initial upload of k8s assets

templates/kubernetes/drop-rules/cadvisor_allowlist.yaml

@@ -0,0 +1,11 @@
+api_version: v1/config
+kind: DropRule
+spec:
+  slug: cadvisor_allowlist
+  name: Allowlist - cadvisor
+  mode: ENABLED
+  filters:
+    - name: __name__
+      value_glob: container_*
+    - name: __name__!
+      value_glob: '{container_cpu_cfs_throttled_periods_total,container_cpu_usage_seconds_total,container_fs_limit_bytes,container_fs_reads_bytes_total,container_fs_writes_bytes_total,container_last_seen,container_memory_usage_bytes,container_memory_working_set_bytes,container_network_receive_bytes_total,container_network_receive_errors_total,container_network_receive_packets_dropped_total,container_network_transmit_bytes_total,container_network_transmit_errors_total,container_network_transmit_packets_dropped_total,container_oom_events_total,container_oom_events_total,container_spec_cpu_period,container_spec_cpu_quota,container_spec_memory_limit_bytes,machine_cpu_cores,machine_memory_bytes,container_accelerator_duty_cycle,container_accelerator_memory_total,container_accelerator_memory_used,container_cpu_cfs_periods_total,container_cpu_cfs_throttled_seconds_total,container_start_time_seconds,container_fs_usage_bytes}'

templates/kubernetes/drop-rules/kube_state_allowlist.yaml

@@ -0,0 +1,11 @@
+api_version: v1/config
+kind: DropRule
+spec:
+  slug: kube_state_metrics_allowlist
+  name: Allowlist - kube-state-metrics
+  mode: ENABLED
+  filters:
+    - name: __name__
+      value_glob: kube_*
+    - name: __name__!
+      value_glob: '{kube_cronjob_created,kube_cronjob_next_schedule_time,kube_cronjob_spec_starting_deadline_seconds,kube_cronjob_spec_suspend,kube_cronjob_status_active,kube_cronjob_status_last_schedule_time,kube_cronjob_status_last_successful_time,kube_daemonset_status_current_number_scheduled,kube_daemonset_status_desired_number_scheduled,kube_daemonset_status_number_available,kube_daemonset_status_number_misscheduled,kube_daemonset_status_number_ready,kube_deployment_spec_replicas,kube_deployment_spec_paused,kube_deployment_status_replicas,kube_deployment_status_replicas_available,kube_deployment_status_replicas_ready,kube_deployment_status_replicas_unavailable,kube_deployment_status_replicas_updated,kube_horizontalpodautoscaler_spec_max_replicas,kube_horizontalpodautoscaler_spec_min_replicas,kube_horizontalpodautoscaler_spec_target_metric,kube_horizontalpodautoscaler_status_current_replicas,kube_horizontalpodautoscaler_status_desired_replicas,kube_job_complete,kube_job_failed,kube_job_status_failed,kube_job_info,kube_job_status_active,kube_job_status_start_time,kube_namespace_status_phase,kube_node_created,kube_node_info,kube_node_spec_unschedulable,kube_node_status_allocatable,kube_node_status_capacity,kube_node_status_condition,kube_persistentvolume_capacity_bytes,kube_persistentvolume_info,kube_pod_container_resource_limits,kube_pod_container_resource_requests,kube_pod_container_status_last_terminated_exitcode,kube_pod_container_status_last_terminated_reason,kube_pod_container_status_ready,kube_pod_container_status_restarts_total,kube_pod_container_status_running,kube_pod_container_status_terminated,kube_pod_container_status_terminated_reason,kube_pod_container_status_waiting,kube_pod_container_status_waiting_reason,kube_pod_status_phase,kube_pod_status_ready,kube_pod_status_reason,kube_pod_status_scheduled,kube_pod_status_unschedulable,kube_poddisruptionbudget_created,kube_poddisruptionbudget_status_current_healthy,kube_poddisruptionbudget_status_desired_healthy,kube_poddisruptionbudget_status_expected_pods,kube_poddisruptionbudget_status_observed_generation,kube_poddisruptionbudget_status_pod_disruptions_allowed,kube_resourcequota,kube_statefulset_replicas,kube_statefulset_status_replicas,kube_statefulset_status_replicas_current,kube_statefulset_status_replicas_ready,kube_statefulset_status_replicas_updated,kube_statefulset_status_replicas_desired,kube_pod_info,kube_service_info,kube_deployment_labels,kube_ingress_info,kube_statefulset_labels,kube_daemonset_labels,kube_persistentvolumeclaim_info,kube_hpa_labels,kube_configmap_info,kube_secret_info,kube_networkpolicy_labels,kube_pod_container_info,kube_deployment_created,kube_service_spec_type,kube_replicaset_status_replicas,kube_replicaset_spec_replicas,kube_pod_labels,kube_namespace_labels,kube_endpoint_info,kube_deployment_labels,kube_statefulset_labels,kube_daemonset_labels,kube_hpa_labels,kube_networkpolicy_labels,kube_replicaset_status_ready_replicas}'

