zero-trust-observability/prometheus-vmagent.yaml at main · corporate-gadfly/zero-trust-observability · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
global:
  scrape_interval: 15s
  external_labels:
    cluster: 'openvox-demo'
    environment: 'development'

scrape_configs:
  # VictoriaMetrics self-monitoring
  - job_name: 'victoria-metrics'
    static_configs:
      - targets: ['victoria-metrics:8428']
        labels:
          service: 'victoria-metrics'

  # vmagent self-monitoring
  - job_name: 'vmagent'
    static_configs:
      - targets: ['vmagent:8429']
        labels:
          service: 'vmagent'

  # Grafana monitoring
  - job_name: 'grafana'
    static_configs:
      - targets: ['grafana:3000']
        labels:
          service: 'grafana'
    metrics_path: '/metrics'

  # File-based service discovery for OpenVox-exported targets
  # This will automatically discover apache_exporter instances with mTLS
  - job_name: 'openvox-exported-targets'
    file_sd_configs:
      - files:
          - '/etc/vmagent/targets.d/*.yaml'

    # mTLS configuration for connecting to Caddy-protected exporters
    scheme: https
    tls_config:
      ca_file: /etc/puppetlabs/puppet/ssl/certs/ca.pem
      cert_file: /etc/puppetlabs/puppet/ssl/certs/vmagent.local.pem
      key_file: /etc/puppetlabs/puppet/ssl/private_keys/vmagent.local.pem
      insecure_skip_verify: false