# Glances — system monitoring
# Apply: kubectl apply -f manifests/glances.yaml
apiVersion: v1
kind: Namespace
metadata:
  name: glances
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: glances
  namespace: glances
spec:
  selector:
    matchLabels:
      app: glances
  template:
    metadata:
      labels:
        app: glances
    spec:
      nodeSelector:
        node-role: primary
      hostPID: true
      hostNetwork: true
      containers:
        - name: glances
          image: nicolargo/glances:latest-full
          ports:
            - containerPort: 61208
          env:
            - name: GLANCES_OPT
              value: "-w"
          securityContext:
            privileged: true
          volumeMounts:
            - name: host-proc
              mountPath: /proc
              readOnly: true
            - name: host-sys
              mountPath: /sys
              readOnly: true
            - name: host-etc
              mountPath: /etc/glances
              readOnly: true
      volumes:
        - name: host-proc
          hostPath:
            path: /proc
        - name: host-sys
          hostPath:
            path: /sys
        - name: host-etc
          hostPath:
            path: /etc
---
apiVersion: v1
kind: Service
metadata:
  name: glances
  namespace: glances
spec:
  selector:
    app: glances
  ports:
    - port: 61208
      targetPort: 61208
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: glances
  namespace: glances
  annotations:
    traefik.ingress.kubernetes.io/router.entrypoints: websecure
    traefik.ingress.kubernetes.io/router.tls: "true"
    cert-manager.io/cluster-issuer: internal-ca-issuer
spec:
  ingressClassName: traefik
  tls:
    - secretName: glances-tls
      hosts:
        - glances.home.arpa
  rules:
    - host: glances.home.arpa
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: glances
                port:
                  number: 61208