$(GO_PKG)/pkg/client/applyconfiguration" \
+ --output-dir "pkg/client/applyconfiguration" \
+ "$(GO_PKG)/pkg/apis/monitoring/v1" "$(GO_PKG)/pkg/apis/monitoring/v1alpha1" "$(GO_PKG)/pkg/apis/monitoring/v1beta1"
+
@echo ">> generating pkg/client/versioned..."
$(CLIENT_GEN_BINARY) \
$(K8S_GEN_ARGS) \
- --input-base "" \
--apply-configuration-package "$(GO_PKG)/pkg/client/applyconfiguration" \
+ --input-base "$(GO_PKG)/pkg/apis" \
--clientset-name "versioned" \
- --input "$(GO_PKG)/pkg/apis/monitoring/v1,$(GO_PKG)/pkg/apis/monitoring/v1alpha1,$(GO_PKG)/pkg/apis/monitoring/v1beta1" \
- --output-package "$(GO_PKG)/pkg/client" \
- --output-base "."
+ --output-pkg "$(GO_PKG)/pkg/client" \
+ --output-dir "pkg/client" \
+ --input monitoring/v1 \
+ --input monitoring/v1beta1 \
+ --input monitoring/v1alpha1
+
@echo ">> generating pkg/client/listers..."
$(LISTER_GEN_BINARY) \
$(K8S_GEN_ARGS) \
- --input-dirs "$(GO_PKG)/pkg/apis/monitoring/v1,$(GO_PKG)/pkg/apis/monitoring/v1alpha1,$(GO_PKG)/pkg/apis/monitoring/v1beta1" \
- --output-package "$(GO_PKG)/pkg/client/listers" \
- --output-base "."
+ --output-pkg "$(GO_PKG)/pkg/client/listers" \
+ --output-dir "pkg/client/listers" \
+ "$(GO_PKG)/pkg/apis/monitoring/v1" "$(GO_PKG)/pkg/apis/monitoring/v1alpha1" "$(GO_PKG)/pkg/apis/monitoring/v1beta1"
+
@echo ">> generating pkg/client/informers..."
$(INFORMER_GEN_BINARY) \
$(K8S_GEN_ARGS) \
--versioned-clientset-package "$(GO_PKG)/pkg/client/versioned" \
- --listers-package "$(GO_PKG)/pkg/client/listers" \
- --input-dirs "$(GO_PKG)/pkg/apis/monitoring/v1,$(GO_PKG)/pkg/apis/monitoring/v1alpha1,$(GO_PKG)/pkg/apis/monitoring/v1beta1" \
- --output-package "$(GO_PKG)/pkg/client/informers" \
- --output-base "."
- mv $(GO_PKG)/pkg/client/{versioned,informers,listers} pkg/client
- rm -r github.com
+ --listers-package "$(GO_PKG)/pkg/client/listers" \
+ --output-pkg "$(GO_PKG)/pkg/client/informers" \
+ --output-dir "pkg/client/informers" \
+ "$(GO_PKG)/pkg/apis/monitoring/v1" "$(GO_PKG)/pkg/apis/monitoring/v1alpha1" "$(GO_PKG)/pkg/apis/monitoring/v1beta1"
.PHONY: k8s-gen
k8s-gen: $(DEEPCOPY_TARGETS) k8s-client-gen
@@ -364,27 +366,42 @@ test-e2e: test/instrumented-sample-app/certs/cert.pem test/instrumented-sample-a
.PHONY: test-e2e-alertmanager
test-e2e-alertmanager:
- EXCLUDE_PROMETHEUS_TESTS=exclude EXCLUDE_PROMETHEUS_ALL_NS_TESTS=exclude EXCLUDE_THANOSRULER_TESTS=exclude EXCLUDE_OPERATOR_UPGRADE_TESTS=exclude FEATURE_GATED_TESTS=exclude EXCLUDE_PROMETHEUS_UPGRADE_TESTS=exclude $(MAKE) test-e2e
+ EXCLUDE_PROMETHEUS_TESTS=exclude EXCLUDE_PROMETHEUS_ALL_NS_TESTS=exclude EXCLUDE_THANOSRULER_TESTS=exclude EXCLUDE_OPERATOR_UPGRADE_TESTS=exclude EXCLUDE_FEATURE_GATED_TESTS=exclude EXCLUDE_PROMETHEUS_UPGRADE_TESTS=exclude $(MAKE) test-e2e
.PHONY: test-e2e-prometheus
test-e2e-prometheus:
- EXCLUDE_ALERTMANAGER_TESTS=exclude EXCLUDE_PROMETHEUS_ALL_NS_TESTS=exclude EXCLUDE_THANOSRULER_TESTS=exclude EXCLUDE_OPERATOR_UPGRADE_TESTS=exclude FEATURE_GATED_TESTS=exclude EXCLUDE_PROMETHEUS_UPGRADE_TESTS=exclude $(MAKE) test-e2e
+ EXCLUDE_ALERTMANAGER_TESTS=exclude EXCLUDE_PROMETHEUS_ALL_NS_TESTS=exclude EXCLUDE_THANOSRULER_TESTS=exclude EXCLUDE_OPERATOR_UPGRADE_TESTS=exclude EXCLUDE_FEATURE_GATED_TESTS=exclude EXCLUDE_PROMETHEUS_UPGRADE_TESTS=exclude $(MAKE) test-e2e