templates/kubernetes/drop-rules/kubelet_allowlist.yaml

@@ -0,0 +1,13 @@
+api_version: v1/config
+kind: DropRule
+spec:
+  slug: kubelet_allowlist
+  name: Allowlist - kubelet
+  created_at: "2024-10-24T17:53:15.000Z"
+  updated_at: "2024-12-10T19:57:37.000Z"
+  mode: ENABLED
+  filters:
+    - name: __name__
+      value_glob: kubelet_*
+    - name: __name__!
+      value_glob: '{kubelet_volume_stats_available_bytes,kubelet_volume_stats_capacity_bytes,kubelet_volume_stats_capacity_bytes,kubelet_volume_stats_inodes,kubelet_volume_stats_inodes_used,kubelet_volume_stats_used_bytes,kubelet_volume_stats_capacity_bytes,kubelet_volume_stats_inodes,kubelet_volume_stats_inodes_used,kubelet_volume_stats_used_bytes,kubelet_node_name,kubelet_pod_worker_duration_seconds_bucket,kubelet_volume_stats_available_bytes,kubelet_volume_stats_capacity_bytes,kubelet_volume_stats_inodes,kubelet_volume_stats_inodes_free,kubelet_volume_stats_inodes_used,kubelet_volume_stats_used_bytes,kube_hpa_spec_min_replicas,kube_hpa_status_current_replicas,kubelet_http_inflight_requests}'

templates/kubernetes/manifest.yaml

@@ -123,3 +123,28 @@ asset_list:
     description: A statefulset runs a group of pods, and maintains a sticky identity
       for each of those pods. this is useful for managing applications that need persistent
       storage or a stable, unique network identity.
+  - asset_type: DropRule
+    name: Allowlist - cadvisor
+    slug: cadvisor_allowlist
+    file: drop-rules/cadvisor-allowlist.yaml
+    config_required: 'no'
+    author: Chronosphere
+    source: CS
+    description: An allow list for Cadvisor metrics. This drop rule allows you to
+      keep only the metrics that are relevant for your use case, while dropping the rest.
+  - asset_type: DropRule
+    name: Allowlist - Kube State Metrics
+    slug: kube_state_metrics_allowlist
+    file: drop-rules/kube-state-allowlist.yaml
+    config_required: 'no'
+    author: Chronosphere
+    source: CS
+    description: An allow list for Kube State Metrics. This drop rule allows you to keep only the metrics that are relevant for your use case, while dropping the rest.
+  - asset_type: DropRule
+    name: Allowlist - kubelet
+    slug: kubelet_allowlist
+    file: drop-rules/kubelet-allowlist.yaml
+    config_required: 'no'
+    author: Chronosphere
+    source: CS
+    description: An allow list for Kubelet metrics. This drop rule allows you to keep only the metrics that are relevant for your use case, while dropping the rest.