Compare revisions

PromOperatorBot · dependabot[bot] · Prometheus Operator Bot · 67a92a4b · 67a92a4b · 67a92a4b
--- a/go.mod
+++ b/go.mod
@@ -6,7 +6,7 @@ toolchain go1.22.5
 require (
 	github.com/Jeffail/gabs v1.4.0
-	github.com/prometheus/client_golang v1.21.0
+	github.com/prometheus/client_golang v1.21.1
 	k8s.io/apimachinery v0.31.3
 	k8s.io/client-go v0.31.3
 )

--- a/go.sum
+++ b/go.sum
@@ -75,8 +75,8 @@ github.com/onsi/gomega v1.19.0/go.mod h1:LY+I3pBVzYsTBU1AnDwOSxaYi9WoWiqgwooUqq9
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/prometheus/client_golang v1.21.0 h1:DIsaGmiaBkSangBgMtWdNfxbMNdku5IK6iNhrEqWvdA=
+github.com/prometheus/client_golang v1.21.1 h1:DOvXXTqVzvkIewV/CDPFdejpMCGeMcbGCQ8YOmu+Ibk=
-github.com/prometheus/client_golang v1.21.0/go.mod h1:U9NM32ykUErtVBxdvD3zfi+EuFkkaBvMb09mIfe0Zgg=
+github.com/prometheus/client_golang v1.21.1/go.mod h1:U9NM32ykUErtVBxdvD3zfi+EuFkkaBvMb09mIfe0Zgg=
 github.com/prometheus/client_model v0.6.1 h1:ZKSh/rekM+n3CeS952MLRAdFwIKqeY8b62p8ais2e9E=
 github.com/prometheus/client_model v0.6.1/go.mod h1:OrxVMOVHjw3lKMa8+x6HeMGkHMQyHDk9E3jmP2AmGiY=
 github.com/prometheus/common v0.62.0 h1:xasJaQlnWAeyHdUBeGjXmutelfJHWMRr+Fg4QszZ2Io=

--- a/jsonnet/kube-prometheus/versions.json
+++ b/jsonnet/kube-prometheus/versions.json
 {
-  "alertmanager": "0.28.0",
+  "alertmanager": "0.28.1",
-  "blackboxExporter": "0.25.0",
+  "blackboxExporter": "0.26.0",
  "grafana": "11.5.2",
  "kubeStateMetrics": "2.15.0",
  "nodeExporter": "1.9.0",
-  "prometheus": "3.2.0",
+  "prometheus": "3.2.1",
  "prometheusAdapter": "0.12.0",
  "prometheusOperator": "0.80.1",
  "kubeRbacProxy": "0.19.0",