.PHONY: test-e2e-prometheus-all-namespaces
test-e2e-prometheus-all-namespaces:
- EXCLUDE_ALERTMANAGER_TESTS=exclude EXCLUDE_PROMETHEUS_TESTS=exclude EXCLUDE_THANOSRULER_TESTS=exclude EXCLUDE_OPERATOR_UPGRADE_TESTS=exclude FEATURE_GATED_TESTS=exclude EXCLUDE_PROMETHEUS_UPGRADE_TESTS=exclude $(MAKE) test-e2e
+ EXCLUDE_ALERTMANAGER_TESTS=exclude EXCLUDE_PROMETHEUS_TESTS=exclude EXCLUDE_THANOSRULER_TESTS=exclude EXCLUDE_OPERATOR_UPGRADE_TESTS=exclude EXCLUDE_FEATURE_GATED_TESTS=exclude EXCLUDE_PROMETHEUS_UPGRADE_TESTS=exclude $(MAKE) test-e2e
.PHONY: test-e2e-thanos-ruler
test-e2e-thanos-ruler:
- EXCLUDE_ALERTMANAGER_TESTS=exclude EXCLUDE_PROMETHEUS_TESTS=exclude EXCLUDE_PROMETHEUS_ALL_NS_TESTS=exclude EXCLUDE_OPERATOR_UPGRADE_TESTS=exclude FEATURE_GATED_TESTS=exclude EXCLUDE_PROMETHEUS_UPGRADE_TESTS=exclude $(MAKE) test-e2e
+ EXCLUDE_ALERTMANAGER_TESTS=exclude EXCLUDE_PROMETHEUS_TESTS=exclude EXCLUDE_PROMETHEUS_ALL_NS_TESTS=exclude EXCLUDE_OPERATOR_UPGRADE_TESTS=exclude EXCLUDE_FEATURE_GATED_TESTS=exclude EXCLUDE_PROMETHEUS_UPGRADE_TESTS=exclude $(MAKE) test-e2e
.PHONY: test-e2e-operator-upgrade
test-e2e-operator-upgrade:
- EXCLUDE_ALERTMANAGER_TESTS=exclude EXCLUDE_PROMETHEUS_TESTS=exclude EXCLUDE_PROMETHEUS_ALL_NS_TESTS=exclude EXCLUDE_THANOSRULER_TESTS=exclude FEATURE_GATED_TESTS=exclude EXCLUDE_PROMETHEUS_UPGRADE_TESTS=exclude $(MAKE) test-e2e
+ EXCLUDE_ALERTMANAGER_TESTS=exclude EXCLUDE_PROMETHEUS_TESTS=exclude EXCLUDE_PROMETHEUS_ALL_NS_TESTS=exclude EXCLUDE_THANOSRULER_TESTS=exclude EXCLUDE_FEATURE_GATED_TESTS=exclude EXCLUDE_PROMETHEUS_UPGRADE_TESTS=exclude $(MAKE) test-e2e
.PHONY: test-e2e-prometheus-upgrade
test-e2e-prometheus-upgrade:
- EXCLUDE_ALERTMANAGER_TESTS=exclude EXCLUDE_PROMETHEUS_TESTS=exclude EXCLUDE_PROMETHEUS_ALL_NS_TESTS=exclude EXCLUDE_THANOSRULER_TESTS=exclude FEATURE_GATED_TESTS=exclude EXCLUDE_OPERATOR_UPGRADE_TESTS=exclude $(MAKE) test-e2e
+ EXCLUDE_ALERTMANAGER_TESTS=exclude EXCLUDE_PROMETHEUS_TESTS=exclude EXCLUDE_PROMETHEUS_ALL_NS_TESTS=exclude EXCLUDE_THANOSRULER_TESTS=exclude EXCLUDE_FEATURE_GATED_TESTS=exclude EXCLUDE_OPERATOR_UPGRADE_TESTS=exclude $(MAKE) test-e2e
+
+.PHONY: test-e2e-images
+test-e2e-images: image
+ifeq (podman, $(CONTAINER_CLI))
+ podman save --quiet -o tmp/$(IMAGE_OPERATOR).tar -n $(KIND_CONTEXT) $(KIND_CONTEXT) $(IMAGE_OPERATOR):$(TAG)
+ podman save --quiet -o tmp/$(IMAGE_RELOADER).tar -n $(KIND_CONTEXT) $(IMAGE_RELOADER):$(TAG)
+ podman save --quiet -o tmp/$(IMAGE_WEBHOOK).tar -n $(KIND_CONTEXT) $(IMAGE_WEBHOOK):$(TAG)
+ kind load image-archive -n $(KIND_CONTEXT) tmp/$(IMAGE_OPERATOR).tar
+ kind load image-archive -n $(KIND_CONTEXT) tmp/$(IMAGE_RELOADER).tar
+ kind load image-archive -n $(KIND_CONTEXT) tmp/$(IMAGE_WEBHOOK).tar
+else
+ kind load docker-image -n $(KIND_CONTEXT) $(IMAGE_OPERATOR):$(TAG)
+ kind load docker-image -n $(KIND_CONTEXT) $(IMAGE_RELOADER):$(TAG)
+ kind load docker-image -n $(KIND_CONTEXT) $(IMAGE_WEBHOOK):$(TAG)
+endif
############
# Binaries #
@@ -418,4 +435,4 @@ $(TOOLS_BIN_DIR)/$(1):
endef
-$(foreach binary,$(K8S_GEN_BINARIES),$(eval $(call _K8S_GEN_VAR_TARGET_,$(binary))))
