Prometheus and Grafana of type NodePort?

gaui · June 10, 2020, 3:44pm

I'm really curious, why are Prometheus and Grafana services of type NodePort? I don't want them to be publicly accessible on the node. Is it possible to change that and use Traefik as reverse-proxy instead?

github.com

containous/maesh/blob/master/helm/chart/maesh/charts/metrics/templates/prometheus.yaml#L186


  namespace: {{ .Release.Namespace }}
  labels:
    app: {{ .Release.Name | quote }}
    chart: {{ include "maesh.chartLabel" . | quote }}
    release: {{ .Release.Name | quote }}
    heritage: {{ .Release.Service | quote }}
    component: prometheus
  annotations:
    prometheus.io/scrape: 'true'
spec:
  type: NodePort
  ports:
    - port: 9090
      protocol: TCP
      name: webui
  selector:
    app: prometheus
    component: core

github.com

containous/maesh/blob/master/helm/chart/maesh/charts/metrics/templates/grafana.yaml#L164


metadata:
  name: grafana
  namespace: {{ .Release.Namespace }}
  labels:
    app: {{ .Release.Name | quote }}
    chart: {{ include "maesh.chartLabel" . | quote }}
    release: {{ .Release.Name | quote }}
    heritage: {{ .Release.Service | quote }}
    component: grafana
spec:
  type: NodePort
  ports:
    - port: 3000
  selector:
    app: grafana
    component: core

---
{{- $files := .Files }}
{{- $ns := .Release.Namespace }}
{{- range $path, $bytes := .Files.Glob "dashboards/*.json" }}

kevinpollet · June 12, 2020, 8:43am

Hi @gaui,

Thanks for your interest in Maesh

You're right, and I also think that Prometheus and Grafana should not be exposed through a NodePort by default or at least that this behaviour should be configurable.

To expose Prometheus or Grafana through Traefik ingress controller, you have to create an Ingress resource for those services as explained here. I'm not sure that it's Maesh role to create an Ingress resource because it is specific to the user needs, e.g. path/host routing, TLS, entry points, ...

I've created the following issue: https://github.com/containous/maesh/issues/631

Topic		Replies	Views
Traefik as Reverse Proxy for Grafana and Prometheus Traefik v2 file	3	5086	October 29, 2019
Problem with prometheus/grafana - traefik/docker Traefik v2 docker , metrics	4	3737	December 18, 2020
New k3s cluster, can't contact prometheus-operator's prometheus, grafana backends Traefik v2 kubernetes-ingress	0	292	April 22, 2024
Traefik does not expose prometheus Port Traefik v3 (latest) kubernetes-ingress , metrics	0	87	August 21, 2024
Monitor Traefik v2 Ingress controller with Prometheus by host Traefik v2 kubernetes-ingress , metrics	2	700	January 16, 2024

Prometheus and Grafana of type NodePort?

Related topics