Fix redis ssl issues 3

infrastructure/monitoring/k8s-infra/node-exporter-values.yaml

@@ -0,0 +1,97 @@
+# Prometheus Node Exporter Helm Values for Bakery IA
+# Chart: prometheus-community/prometheus-node-exporter
+# Documentation: https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus-node-exporter
+#
+# Install Command:
+#   helm install node-exporter prometheus-community/prometheus-node-exporter \
+#     -n bakery-ia -f node-exporter-values.yaml
+
+# Image configuration
+image:
+  registry: quay.io
+  repository: prometheus/node-exporter
+  tag: ""  # Uses chart default (latest stable)
+  pullPolicy: IfNotPresent
+
+# Resource limits optimized for MicroK8s VPS
+resources:
+  requests:
+    cpu: 10m
+    memory: 32Mi
+  limits:
+    cpu: 200m
+    memory: 64Mi
+
+# Service configuration
+service:
+  type: ClusterIP
+  port: 9100
+  targetPort: 9100
+  annotations:
+    prometheus.io/scrape: "true"
+
+# DaemonSet update strategy
+updateStrategy:
+  type: RollingUpdate
+  rollingUpdate:
+    maxUnavailable: 1
+
+# Host network - required for accurate network metrics
+hostNetwork: true
+hostPID: true
+hostRootFsMount:
+  enabled: true
+  mountPropagation: HostToContainer
+
+# Node selector
+nodeSelector: {}
+
+# Tolerations - allow scheduling on all nodes including control plane
+tolerations:
+  - effect: NoSchedule
+    operator: Exists
+
+# Affinity rules
+affinity: {}
+
+# Pod security context
+podSecurityContext:
+  fsGroup: 65534
+  runAsGroup: 65534
+  runAsNonRoot: true
+  runAsUser: 65534
+
+# Container security context
+securityContext:
+  readOnlyRootFilesystem: true
+
+# RBAC configuration
+rbac:
+  create: true
+  pspEnabled: false
+
+# Service account
+serviceAccount:
+  create: true
+  name: ""
+  annotations: {}
+
+# Prometheus scrape annotations
+prometheus:
+  monitor:
+    enabled: false  # We use SigNoz OTel collector scraping instead
+
+# Extra arguments for node-exporter
+extraArgs:
+  - --collector.filesystem.mount-points-exclude=^/(dev|proc|sys|var/lib/docker/.+|var/lib/kubelet/.+)($|/)
+  - --collector.filesystem.fs-types-exclude=^(autofs|binfmt_misc|bpf|cgroup2?|configfs|debugfs|devpts|devtmpfs|fusectl|hugetlbfs|iso9660|mqueue|nsfs|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|selinuxfs|squashfs|sysfs|tracefs)$
+
+# Collectors to enable (default set)
+# Disable collectors that are not useful or cause issues
+extraHostVolumeMounts: []
+
+# Sidecar containers
+sidecars: []
+
+# Init containers
+initContainers: []