categraf/k8s/scrape_with_token.yaml

global:
  scrape_interval: 15s
  external_labels:
    cluster: test
    replica: 0
scrape_configs:
  #- job_name: "categraf-out"
  #  static_configs:
  #    - targets: ["172.16.6.171:8080"]
  - job_name: "apiserver"
    metrics_path: "/metrics"
    kubernetes_sd_configs:
      - role: endpoints
        # apiserver lvs address or service ip:port eg. https://172.31.0.1:443
        api_server: "https://${KUBERNETES_SERVICE_HOST}:${KUBERNETES_SERVICE_PORT_HTTPS}"
        bearer_token_file: /path/to/token
        tls_config: 
          insecure_skip_verify: true
    scheme: https
    tls_config:
      insecure_skip_verify: true
    bearer_token_file: /path/to/token
    relabel_configs:
      - source_labels:
          [
            __meta_kubernetes_namespace,
            __meta_kubernetes_service_name,
            __meta_kubernetes_endpoint_port_name,
          ]
        action: keep
        regex: default;kubernetes;https

  - job_name: "controller-manager"
    metrics_path: "/metrics"
    kubernetes_sd_configs:
      - role: endpoints
        api_server: "https://${KUBERNETES_SERVICE_HOST}:${KUBERNETES_SERVICE_PORT_HTTPS}"
        bearer_token_file: /path/to/token
        tls_config: 
          insecure_skip_verify: true
    scheme: https
    tls_config:
      insecure_skip_verify: true
    bearer_token_file: /path/to/token
    relabel_configs:
      - source_labels:
          [
            __meta_kubernetes_namespace,
            __meta_kubernetes_service_name,
            __meta_kubernetes_endpoint_port_name,
          ]
        action: keep
        regex: kube-system;kube-controller-manager;https

  - job_name: "scheduler"
    metrics_path: "/metrics"
    kubernetes_sd_configs:
      - role: endpoints
        api_server: "https://${KUBERNETES_SERVICE_HOST}:${KUBERNETES_SERVICE_PORT_HTTPS}"
        bearer_token_file: /path/to/token
        tls_config: 
          insecure_skip_verify: true
    scheme: https
    tls_config:
      insecure_skip_verify: true
    bearer_token_file: /path/to/token
    relabel_configs:
      - source_labels:
          [
            __meta_kubernetes_namespace,
            __meta_kubernetes_service_name,
            __meta_kubernetes_endpoint_port_name,
          ]
        action: keep
        regex: kube-system;kube-scheduler;https

  - job_name: "coredns"
    metrics_path: "/metrics"
    kubernetes_sd_configs:
      - role: endpoints
        # apiserver lvs address or service ip:port eg. https://172.31.0.1:443
        api_server: "https://${KUBERNETES_SERVICE_HOST}:${KUBERNETES_SERVICE_PORT_HTTPS}"
        bearer_token_file: /path/to/token
        tls_config: 
          insecure_skip_verify: true
    scheme: http
    relabel_configs:
      - source_labels:
          [
            __meta_kubernetes_namespace,
            __meta_kubernetes_service_name,
            __meta_kubernetes_endpoint_port_name,
          ]
        action: keep
        regex: kube-system;kube-dns;metrics

remote_write:
  - url: 'http://${NSERVER_ADDR}/prometheus/v1/write'