--- a/jsonnetfile.lock.json
+++ b/jsonnetfile.lock.json
@@ -18,7 +18,7 @@
          "subdir": "contrib/mixin"
        }
      },
-      "version": "49f34c9751cc4e90456af612eae42d73f3709473",
+      "version": "d0b8863552c7ae42bb24db95cdc33babe049e6b8",
      "sum": "XmXkOCriQIZmXwlIIFhqlJMa0e6qGWdxZD+ZDYaN0Po="
    },
    {
@@ -78,8 +78,8 @@
          "subdir": "grafana-builder"
        }
      },
-      "version": "b843f6e76bce26cd089ad8cbc674b9b5f2d6eae0",
+      "version": "e6f3db92b7d61f348aed812087f2865b207d7148",
-      "sum": "yxqWcq/N3E/a/XreeU6EuE6X7kYPnG0AspAQFKOjASo="
+      "sum": "G7B6E5sqWirDbMWRhifbLRfGgRFbIh9WCYa6X3kMh6g="
    },
    {
      "source": {
@@ -88,7 +88,7 @@
          "subdir": "mixin-utils"
        }
      },
-      "version": "b843f6e76bce26cd089ad8cbc674b9b5f2d6eae0",
+      "version": "e6f3db92b7d61f348aed812087f2865b207d7148",
      "sum": "SRElwa/XrKAN8aZA9zvdRUx8iebl2It7KNQ7VFvMcBA="
    },
    {
@@ -118,8 +118,8 @@
          "subdir": ""
        }
      },
-      "version": "4ff562d5e8145940cf355f62cf2308895c4dca81",
+      "version": "1fa3b6731c93eac6d5b8c3c3b087afab2baabb42",
-      "sum": "kiL19fTbXOtNglsmT62kOzIf/Xpu+YwoiMPAApDXhkE="
+      "sum": "9dZ07oPK/NS5ARi3kasenwVeZlGCfAxBTwRS3rC6KWE="
    },
    {
      "source": {
@@ -128,7 +128,7 @@
          "subdir": "jsonnet/kube-state-metrics"
        }
      },
-      "version": "3527ceb4d5469295ef0904134c671f9815798d12",
+      "version": "3d73ddbd099fa537f0eb21dbe9b8c455aea8fb27",
      "sum": "3bioG7CfTfY9zeu5xU4yon6Zt3kYvNkyl492nOhQxnM="
    },
    {
@@ -138,7 +138,7 @@
          "subdir": "jsonnet/kube-state-metrics-mixin"
        }
      },
-      "version": "3527ceb4d5469295ef0904134c671f9815798d12",
+      "version": "3d73ddbd099fa537f0eb21dbe9b8c455aea8fb27",
      "sum": "qclI7LwucTjBef3PkGBkKxF0mfZPbHnn4rlNWKGtR4c="
    },
    {
@@ -148,7 +148,7 @@
          "subdir": "jsonnet/mixin"
        }
      },
-      "version": "76d3bc380d6005da299bbb572b1ab892e2f64b58",
+      "version": "3afdfd506b63c71fabdf9dcda7fc81c945208098",
      "sum": "gi+knjdxs2T715iIQIntrimbHRgHnpM8IFBJDD1gYfs=",
      "name": "prometheus-operator-mixin"
    },
@@ -159,8 +159,8 @@
          "subdir": "jsonnet/prometheus-operator"
        }
      },
-      "version": "76d3bc380d6005da299bbb572b1ab892e2f64b58",
+      "version": "3afdfd506b63c71fabdf9dcda7fc81c945208098",
-      "sum": "LctDdofQostvviE5y8vpRKWGGO1ZKO3dgJe7P9xifW0="
+      "sum": "gUcJK8hDguUI/LdXv/0rge7Tw3aiWN9PEaFlJULkeZI="
    },
    {
      "source": {
@@ -169,7 +169,7 @@
          "subdir": "doc/alertmanager-mixin"
        }
      },
-      "version": "ff470812937d56c64fd18fe700350b2dd8126df6",
+      "version": "efa05feffd644ba4accb526e98a8c6545d26a783",
      "sum": "Mf4h1BYLle2nrgjf/HXrBbl0Zk8N+xaoEM017o0BC+k=",
      "name": "alertmanager"
    },
@@ -180,7 +180,7 @@
          "subdir": "docs/node-mixin"
        }
      },
-      "version": "ae746c8b1d47f9d58cc3ac7f88b249eae93596d6",
+      "version": "0c10545e8dfb983f4c013281c4904be27f645de2",
      "sum": "NcpQ0Hz0qciUqmOYoAR0X8GUK5pH/QiUXm1aDNgvua0="
    },
    {
@@ -190,7 +190,7 @@
          "subdir": "documentation/prometheus-mixin"
        }
      },
-      "version": "86bb04783c8fd0321e76ccdfbf3ad3faf29d4e65",
+      "version": "e32d89af7fb8baee53770de74793e8b2fb828f52",
      "sum": "2c+wttfee9TwuQJZIkNV7Tekem74Qgc7iZ842P28rNw=",
      "name": "prometheus"
    },
@@ -212,7 +212,7 @@
          "subdir": "mixin"
        }
      },
-      "version": "151ae7490e4d578e4cd24dad665a8be04c89d138",
+      "version": "0414eef64d6a3897ae4c09ac2fcb0aa1c1fb9cd1",
      "sum": "ieCD4eMgGbOlrI8GmckGPHBGQDcLasE1rULYq56W/bs=",
      "name": "thanos-mixin"
    },

