Skip to content

Use Kyverno to provision snmp resources in Prometheus

Cristian Manda requested to merge kyverno-snmp-resources into main

What does this MR do and why?

Adds the missing Kyverno policy mentioned in !1888 (merged) to automatically populate/depopulate a configmap with the snmp details of BaremetalHosts based on the snmp-enabled: "true" label and some annotations and feeds this configmap to Prometheus config, reducing the need to maintain also .Values.snmp.devices in sync with the barematal hosts. The current .Values.snmp.devices remains available to allow monitoring other equipment.

In the baremetalhosts values this will look like:

      bmh_metadata:
        labels:
          snmp-enabled: "true"
        annotations:
          sylva.org/snmp-auth: dell1
          sylva.org/snmp-hw-type: dell_idrac
          sylva.org/snmp-endpoint: 10.10.10.10

Also moves .snmp.auth from the example values.yaml to secrets.yaml

Closes: #532 (closed) #651 (closed)

Edited by Cristian Manda

Merge request reports