\ No newline at end of file
+$(foreach binary,$(K8S_GEN_BINARIES),$(eval $(call _K8S_GEN_VAR_TARGET_,$(binary))))
diff --git a/README.md b/README.md
index e997db049b0..0ea9f70f2b9 100644
--- a/README.md
+++ b/README.md
@@ -97,8 +97,6 @@ matching deployments and configurations are kept in sync.
To learn more about the CRDs introduced by the Prometheus Operator have a look
at the [design](https://prometheus-operator.dev/docs/operator/design/) page.
-To automate the validation of your CRD configuration files, see the [linting](Documentation/user-guides/linting.md) page.
-
## Dynamic Admission Control
To prevent invalid Prometheus alerting and recording rules from causing failures in a deployed Prometheus instance,
@@ -182,6 +180,4 @@ common issues and frequently asked questions (FAQ).
## Acknowledgements
-prometheus-operator organization logo was created and contributed by [Bianca Cheng Costanzo](https://github.com/bia).
-
-Rebuild Image: Wed Sep 7 14:48:45 EDT 2022
+prometheus-operator organization logo was created and contributed by [Bianca Cheng Costanzo](https://github.com/bia).
\ No newline at end of file
diff --git a/RELEASE.md b/RELEASE.md
index 027bb702277..ad783e78cc3 100644
--- a/RELEASE.md
+++ b/RELEASE.md
@@ -2,49 +2,38 @@
Following [Prometheus](https://github.com/prometheus/prometheus/blob/main/RELEASE.md) and [Thanos](https://github.com/thanos-io/thanos/blob/main/docs/release-process.md), this project aims for a predictable release schedule.
-Release cadence of first pre-releases being cut is 6 weeks.
-
-| Release | Date of first pre-release (year-month-day) | Release shepherd |
-|---------|--------------------------------------------|-----------------------------------------|
-| v0.39 | 2020-05-06 | Pawel Krupa (GitHub: @paulfantom) |
-| v0.40 | 2020-06-17 | Lili Cosic (GitHub: @lilic) |
-| v0.41 | 2020-07-29 | Sergiusz Urbaniak (GitHub: @s-urbaniak) |
-| v0.42 | 2020-09-09 | Matthias Loibl (GitHub: @metalmatze) |
-| v0.43 | 2020-10-21 | Simon Pasquier (GitHub: @simonpasquier) |
-| v0.44 | 2020-12-02 | Pawel Krupa (GitHub: @paulfantom) |
-| v0.45 | 2021-01-13 | Lili Cosic (GitHub: @lilic) |
-| v0.46 | 2021-02-24 | Sergiusz Urbaniak (GitHub: @s-urbaniak) |
-| v0.47 | 2021-04-07 | Simon Pasquier (GitHub: @simonpasquier) |
-| v0.48 | 2021-05-19 | Matthias Loibl (GitHub: @metalmatze) |
-| v0.49 | 2021-06-30 | Pawel Krupa (GitHub: @paulfantom) |
-| v0.50 | 2021-08-11 | Pawel Krupa (GitHub: @paulfantom) |
-| v0.51 | 2021-09-22 | Simon Pasquier (GitHub: @simonpasquier) |
-| v0.52 | 2021-11-03 | Filip Petkovski (Github: @fpetkovski) |
-| v0.53 | 2021-12-15 | Simon Pasquier (GitHub: @simonpasquier) |
-| v0.54 | 2022-01-26 | Filip Petkovski (Github: @fpetkovski) |
-| v0.55 | 2022-03-09 | Philip Gough (GitHub: @PhilipGough) |
-| v0.56 | 2022-04-20 | Simon Pasquier (GitHub: @simonpasquier) |
-| v0.57 | 2022-06-01 | Simon Pasquier (GitHub: @simonpasquier) |
-| v0.58 | 2022-07-13 | Pawel Krupa (GitHub: @paulfantom) |
-| v0.59 | 2022-08-24 | Philip Gough (GitHub: @PhilipGough) |
-| v0.60 | 2022-10-05 | Simon Pasquier (GitHub: @simonpasquier) |
-| v0.61 | 2022-11-16 | Filip Petkovski (Github: @fpetkovski) |