--- a/manifests/alertmanager-alertmanager.yaml
+++ b/manifests/alertmanager-alertmanager.yaml
@@ -6,11 +6,11 @@ metadata:
    app.kubernetes.io/instance: main
    app.kubernetes.io/name: alertmanager
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.28.0
+    app.kubernetes.io/version: 0.28.1
  name: main
  namespace: monitoring
 spec:
-  image: quay.io/prometheus/alertmanager:v0.28.0
+  image: quay.io/prometheus/alertmanager:v0.28.1
  nodeSelector:
    kubernetes.io/os: linux
  podMetadata:
@@ -19,7 +19,7 @@ spec:
      app.kubernetes.io/instance: main
      app.kubernetes.io/name: alertmanager
      app.kubernetes.io/part-of: kube-prometheus
-      app.kubernetes.io/version: 0.28.0
+      app.kubernetes.io/version: 0.28.1
  replicas: 3
  resources:
    limits:
@@ -34,4 +34,4 @@ spec:
    runAsNonRoot: true
    runAsUser: 1000
  serviceAccountName: alertmanager-main
-  version: 0.28.0
+  version: 0.28.1
--- a/manifests/alertmanager-networkPolicy.yaml
+++ b/manifests/alertmanager-networkPolicy.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: main
    app.kubernetes.io/name: alertmanager
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.28.0
+    app.kubernetes.io/version: 0.28.1
  name: alertmanager-main
  namespace: monitoring
 spec:

--- a/manifests/alertmanager-podDisruptionBudget.yaml
+++ b/manifests/alertmanager-podDisruptionBudget.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: main
    app.kubernetes.io/name: alertmanager
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.28.0
+    app.kubernetes.io/version: 0.28.1
  name: alertmanager-main
  namespace: monitoring
 spec:

--- a/manifests/alertmanager-prometheusRule.yaml
+++ b/manifests/alertmanager-prometheusRule.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: main
    app.kubernetes.io/name: alertmanager
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.28.0
+    app.kubernetes.io/version: 0.28.1
    prometheus: k8s
    role: alert-rules
  name: alertmanager-main-rules

--- a/manifests/alertmanager-secret.yaml
+++ b/manifests/alertmanager-secret.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: main
    app.kubernetes.io/name: alertmanager
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.28.0
+    app.kubernetes.io/version: 0.28.1
  name: alertmanager-main
  namespace: monitoring
 stringData:

--- a/manifests/alertmanager-service.yaml
+++ b/manifests/alertmanager-service.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: main
    app.kubernetes.io/name: alertmanager
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.28.0
+    app.kubernetes.io/version: 0.28.1
  name: alertmanager-main
  namespace: monitoring
 spec:

--- a/manifests/alertmanager-serviceAccount.yaml
+++ b/manifests/alertmanager-serviceAccount.yaml
@@ -7,6 +7,6 @@ metadata:
    app.kubernetes.io/instance: main
    app.kubernetes.io/name: alertmanager
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.28.0
+    app.kubernetes.io/version: 0.28.1
  name: alertmanager-main
  namespace: monitoring
--- a/manifests/alertmanager-serviceMonitor.yaml
+++ b/manifests/alertmanager-serviceMonitor.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: main
    app.kubernetes.io/name: alertmanager
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.28.0
+    app.kubernetes.io/version: 0.28.1
  name: alertmanager-main
  namespace: monitoring
 spec:

--- a/manifests/blackboxExporter-clusterRoleBinding.yaml
+++ b/manifests/blackboxExporter-clusterRoleBinding.yaml
@@ -5,7 +5,7 @@ metadata:
    app.kubernetes.io/component: exporter
    app.kubernetes.io/name: blackbox-exporter
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.25.0
+    app.kubernetes.io/version: 0.26.0
  name: blackbox-exporter
 roleRef:
  apiGroup: rbac.authorization.k8s.io

--- a/manifests/blackboxExporter-configuration.yaml
+++ b/manifests/blackboxExporter-configuration.yaml
@@ -46,6 +46,6 @@ metadata:
    app.kubernetes.io/component: exporter
    app.kubernetes.io/name: blackbox-exporter
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.25.0
+    app.kubernetes.io/version: 0.26.0
  name: blackbox-exporter-configuration
  namespace: monitoring
--- a/manifests/blackboxExporter-deployment.yaml
+++ b/manifests/blackboxExporter-deployment.yaml
@@ -5,7 +5,7 @@ metadata:
    app.kubernetes.io/component: exporter
    app.kubernetes.io/name: blackbox-exporter
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.25.0
+    app.kubernetes.io/version: 0.26.0
  name: blackbox-exporter
  namespace: monitoring
 spec:
@@ -23,14 +23,14 @@ spec:
        app.kubernetes.io/component: exporter
        app.kubernetes.io/name: blackbox-exporter
        app.kubernetes.io/part-of: kube-prometheus
-        app.kubernetes.io/version: 0.25.0
+        app.kubernetes.io/version: 0.26.0
    spec:
      automountServiceAccountToken: true
      containers:
      - args:
        - --config.file=/etc/blackbox_exporter/config.yml
        - --web.listen-address=:19115
-        image: quay.io/prometheus/blackbox-exporter:v0.25.0
+        image: quay.io/prometheus/blackbox-exporter:v0.26.0
        name: blackbox-exporter
        ports:
        - containerPort: 19115

