Prometheus and Grafana of type NodePort?

gaui · June 10, 2020, 3:44pm

I'm really curious, why are Prometheus and Grafana services of type NodePort? I don't want them to be publicly accessible on the node. Is it possible to change that and use Traefik as reverse-proxy instead?

github.com

containous/maesh/blob/master/helm/chart/maesh/charts/metrics/templates/prometheus.yaml#L186


  namespace: {{ .Release.Namespace }}
  labels:
    app: {{ .Release.Name | quote }}
    chart: {{ include "maesh.chartLabel" . | quote }}
    release: {{ .Release.Name | quote }}
    heritage: {{ .Release.Service | quote }}
    component: prometheus
  annotations:
    prometheus.io/scrape: 'true'
spec:
  type: NodePort
  ports:
    - port: 9090
      protocol: TCP
      name: webui
  selector:
    app: prometheus
    component: core

github.com

containous/maesh/blob/master/helm/chart/maesh/charts/metrics/templates/grafana.yaml#L164


metadata:
  name: grafana
  namespace: {{ .Release.Namespace }}
  labels:
    app: {{ .Release.Name | quote }}
    chart: {{ include "maesh.chartLabel" . | quote }}
    release: {{ .Release.Name | quote }}
    heritage: {{ .Release.Service | quote }}
    component: grafana
spec:
  type: NodePort
  ports:
    - port: 3000
  selector:
    app: grafana
    component: core

---
{{- $files := .Files }}
{{- $ns := .Release.Namespace }}
{{- range $path, $bytes := .Files.Glob "dashboards/*.json" }}

kevinpollet · June 12, 2020, 8:43am

Hi @gaui,

Thanks for your interest in Maesh

You're right, and I also think that Prometheus and Grafana should not be exposed through a NodePort by default or at least that this behaviour should be configurable.

To expose Prometheus or Grafana through Traefik ingress controller, you have to create an Ingress resource for those services as explained here. I'm not sure that it's Maesh role to create an Ingress resource because it is specific to the user needs, e.g. path/host routing, TLS, entry points, ...

I've created the following issue: https://github.com/containous/maesh/issues/631

Topic		Replies	Views
Prometheus metrics routing issue Traefik v2 (latest) docker , metrics	0	1245	July 28, 2020
Passing tags from consul catalog to prometheus metrics Traefik v2 (latest) consul-catalog , metrics	3	386	September 23, 2022
Exporting metrics to prometheus Traefik v2 (latest) consul-catalog , metrics	0	575	July 29, 2021
Announcing Maesh 1.3 Blog	0	384	July 9, 2020
Accessing service using IP and path prefixes only Traefik v2 (latest) docker-swarm	0	621	November 17, 2020

Prometheus and Grafana of type NodePort?

Related Topics