Post

Wow there are so many faults: data plane inside kubernetes relies on kube apiserver because of dns service discovery… However prevention part looks promising. In these cases I always see how safe our infrastructure that manages cluster actually is and monitoring that makes it easy to find offenders

...there's even a OSS metric collection operator we maintain at Google with that optimization 🙃 github.com/GoogleCloudP... Another solution is to ofc have a cluster service discovery that pushes the targets to node agents, but pure (optimized) daemonset usually scales enough!

github.comGitHub - GoogleCloudPlatform/prometheus-engine: Google Cloud Managed Service for Prometheus libraries and manifests.Google Cloud Managed Service for Prometheus libraries and manifests. - GoogleCloudPlatform/prometheus-engine