kubernetes/pkg/controller/certificates/rootcacertpublisher
Stanislav Laznicka b67bd722a9
rootcacertpublisher: drop the namespace label from metrics to reduce its cardinality
The `root_ca_cert_publisher_sync_duration_seconds` metric tracks the sync
duration in the root CA cert publisher per code and namespace. In
clusters with a high namespace turnover (like CI clusters), this may
cause the kube-controller-manager to expose over 100k series to
Prometheus, which may cause degradation of that service.

Drop the `namespace` label to remove the metrics' cardinality, tracking
this metric by namespace does not justify the impact of keeping it.
2021-09-16 14:05:32 +02:00
..
metrics_test.go rootcacertpublisher: drop the namespace label from metrics to reduce its cardinality 2021-09-16 14:05:32 +02:00
metrics.go rootcacertpublisher: drop the namespace label from metrics to reduce its cardinality 2021-09-16 14:05:32 +02:00
publisher_test.go include description of what kube-root-ca.crt can be used to verify 2021-04-08 10:43:41 -04:00
publisher.go rootcacertpublisher: drop the namespace label from metrics to reduce its cardinality 2021-09-16 14:05:32 +02:00