Turn AWS VPC CNI into a control plane add-on

.github: allow dispatching version updates manually and run on predefined schedule

Add automated dependency update to the remaining supported release branch

[bot] [main] Automated version update

Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>

Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>

Temporarily switch to manual dependencies update workflow to test if it
is updated correctly across the different release branch.

Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>

Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>

eks: Revert back to `awscni_total_ip_addresses`-based alert

changing node exporter ignore list

Add resource requests and limits to prometheus-adapter container

Use @prom-op-bot for automatic updates

[bot] Automated version update

eks: Fix CNI metrics relabelings

Signed-off-by: Maxime Brunet <maxime.brunet@paytm.com>

node.libsonnet: Fix small typo

Signed-off-by: Manuel Rüger <manuel@rueg.eu>

jsonnet/kube-prometheus: point to runbooks.prometheus-operator.dev

.github: add PR template

Signed-off-by: paulfantom <pawel@krupa.net.pl>

Signed-off-by: paulfantom <pawel@krupa.net.pl>

Alerts best practices

jsonnet: Drop cAdvisor metrics without (pod, namespace) label pairs.

jsonnet: Drop cAdvisor metrics with no (pod, namespace) labels while preserving ability to monitor system services resource usage

The following provides a description and cardinality estimation based on the tests in a local cluster:

container_blkio_device_usage_total - useful for containers, but not for system services (nodes*disks*services*operations*2)
container_fs_.*                    - add filesystem read/write data (nodes*disks*services*4)
container_file_descriptors         - file descriptors limits and global numbers are exposed via (nodes*services)
container_threads_max              - max number of threads in cgroup. Usually for system services it is not limited (nodes*services)
container_threads                  - used threads in cgroup. Usually not important for system services (nodes*services)
container_sockets                  - used sockets in cgroup. Usually not important for system services (nodes*services)
container_start_time_seconds       - container start. Possibly not needed for system services (nodes*services)
container_last_seen                - Not needed as system services are always running (nodes*services)
container_spec_.*                  - Everything related to cgroup specification and thus static data (nodes*services*5)