-| v0.62 | 2022-12-28 | Simon Pasquier (GitHub: @simonpasquier) |
-| v0.63 | 2023-02-08 | Philip Gough (GitHub: @PhilipGough) |
-| v0.64 | 2023-03-22 | Simon Pasquier (GitHub: @simonpasquier) |
-| v0.65 | 2023-05-03 | Philip Gough (GitHub: @PhilipGough) |
-| v0.66 | 2023-06-14 | Arthur Sens (Github: @ArthurSens) |
-| v0.67 | 2023-07-26 | Simon Pasquier (GitHub: @simonpasquier) |
-| v0.68 | 2023-09-06 | Arthur Sens (Github: @ArthurSens) |
-| v0.69 | 2023-10-18 | Simon Pasquier (GitHub: @simonpasquier) |
-| v0.70 | 2023-11-29 | Pawel Krupa (GitHub: @paulfantom) |
-| v0.71 | 2024-01-10 | Simon Pasquier (GitHub: @simonpasquier) |
-| v0.72 | 2024-02-21 | Arthur Sens (Github: @ArthurSens) |
-| v0.73 | 2024-04-03 | Jayapriya Pai (Github: @slashpai) |
-| v0.74 | 2024-05-15 | **searching for volunteer** |
-| v0.75 | 2024-06-26 | **searching for volunteer** |
-
-# How to cut a new release
+The release cycle for cutting releases is every 6 weeks
+
+| Release | Date of release (year-month-day) | Release shepherd |
+|---------|----------------------------------|-------------------------------------------|
+| v0.78 | 2024-10-30 | **searching for volunteer** |
+| v0.77 | 2024-09-18 | **searching for volunteer** |
+| v0.76 | 2024-08-07 | Nicolas Takashi (Github: @nicolastakashi) |
+| v0.75 | 2024-06-26 | Jayapriya Pai (Github: @slashpai) |
+| v0.74 | 2024-05-15 | Simon Pasquier (GitHub: @simonpasquier) |
+| v0.73 | 2024-04-03 | Jayapriya Pai (Github: @slashpai) |
+| v0.72 | 2024-02-21 | Arthur Sens (Github: @ArthurSens) |
+| v0.71 | 2024-01-10 | Simon Pasquier (GitHub: @simonpasquier) |
+| v0.70 | 2023-11-29 | Pawel Krupa (GitHub: @paulfantom) |
+| v0.69 | 2023-10-18 | Simon Pasquier (GitHub: @simonpasquier) |
+| v0.68 | 2023-09-06 | Arthur Sens (Github: @ArthurSens) |
+| v0.67 | 2023-07-26 | Simon Pasquier (GitHub: @simonpasquier) |
+| v0.66 | 2023-06-14 | Arthur Sens (Github: @ArthurSens) |
+| v0.65 | 2023-05-03 | Philip Gough (GitHub: @PhilipGough) |
+
+If any of the maintainers is interested in volunteering please create a pull request against the [prometheus-operator/prometheus-operator](https://github.com/prometheus-operator/prometheus-operator) repository and propose yourself for the release series of your choice.
+
+## Release shepherd responsibilities
+
+The release shepherd is responsible for the entire release series of a major or minor release, including all patch releases. Some preparations should be done a few days in advance.
+
+* We aim to keep the main branch in a working state at all times. In principle, it should be possible to cut a release from main at any time. In practice, things might not work out as nicely. A few days before the release is scheduled, the shepherd should check the state of main. Following their best judgement, the shepherd should try to expedite features/bug fixes that are still in progress but should make it into the release. On the other hand, the shepherd may hold back merging last-minute invasive and risky changes that are better suited for the next major release.
+* On the date listed in the table above, the release shepherd cuts the release and creates a new branch called `release-