rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(prometheus): scrapeTimeout must be <= scrapeInterval — authentik/nginx SMs (60s>30s) + global (60s>30s) blocked operator config gen, no Prometheus STS created

Browse Source
This commit is contained in:
Story Crater Bot
2026-07-21 11:08:23 -07:00
parent 88f8a764de
commit 3e7238f71c
3 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/bootstrap/ingress/nginx-values.yaml
+1 -1
View File
@@ -75,4 +75,4 @@ controller:
enabled: true enabled: true
namespace: ingress-nginx namespace: ingress-nginx
interval: 30s interval: 30s
scrapeTimeout: 60s scrapeTimeout: 30s
k8s/platform/monitoring/prometheus-values.yaml
+4 -3
View File
@@ -29,9 +29,10 @@ prometheus:
retention: 15d retention: 15d
retentionSize: "18GB" retentionSize: "18GB"
# Scrape timeout: increased to 60s to tolerate 5+ second network latency spikes # scrapeTimeout MUST be <= scrapeInterval or the operator refuses to generate
# Default: 10s — too aggressive for latency-prone clusters # the Prometheus config ("scrapeTimeout greater than scrapeInterval") and no
scrapeInterval: 30s # STS is created. Use a larger interval to keep the 60s timeout headroom.
scrapeInterval: 60s
scrapeTimeout: 60s scrapeTimeout: 60s
evaluationInterval: 30s evaluationInterval: 30s
k8s/security/iam/authentik-values.yaml
+2 -2
View File
@@ -133,7 +133,7 @@ server:
enabled: true enabled: true
serviceMonitor: serviceMonitor:
enabled: true enabled: true
scrapeTimeout: 60s scrapeTimeout: 30s
# ── Authentik worker ────────────────────────────────────────────────────────── # ── Authentik worker ──────────────────────────────────────────────────────────
# Runs background tasks: email delivery, LDAP sync, flow policy evaluation, # Runs background tasks: email delivery, LDAP sync, flow policy evaluation,
@@ -169,7 +169,7 @@ worker:
enabled: true enabled: true
serviceMonitor: serviceMonitor:
enabled: true enabled: true
scrapeTimeout: 60s scrapeTimeout: 30s
# ── PostgreSQL (external: CloudNativePG cluster in ddb namespace) ───────────── # ── PostgreSQL (external: CloudNativePG cluster in ddb namespace) ─────────────
# Authentik connects to the centralized ddb-cluster (1 primary + 2 replicas with pgvector). # Authentik connects to the centralized ddb-cluster (1 primary + 2 replicas with pgvector).