--- a/manifests/blackboxExporter-networkPolicy.yaml
+++ b/manifests/blackboxExporter-networkPolicy.yaml
@@ -5,7 +5,7 @@ metadata:
    app.kubernetes.io/component: exporter
    app.kubernetes.io/name: blackbox-exporter
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.25.0
+    app.kubernetes.io/version: 0.26.0
  name: blackbox-exporter
  namespace: monitoring
 spec:

--- a/manifests/blackboxExporter-service.yaml
+++ b/manifests/blackboxExporter-service.yaml
@@ -5,7 +5,7 @@ metadata:
    app.kubernetes.io/component: exporter
    app.kubernetes.io/name: blackbox-exporter
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.25.0
+    app.kubernetes.io/version: 0.26.0
  name: blackbox-exporter
  namespace: monitoring
 spec:

--- a/manifests/blackboxExporter-serviceAccount.yaml
+++ b/manifests/blackboxExporter-serviceAccount.yaml
@@ -6,6 +6,6 @@ metadata:
    app.kubernetes.io/component: exporter
    app.kubernetes.io/name: blackbox-exporter
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.25.0
+    app.kubernetes.io/version: 0.26.0
  name: blackbox-exporter
  namespace: monitoring
--- a/manifests/blackboxExporter-serviceMonitor.yaml
+++ b/manifests/blackboxExporter-serviceMonitor.yaml
@@ -5,7 +5,7 @@ metadata:
    app.kubernetes.io/component: exporter
    app.kubernetes.io/name: blackbox-exporter
    app.kubernetes.io/part-of: kube-prometheus
-    app.kubernetes.io/version: 0.25.0
+    app.kubernetes.io/version: 0.26.0
  name: blackbox-exporter
  namespace: monitoring
 spec:

--- a/manifests/kubernetesControlPlane-prometheusRule.yaml
+++ b/manifests/kubernetesControlPlane-prometheusRule.yaml
@@ -617,6 +617,18 @@ spec:
      for: 15m
      labels:
        severity: warning
+    - alert: KubeNodePressure
+      annotations:
+        description: '{{ $labels.node }} on cluster {{ $labels.cluster }} has active Condition {{ $labels.condition }}. This is caused by resource usage exceeding eviction thresholds.'
+        runbook_url: https://runbooks.prometheus-operator.dev/runbooks/kubernetes/kubenodepressure
+        summary: Node has as active Condition.
+      expr: |
+        kube_node_status_condition{job="kube-state-metrics",condition=~"(MemoryPressure|DiskPressure|PIDPressure)",status="true"} == 1
+        and on (cluster, node)
+        kube_node_spec_unschedulable{job="kube-state-metrics"} == 0
+      for: 10m
+      labels:
+        severity: info
    - alert: KubeNodeUnreachable
      annotations:
        description: '{{ $labels.node }} is unreachable and some workloads may be rescheduled on cluster {{ $labels.cluster }}.'
@@ -661,6 +673,21 @@ spec:
      for: 15m
      labels:
        severity: warning
+    - alert: KubeNodeEviction
+      annotations:
+        description: Node {{ $labels.node }} on {{ $labels.cluster }} is evicting Pods due to {{ $labels.eviction_signal }}.  Eviction occurs when eviction thresholds are crossed, typically caused by Pods exceeding RAM/ephemeral-storage limits.
+        runbook_url: https://runbooks.prometheus-operator.dev/runbooks/kubernetes/kubenodeeviction
+        summary: Node is evicting pods.
+      expr: |
+        sum(rate(kubelet_evictions{job="kubelet", metrics_path="/metrics"}[15m])) by(cluster, eviction_signal, instance)
+        * on (cluster, instance) group_left(node)
+        max by (cluster, instance, node) (
+          kubelet_node_name{job="kubelet", metrics_path="/metrics"}
+        )
+        > 0
+      for: 0s
+      labels:
+        severity: info
    - alert: KubeletPlegDurationHigh
      annotations:
        description: The Kubelet Pod Lifecycle Event Generator has a 99th percentile duration of {{ $value }} seconds on node {{ $labels.node }} on cluster {{ $labels.cluster }}.
No results found